Network Architect

Expert Network Architect

The incumbent will act as Expert Network Architect for the DOT Transportation Safety Management and Operations (TSMO) Technology Program as a team member focusing on the overall design, structure, and future direction of the network infrastructure that seamlessly and securely integrates both Information Technology (IT) and Operational Technology (OT) systems. This role is critical for ensuring the secure, reliable, and efficient operation of the NYS TSMO complex transportation networks that integrate both information technology (IT) and operational technology (OT) systems.

Day-to-Day Tasks:

• Define and articulate the long-term vision for the organization's IT/OT network infrastructure, aligning it with transportation system goals, technological advancements, and business objectives.
• Develop and maintain a multi-year network roadmap, identifying key initiatives, technology investments, and migration strategies.
• Conduct thorough assessments of existing network infrastructure, identifying gaps, risks, and opportunities for improvement.
• Guide the design and architecture of highly available, scalable, secure, and resilient network solutions for diverse transportation systems (e.g., traffic management, ITS, ATMS).
• Create detailed network designs, including logical and physical topologies, IP addressing schemes, routing protocols, and Quality of Service (QoS) policies.
• Design network segmentation strategies to isolate critical OT systems from IT networks, enhancing security and operational integrity.
• Architect solutions for IT/OT convergence, ensuring seamless and secure data exchange between different operational domains.
• Evaluate and select appropriate network hardware, software, and services from various vendors.
• Establish and enforce robust network security policies and procedures across both IT and OT environments, adhering to industry's best practices and regulatory requirements (e.g., NIST).
• Design and implement security controls, including firewalls, Intrusion Detection/Prevention Systems (IDS/IPS), VPNs, network access control (NAC), and encryption.
• Conduct regular security risk assessments, vulnerability analyses, and penetration testing of network infrastructure.
• Ensure network designs comply with relevant cybersecurity standards and contribute to overall system resilience.
• Support internal and external audits related to network security and compliance.
• Ensure the optimal performance, availability, and reliability of all network components and services critical to transportation operations.
• Develop and implement network monitoring strategies, utilizing tools to track performance metrics, identify anomalies, and proactively address potential issues.
• Troubleshoot complex network problems, often under pressure, to minimize downtime and impact on transportation services.
• Design and implement disaster recovery and business continuity plans for network infrastructure.
• Stay at the forefront of emerging network technologies and trends relevant to transportation, such as 5G, IoT, AI/ML for network analytics, Software-Defined Networking (SDN), and cloud networking.
• Research, evaluate, and pilot new technologies to enhance network capabilities, efficiency, and security.
• Champion innovation and drive the adoption of advanced network solutions that can improve transportation system management and operations.
• Guide network-related projects, ensuring successful delivery within scope, budget, and timeline.
• Collaborate effectively with cross-functional teams, including IT operations, OT engineers, system integrators, cybersecurity teams, business teams, and external vendors.
• Provide technical guidance, and mentorship to network engineering teams.
• Manage vendor relationships, negotiate contracts, and oversee the implementation of vendor solutions.
• Maintain comprehensive and up-to-date network documentation, including architecture diagrams, configuration details, operational procedures, and security policies.
• Develop and deliver technical training and knowledge transfer to relevant personnel.

Required Qualifications:

• 84 months of experience in IT and OT networking including networking protocols (routing, switching and wireless protocols); enterprise-grade network hardware (Cisco, Palo Alto, Fortinet); network security principles and technologies; wireless networking technologies; and network monitoring and troubleshooting.
• 84 months of experience in designing and managing complex IT and OT networks within the transportation sector such as adaptive traffic signal control; safety and reliability standards; Intelligent Transportation Systems (ITS); and Advanced Traffic Management Systems (ATMS).
• 72 months of experience in architecting and implementing solutions that integrate IT and OT environments addressing IT/OT Convergence challenges; and real-time data processing and management.
• 72 months of experience in designing and managing specific networks needs of transportation sector technologies such as adaptive traffic signal control; safety and reliability standards; Intelligent Transportation Systems (ITS); and Advanced Traffic Management Systems (ATMS).
• 60 months of experience with IT and OT Network operational support including incident response and root cause analysis.
• 60 months of experience with Cybersecurity specific to IT/OT Convergence including implementation of layered security approaches; compliance with regulations and standards; and zero-trust architecture and implementation.
• 60 months of experience collaborating with cross-functional teams (business, technical and security); and, producing both written and verbal communication articulating secure networking concepts to both technical and non-technical audiences.
• MUST hold at least one of these: bachelor's degree in computer science, Information Technology or a closely related field or Cisco Certified Internetwork Expert (CCIE) - Enterprise MVP

Consulting Plus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by law. Reasonable accommodations are available for qualified individuals with disabilities during the application process.