Senior Network Systems Engineer

The New York City Department of Investigation (DOI) is one of the oldest law enforcement agencies in the country with a mission of combating municipal corruption.

It serves the people of New York City by acting as an independent and nonpartisan watchdog for New York City government, City agencies, and City employees, vendors with City contracts, individuals and entities that receive City funds.

The Information Technology Unit of the NYC Department of Investigation is looking for a Senor Network Systems Engineer to support the agency's IT infrastructure.

The ideal candidate will provide enhancements and implementation of new technologies to support the strategic needs of the agency and its partners in the delivery of applications and services in a reliable and secure fashion.

The engineer will be responsible for preparing technical reports, design documentation, and run books.

The engineer is required to assist with scheduled authorized security patches and assist with change management operations once approved by in house CMB and Security management team.

The selected candidate must demonstrate the ability to exercise independent initiative and judgment when managing and monitoring the Advanced network infrastructure (CISCO Nexus Switches, Palo Alto Firewalls, VMware Infrastructure), along with the DOI applications that reside on them.

This includes over Windows and Linux servers running multiple applications such as Exchange, SQL, Oracle, and custom in-house applications.

Candidate is required to work Nights and Weekends as needed.

NYC Acceptable Vendor / Professional Certificate required for position : Certified Cisco CCNP (Data Center / Enterprise) and VMWare VCP 7.x / 6.x

All current City Employees may apply by going to Employee Self Service (ESS) Click on Recruiting Activities / Careers and search for the specific Job ID #.

All other applicants, please go to and Search for the specific Job ID #.

Please do not email, mail or fax your resume to DOI directly. Submissions of resumes does not guarantee an interview. Due to the high volume of resumes DOI receives for positions, only selected candidates will be contacted.

Minimum Qualifications

Professional / vendor certification(s) in local area network administration that is required for the position to be filled.

In addition, all candidates must have the following :

1. A baccalaureate degree from an accredited college, and two years of satisfactory full-time (not classroom based) experience in local area network and / or wide area network planning, design, configuration, installation, implementation, troubleshooting, integration, performance monitoring, maintenance, enhancement, and security management; or

2. A four-year high school diploma or its educational equivalent and six years of satisfactory full-time (not classroom based) information technology experience of which at least 2 years must have been as described in "1" or

3. A satisfactory equivalent of education and / or experience equivalent to "1" or "2" above. Education may be substituted for experience on the basis that 30 undergraduate semester credits from an accredited college is equivalent to 6 months of experience.

A master’s degree in computer science or a related field from an accredited college may be substitute for one year of experience.

However, all candidates must have at least one year of satisfactory (not classroom based) full-time information technology experience as described in "1" above.

Note : In addition to meeting the minimum Qualification Requirements : Incumbents may be required to update existing and / or obtain additional professional industry-standard certification(s) for current and future technical environments(s) in which they may be assigned to work, as determined by the employing agency.

Preferred Skills

Must hold a valid Cisco CCNP Certification ( Data Center or Enterprise) Configuring and managing Cisco network Core and Access switches and routers.

Nexus and Catalyst switches) Cisco Wireless Networks Configured VLANs, inter-VLAN communication, DHCP, DNS, RIP, EIGRP, OSPF, IS-IS, and BGP Advanced TCP / IP, Layer 2 and 3 switching and Routing a must, (VLAN, RSTP, DNS, DHCP, NAT, OSPF Tables, BGP, EIGRP,MPLS, VXLAN, SIP, SNMPv3, ICMPv6) Data Center Networking, L3 network troubleshooting, Load Balancing, Firewall / Network security, Network Virtualization, AWS EC2 instances, S3 storage, VPC networking Advanced Working Knowledge of Palo Alto Firewalls, Panorama, NetScaler Load Balancer Working Knowledge of Citrix NetScaler Load Balancer Virtual Infrastructure IP filtering, Event log analysis, ManageEngine OpManager, is a plus.

Heavy Root Cause Analysis resolution. Sound problem resolution, judgment, and decision-making skills. Strong customer and quality-focus.

Experience with managing VoIP is a plus Knowledge of authentication services (Kerberos / SAML / MFA) and SSL certificate management.

Knowledge of server and application architectures. Highly self-motivated and flexible. Working with an enterprise wide, large-scale implementation.

Managing VMWare infrastructure is a must. (vSphere Cloud 6.5. / 7.x) Intermediate knowledge working with Cloud Providers MSO AZURE, Amazon AWS.

Knowledge in converged / HCI infrastructure, AirWatch, Strong hands-on administration experience on Windows server - Forest, Domain, AD, Schema, DNS, WINS, DHCP, OU, Distribution list, Windows folder security.

installation, and administration of Windows Server , including user setup and defining roles, performance tuning, backup and restore, security monitoring, registry, and AD scripting.

Configure Windows security such as permission levels, groups, and user profiles. Ability to plan, manage time according to schedules, and provide status updates required.

Ability to quickly learn new tools and resolve issues using all available resources. Strong interpersonal skills and ability to work well in a team environment.

Managing Exchange Hybrid Server Environment. Managing Citrix VDI Infrastructure - Virtual Apps and Virtual Desktops Working Knowledge in converged / HCI infrastructure (HPE SimpliVity), and Manage Engine NetOps, is a plus.

Working Knowledge of HPE Synergy Frame Enclosures Working Knowledge of HPE 3PAR Storage Systems Working Knowledge of HPE Store Once Storage Devices Knowledge of backup methodology and best practices using Veeam.

Weekend work is required. Linux bash shell Scripting is a plus. Microsoft / Azure / MCSA / MCSE certification is plus. Linux certification is a plus but not required.

Required : -VMware Certified Professional (VCP) - VMWare vSphere 6.5 / 7.01. - Cisco Certified Network Professional (CCNP). Data Center or Enterprise

55a Program

This position is also open to qualified persons with a disability who are eligible for the 55-a Program. Please indicate at the top of your resume and cover letter that you would like to be considered for the position through the 55-a Program.

Public Service Loan Forgiveness

As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs.

For more information, please visit the U.S. Department of Education’s website at class "jobad-residencyRequirement">

Residency RequirementNew York City Residency is not required for this position