Network Engineer

Network EngineerReporting to the Director of Networking and Telecommunications, the Network Engineer installs, configures, maintains, and upgrades all campus wired and wireless network infrastructure equipment and related security services. Also, performs analytical, technical, and administrative work in planning, designing, and implementing network-based services and tools; and implements programs and functions that are related to enterprise security and network operations. The Network Engineer proactively audits and analyzes network performance and stability and makes recommendations for hardware and software upgrades, works with Information Security group to assist in the development and enforcement of network-related security policies, access control lists, and threat mitigation to ensure the security, availability, and performance of network services.Principal Duties and Responsibilities:Design, install and configure all wired and wireless network services, Internet connectivity, Network Access Control, and other related services.Work collaboratively with campus community and all departments under the division of Information Technology.Identify network security threats and evaluate how to proactively take steps to minimize their impact on the campus network, either through changes to firewall rule sets, packet shaping, packet analysis, client-side mitigation or any other means.Manage device registration system(s) for granting access to campus network resources and monitoring systems to identify potential malicious network activity, both internal and external.Serve as the subject matter experts on network/security threat detection tools and services.Design metrics and methods for measuring wireless performance and analyze results and propose solutions for correcting problems or improving the wireless network performance.Develop programs and command procedures to enhance the functionality and manageability of supported systems.Maintain accurate system change logs to track all device patch levels and network security policy changes.Evaluate program goals, operations and performance as required; develop and implement alternative procedures to improve performance and meet program objectives.Identify and adhere to open systems standards where applicable.Perform pre- and post-installation wireless site surveys to identify and correct wireless performance inefficiencies.Maintain systems and network logs to assist in identifying potential security threats or attacks/probes on IT systems and serve as the subject matter expert for the threat and vulnerability platform and metrics reporting.Consult with the Director of Networking and Telecommunications on the most unusual problems or policy matters.Maintain integrity and appropriate confidentiality in institutional and program operations.Contribute to the preparation of studies and reports containing findings and recommendations for the implementation of network performance monitoring, security and application software to meet the needs of the various users of MSUnet.Establish and maintain effective communication and cooperative working relationships with the institution's administrators, faculty and staff, government, and private agencies in order to accomplish the objectives of Information Technology.Develop appropriate communication with the user community to ensure transfer of operational, procedural, and policy information.Evaluate and recommend hardware and/or software to meet current and future needs on all supported campus platforms.Represent the university at conferences, seminars or meetings and serve on ad hoc and standing committees as required.Participate in operational support activities to ensure uninterrupted service delivery and timely resolution of incidents affecting core infrastructure.Perform other duties as assigned.Management retains the right to add or change job duties at any time.Qualifications:Required:Bachelor's degree in from an accredited college or university in Computer Science, Information Technology, or related discipline. Relevant IT certifications/equivalent experience supported by industry-recognized completed certifications in networking (CCNA preferred) and/or fiber optic technologies may be considered in lieu of degree.Minimum four years of professional experience in network administration, engineering and support.Working knowledge of Cisco ISE, Cisco Catalyst Center, Cisco StackWise Architecture, Cisco Prime, Infoblox (IPAM/DNS), NGFW, ASA and Firepower.Extensive knowledge of network protocols, products and services including: Ethernet, 802.1Q, 802.1X, TCP/IP, UDP, DNS, BGP, OSPF, EIGRP, PBR, VRF, VLAN, STP, SVI, LACP, EtherChannel, DHCP, VTP, HSRP, VRRP, SNMP, Netflow, IPSec, EAP, TLS, QOS, Wireshark, OTDR, UPoE, PoE+, PoE++, Etherscope, LinkSprinter, Syslog, Multicast and Unicast.Strong working knowledge of fiber optic design and operations, including differences between multimode (OM3/OM4/OM5) and single-mode (OS1/OS2), optical budgets, attenuation calculations, splice vs. patch management, polarity, high-capacity trunks (MPO/MTP), and uplink optics (10G/25G/40G/100G+). Ability to evaluate strand availability, pathway diversity, and high-availability routing in campus environments.Working Knowledge of Radio Frequencies/Wireless Technologies: Wireless Surveying tools, Ekahau, Spectrum Analyzers, NetAlly Air Check, 802.11a/b/g/n/ac/ax, 2.4GHz, 5GHz, 6GHz, RF Tuning/Optimization, RADIUS, WPA2 WPA3, CAPWAP, and HA SSO.Working Knowledge of data communications hardware and software including: Cisco Catalyst 96xx, 95xx, 93xx, 92xx, IOS-XE 17.x, 3850, routing hardware, FirePower and IDS/IPS services.Knowledge of NIST, Internet and local area network security practices and procedures.Working Knowledge of middleware/scripting language Example: Python, Ruby, bash, C, Perl, PHP, and/or AppleScript.Proven ability to implement and maintain industry best practices for the deployment, operation, and security of enterprise data communications systems in a production environment.Proven ability to establish productive partnerships and align cross-departmental initiatives that influence or depend on the unit's services.Ability to lift, rack, mount, and cable network equipment, including switches and related hardware, and safely operate standard and power installation tools.Preferred:Experience supporting and securing enterprise operating systems including: Red Hat Linux, Windows, and MacOS as well as an understanding of common vulnerabilities and secure configuration practices.Experience with systems and network auditing and scanning tools such as Nmap, tripwire, and Nessus in production environments.Working Knowledge of StatSeeker, NetDisco, CheckMK, Splunk, Scrutinizer and other monitoring tools.Working knowledge of data encryption technologies and secure communication protocols.Understanding of the higher education environment and the operational needs of the institution.Strong written and verbal communication skills with the ability to produce clear, concise and detailed documentation and correspondence.Ability to professionally represent the university at conferences and seminars.Procedure for Candidacy:Applicants should include a resume and cover letter describing how their background, skills and education match the needs of the University. When applying, please take a moment to carefully read and follow the steps in the application instructions.Salary Range$88,545.14-$110,690.73 AnnuallyThe position may also be eligible for comprehensive benefits, including health insurance, retirement plans, and tuition assistance. For further details, please visit: State University considers factors such as, but not limited to, scope and responsibilities of the position, candidate's relevant work experience, education, skills, and internal equity, when extending an offer.Salary offers for internal employees who are part of a collective bargaining unit (CBU) and are applying to a position that is within a CBU will be determined in accordance with contractual provisions.Inclusion StatementMontclair State University values access and educational excellence. We are committed to an environment of diverse perspectives which ensures that graduates will be civically engaged, committed to democracy, and prepared to thrive as global citizens. We foster a community that promotes varied experiences and voices. We seek applicants who will contribute diverse ideas and perspectives and who value an environment that promotes educational growth and advancement for all.EEO/AA Statement