Network Architect

Network Architect
DURATION: 24 Months

LOCATION : Albany, NY - Hybrid
The incumbent will act as Senior Network Architect/Engineer for the DOT Transportation Safety Management and Operations (TSMO) Technology Program as a team member building and maintaining the secure, reliable, and performant communication pathways that enable the integration and operation of both IT and OT systems, ensuring the smooth flow of data and the protection of critical industrial infrastructure. This role is critical in designing, building, and securing our critical infrastructure from evolving cyber threats, ensuring the safety, reliability and efficiency of our transportation networks.

Qualifications

• Network Architect- Designs and implements computer and information networks, such as local area networks (LAN), wide area networks (WAN), intranets, extranets, and other data communications networks. Performs network modeling, analysis, and planning.
• Senior- 60 - 84 Months: Candidate is able to work independently, without assistance and provides guidance to others. May have an advanced education.
• 72 months experience in foundational IT and OT networking including networking protocols (routing, switching and wireless protocols); network design and architecture; network security principles; and network monitoring and troubleshooting
• 72 months experience in designing, building, securing and managing IT and OT networks, with IT/OT convergence challenges and solutions preferably in the Transportation sector.
• 60 months experience in OT including network protocols; cybersecurity threats and vulnerabilities; IT/OT Convergence challenges; and real-time data processing and management
• 60 months experience in specific networks needs of transportation sector technologies such as adaptive traffic signal control; safety and reliability standards; Intelligent Transportation Systems (ITS); and Advanced Traffic Management Systems (ATMS).
• 60 months experience with IT and OT Network operational support including incident response and root cause analysis.
• 48 months experience with Cybersecurity specific to IT/OT Convergence including implementation of layered security approaches; compliance with regulations and standards; and zero-trust architecture and implementation
• 48 months experience collaboration with cross-functional teams (business, technical and security); and producing both written and verbal communication articulating secure networking concepts to both technical and non-technical audiences
• MUST hold at least one of these Certifications:
• **Cisco (CCNA, CCNP, CCIE)
• **CompTIA Network+/Security+
• **CISSP

Day-to-Day tasks

• Design, implement, and maintain robust and secure IT and OT network infrastructures for transportation systems (e.g., traffic management centers).
• Develop network architectures that integrate IT and OT environments, ensuring seamless data flow and interoperability.
• Plan for network scalability, redundancy, and disaster recovery to ensure continuous operation of critical transportation services.
• Install, configure, and manage network hardware (routers, switches, firewalls, wireless access points, VPN concentrators) and software.
• Implement and manage network protocols relevant to both IT (TCP/IP, BGP, OSPF) and OT (Modbus, DNP3, IEC 60870-5-101/104, Profinet, EtherNet/IP).
• Configure and maintain network security devices and policies, including firewalls, intrusion detection/prevention systems (IDS/IPS), and VPNs.
• Deploy and manage network monitoring and management tools.
• Monitor network performance, identify bottlenecks, and troubleshoot network issues proactively.
• Respond to network incidents and outages, performing root cause analysis and implementing corrective actions.
• Perform regular network maintenance, including software/firmware updates and hardware replacements.
• Manage network configurations and documentation, ensuring accuracy and completeness.
• Bridge the gap between IT and OT networks, understanding the unique requirements and challenges of each.
• Implement and enforce cybersecurity best practices for both IT and OT environments, adhering to relevant industry standards (e.g., NIST Cybersecurity Framework, ISA/IEC 62443).
• Develop and implement network segmentation strategies to isolate critical OT systems from IT networks.
• Conduct security assessments and vulnerability testing of network infrastructure.
• Collaborate with cross-functional teams (e.g. business, technical and security) to ensure network requirements are met.
• Provide technical guidance and support to operations staff.
• Participate in project planning, design reviews, and implementation phases.
• Stay abreast of emerging technologies and industry trends in IT, OT, and transportation systems.
• Create and maintain detailed network diagrams, configuration guides, and operational procedures.
• Generate reports on network performance, security incidents, and project status.