Network Engineer

Under general supervision, this position provides advanced support for our City of Arlington’s voice, video, and data communications network.
Evaluates emerging network technologies to ensure interoperability with current network systems.
Oversees implementation of network enhancements and routine maintenance activities, which may include, but not limited to, planning, resource assignments, budgeting and forecasting, procurement, implementation, status reporting, and closeout.
Serves as point of contact for network security issues; evaluates, recommends, and implements remediation procedures based on industry best practices.
ESSENTIAL JOB FUNCTIONS: · Recommends changes, upgrades, installs, and maintains network equipment including but not limited to: o Network switches o Wireless controllers o Firewalls o Telephony equipment o VPN devices o Access control o Load balancers o Video systems · Collaborate in cross-functional department evaluations to identify operational challenges that may impact the network and propose alternative solutions or configurations that maintain the network infrastructure's reliability, stability, and security.
· Perform advanced network administration duties, including, but not limited to: o Troubleshooting and remediation of issues o Network performance monitoring o Resource utilization monitoring o Load balancing o Network performance tuning · Analyze network traffic in the event of an incident or suspicious activity, take corrective action to implement additional network security controls, and report results to management.
· Review new or emerging network technologies and recommend future enhancements or implementations to maintain the reliability, stability, and security of the city's network infrastructure and the data it carries.
· Collaborate, manage, and execute complex network projects, establish, and manage the associated project budget and provide approval for expenditures.
· Coordinate, assign, re-assign, and document activities in the IT Service Management (ITSM) system (RemedyForce) and/or Project Portfolio Management Tool (Innotas).
· Accept, document, and triage service requests in a timely manner.
· Support On-Call rotation duties.
· Lead the development and implementation of advanced failover and disaster recovery implementations to ensure the network's availability, reliability, and stability.
· Develop, update, and implement detailed documentation standards for network configurations, connectivity, and structured cabling, which may include site and network topology diagrams · Review and assess network equipment logs and packet captures.
· Maintain firmware and OS upgrades on all network-supported equipment.
MINIMUM QUALIFICATIONS: Knowledge, Skills and Abilities Required: · Knowledge of office and administrative practices and procedures.
· Knowledge of network design that supports the evaluation of systems.
· Knowledge and understanding of best practices, administration principles, and techniques.
· Knowledge of OSI and TCP/IP networking models.
· Knowledge of SSL VPN administration.
· Knowledge and understanding of cybersecurity frameworks such as Cyber Essentials, Center for Internet Security (CIS), NIST, PCI DSS, ISO-27001, FIPS 140-3, and Criminal Justice Information Services Standards (CJIS).
· Knowledge of water utility regulatory compliance in a SCADA network system.
· Advanced knowledge of networking services and standard protocols such as BGP, OSPF, MPLS, QoS, and TCPIP.
· Advanced knowledge and experience with command line configuration on routers, switches, and wireless controllers.
· Knowledge of voice-over IP telephony (VoIP) systems, including managing, installing, and upgrading (voice switches, IP telephones, voicemail systems, and call center systems).
· Knowledge of VoIP signaling protocols and standards such as SIP, H.
323, and SCCP · Knowledge and experience with enterprise wireless systems and understanding the 802.
11 standards.
·Knowledge of fiber optic cable standards and construction best practices.
· Skill in using PC Software including current Microsoft Office Suite of applications.
· Skill in communicating professionally and tactfully with other city employees and the public by oral and written means.
· Skill in recognizing, analyzing, and providing solutions to complex network and telecommunication problems.
· Skill with organization and attention to detail.
· Ability to manage vendors, provide direction, supervise, and authorize payments.
· Ability to provide a high level of customer service and convey complex information in a manner that various audiences can understand.
· Ability to exercise discretion and independent judgment utilizing knowledge of the organization's policies.
· Ability to work independently under general instructions.
· Ability to perform a variety of physical skills including but not limited to filing, pulling, seeing, sorting, squatting, standing, stooping, twisting body, typing, walking, and writing.
· Ability to operate a variety of office equipment including but not limited to PC, telephone, calculator, scanner, and copier.
· Ability to prioritize deadlines and tasks.
· Ability to learn new systems and procedures quickly.
· Ability to plan, organize, monitor, and collaborate with internal and external stakeholders to accomplish unit objectives.
· Ability to understand mathematical calculations involving fractions, percentages, and decimals.
· Ability to work within a set schedule.
Qualifying Education and Experience: · Bachelor’s degree in business, Information Technology, or Computer Science.
· Five (5) years of increasingly responsible experience implementing and managing enterprise network LAN/WAN communications.
· Three (3) of the five (5) years of experience, include managing network security devices such as network firewalls and intrusion detection devices, or equivalent combination of education and experience.
· Possession of a valid Texas driver license.
Preferred Education and Experience: · Experience serving as team lead for network initiatives and incident response.
· Firewall Filters (ACLs), VSTP (PVST+), NetFlow, multiple routing instances.
· Experience and understanding of managing firewalls from a layer seven application layer.
· Experience managing multisite failover for disaster recovery using BGP, VRRP, various ISP connections, firewall clustering, and Load Balancers.
· Experience implementing security policies based on best practices throughout the enterprise network.
· Experience setting up/troubleshooting IPsec VPN (route and policy-based) tunnels between multi-vendor hardware.
· Preferred Certifications: o Network + o Security + o Wireless Network Administrator – CWNA o Associate or Advance Network Routing and Switching o Associate or Advance Datacenter Employment Screenings Required: · Criminal Background Check · Drug and Alcohol Screening · Health Performance Evaluation · Motor Vehicle Review · Physical Examination