Network Architect

Job Title: Network Architect - Expert

Task ID: HBITS-08-14915

Position Duration: 24 Months

Client: State of NY

Agency: Information Technology Services (ITS)
Please call View phone number on click.appcast.io | View phone number on click.appcast.io | View phone number on click.appcast.io or email at View email address on click.appcast.io



Description
Responsibilities include but not limited to the following:
1. Strategic Network Vision and Roadmap Development:

• Define and articulate the long-term vision for the organization's IT/OT network infrastructure, aligning it with transportation system goals, technological advancements, and business objectives.
• Develop and maintain a multi-year network roadmap, identifying key initiatives, technology investments, and migration strategies.
• Conduct thorough assessments of existing network infrastructure, identifying gaps, risks, and opportunities for improvement.

2. Architecture Design and Engineering:

• Guide the design and architecture of highly available, scalable, secure, and resilient network solutions for diverse transportation systems (e.g., traffic management, ITS, ATMS).
• Create detailed network designs, including logical and physical topologies, IP addressing schemes, routing protocols, and Quality of Service (QoS) policies.
• Design network segmentation strategies to isolate critical OT systems from IT networks, enhancing security and operational integrity.
• Architect solutions for IT/OT convergence, ensuring seamless and secure data exchange between different operational domains.
• Evaluate and select appropriate network hardware, software, and services from various vendors.

3. Network Security and Compliance:

• Establish and enforce robust network security policies and procedures across both IT and OT environments, adhering to industry's best practices and regulatory requirements (e.g., NIST).
• Design and implement security controls, including firewalls, Intrusion Detection/Prevention Systems (IDS/IPS), VPNs, network access control (NAC), and encryption.
• Conduct regular security risk assessments, vulnerability analyses, and penetration testing of network infrastructure.
• Ensure network designs comply with relevant cybersecurity standards and contribute to overall system resilience.
• Support internal and external audits related to network security and compliance.

4. Performance Optimization and Reliability:

• Ensure the optimal performance, availability, and reliability of all network components and services critical to transportation operations.
• Develop and implement network monitoring strategies, utilizing tools to track performance metrics, identify anomalies, and proactively address potential issues.
• Troubleshoot complex network problems, often under pressure, to minimize downtime and impact on transportation services .
• Design and implement disaster recovery and business continuity plans for network infrastructure.

5. Technology Evaluation and Innovation:

• Stay at the forefront of emerging network technologies and trends relevant to transportation, such as 5G, IoT, AI/ML for network analytics, Software
• Defined Networking (SDN), and cloud networking.
• Research, evaluate, and pilot new technologies to enhance network capabilities, efficiency, and security.
• Champion innovation and drive the adoption of advanced network solutions that can improve transportation system management and operations.

6. Project Leadership and Collaboration:

• Guide network-related projects, ensuring successful delivery within scope, budget, and timeline.
• Collaborate effectively with cross
• functional teams, including IT operations, OT engineers, system integrators, cybersecurity teams, business teams, and external vendors.
• Provide technical guidance, and mentorship to network engineering teams.
• Manage vendor relationships, negotiate contracts, and oversee the implementation of vendor solutions.

7. Documentation and Knowledge Management:

• Maintain comprehensive and up-to-date network documentation, including architecture diagrams, configuration details, operational procedures, and security policies.
• Develop and deliver technical training and knowledge transfer to relevant personnel.

Mandatory Qualifications 1 84 months of experience in IT and OT networking including networking protocols (routing, switching and wireless protocols); enterprise-grade network hardware (Cisco, Palo Alto, Fortinet); network security principles and technologies; wireless networking technologies; and network monitoring and troubleshooting 2 84 months of experience in designing and managing complex IT and OT networks within the transportation sector such as adaptive traffic signal control; safety and reliability standards; Intelligent Transportation Systems (ITS); and Advanced Traffic Management Systems (ATMS). 3 72 months of experience in architecting and implementing solutions that integrate IT and OT environments addressing IT/OT Convergence challenges; and real-time data processing and management 4 72 months of experience in designing and managing specific networks needs of transportation sector technologies such as adaptive traffic signal control; safety and reliability standards; Intelligent Transportation Systems (ITS); and Advanced Traffic Management Systems (ATMS). 5 60 months of experience with IT and OT Network operational support including incident response and root cause analysis. 6 60 months of experience with Cybersecurity specific to IT/OT Convergence including implementation of layered security approaches; compliance with regulations and standards; and zero-trust architecture and implementation. 7 60 months of experience collaborating with cross-functional teams (business, technical and security); and, producing both written and verbal communication articulating secure networking concepts to both technical and non-technical audiences 8 MUST hold at least one of these:
**bachelor's degree in computer science, Information Technology or a closely related field
**Cisco Certified Internetwork Expert (CCIE) - Enterprise Infrastructure, Security, or Service Provider
**Vendor-specific advanced certifications (e.g., Palo Alto Networks Certified Network Security Engineer - PCNSE
**Certified Information Systems Security Professional (CISSP) Required Documentation • Resume
• Copy of Candidate Identification
(i.e., Driver's License/Green Card/Visa and Passport if applicable)
• Any documents referenced in the above Requested Qualifications
(i.e., professional certifications, degrees, etc.)

Disclaimer: i-Link Solutions Inc. provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. We especially invite women, minorities, veterans, and individuals with disabilities to apply. EEO/AA/M/F/Vet/Disability