Network Engineer

Job Title : Network Engineer

Duration : 6-12 months contract with possible extension

Location : Phoenix, AZ (ONSITE)

Pay Range : $53-$65 / hour on W2 without any benefits

Job Description :

NES manages the network architecture which runs predominantly on Cisco network equipment on premises and Microsoft Azure network infrastructure in the cloud.

• This includes : Cisco routing, switching, wireless, secure firewall with intrusion prevention (IPS), remote access VPN, and site-to-site VPN, and identity / AAA services;
• MS Azure routing, load balancing, firewalling, and private endpoint connectivity; Network segmentation is deployed for separation of operational technology, internet of things, safety / security, passenger processing, user, and tenant networks;

Network interconnectivity to other business partners, the enterprise network, and the Internet. The airport has more than 70 unique business systems running on carrier grade MPLS network infrastructure.

Responsibilities :

The network engineer’s primary role is to maintain the campus and data center routing and switching environment at Phoenix Sky Harbor International Airport, Deer Valley Airport and Goodyear Airport.

The Network Engineer is responsible for implementing and managing multiprotocol label switching (MPLS) network infrastructure.

This includes but is not limited to Cisco core / distribution / access architecture, internal and edge firewalls, intrusion prevention systems, and wireless networks.

The position is expected to create and maintain network documentation and perform hardware lifecycle and OS upgrades on all network equipment.

Expertise in Cisco Catalyst and Nexus switches, virtual local area networks (VLANs), virtual routing and forwarding (VRFs) tables, Wireless LAN Controllers (WLC), Catalyst Center, Application Policy Infrastructure Controller (APIC), Secure Firewall, Virtual firewall contexts and rules, Cisco Identity Services Engine (ISE), and both Remote Access (RA) and Site-to-Site (S2S) Virtual Private Networks (VPN).

Microsoft Azure network infrastructure resources. SolarWinds monitoring environment includes Network Performance Monitor (NPM), Network Traffic Analyzer, Network Configuration Manager (NCM), IP Address Manager, and User Device Tracker (UDT).

Required Knowledge and Experience :

• Stacks of Cisco Catalyst 9300 access switches, including upgrading IOS-XE on stacked switches, configuring stacking data and power, port-channels, L2 VLANs, access / trunk port assignment, rapid-pvst, VLAN pruning, etc.
• Cisco Catalyst 6500 and 9600 chassis core and distribution switches, including upgrading IOS / IOS-XE on redundant supervisor engines, configuring OSPF, BGP, VSS, HSRP, port-channels, L2 VLANs, L3 SVIs, access / trunk port assignment, rapid-pvst, VLAN pruning, etc.
• Cisco Nexus 7700 and 9300 data center switches, including upgrading NX-OS, configuring DCI, VDC, VPC, high availability and failover, resilient connections to VMware host server farms, OSPF, BGP, HSRP, port-channels, L2 VLANS, L3 SVIs, rapid-pvst, VLAN pruning, etc.
• Large MPLS networks, including configuring MPLS VPNs, RD / RT values, VRFs, P / PE / CE devices, eBGP / iBGP peering, route reflectors, BFD, etc.
• Cisco ASR 1000 Internet edge routers, including upgrading IOS-XE, configuring eBGP peering with multiple ISPs for high availability of Internet routes, load balancing with IP prefix-list, NetFlow, etc.
• Cisco 9800 Wireless LAN Controllers, including configuring SSIDs, policies, policy tags, site tags, CAPWAP tunnels, etc.

Preferred Knowledge and Experience :

• Cisco Industrial Ethernet 1000 and 4000 access switches, including upgrading IOS, configuring port-channels, L2 VLANs, access / trunk port assignment, rapid-pvst, VLAN pruning, etc.
• Hardware and software life cycle of network equipment, including planning, working with vendors, submitting purchase requests, inventory management, customer coordination, configuring, deploying in a manner that minimizes network down time, documenting, monitoring, troubleshooting, patching, decommissioning, etc.
• Solarwinds modules to monitor network environments, including NPM, NCM, IPAM, UDT, NTA and SAM.
• Proficiency troubleshooting connectivity issues using tools such as Wireshark or other packet analyzers.
• Proficiency with using MS Visio to diagram and document detailed network designs and configurations.
• MS Azure network infrastructure resources such as Vnet, Application Gateway, Private DNS Zone and Resolver, Key Vault, Application Service Plan, Application Programming Interface Management (APIM), Azure Firewall, Network Security Group, Virtual and Local Network Gateway, Connections, Public IPs and Private Endpoints.

Preferred / Desirable knowledge :

• Cisco Secure Firewall running in ASA mode, including configuring routed and transparent deployments, single and multiple contexts, firewall rules, NAT, service policies / inspection, site-to-site and remote access VPN, etc.
• Cisco Secure Firewall running in Threat Defense mode, including configuring IPS.
• Cisco ISE running in a medium distributed deployment, including configuring PAN, MNT and PSN nodes, policy sets, device administration policies, external identity sources, TACACS, RADIUS, etc.
• Cisco VOIP and QoS
• Cisco Spaces
• Cisco Catalyst Center
• Cisco SD-Access
• Cisco ACI

Required Experience and Training :

• Five+ years of progressive experience in the field of network engineering managing large scale environments.
• Current Cisco CCIE, CCNP, or CCNA certifications are required no candidates will be considered without certification.

Acceptable Experience and Training :

• BA or BS degree in Computer Science, Information Security, or related field. Other combinations of experience and education that meet the minimum requirements may be substituted.
• Additional experience and certifications related to Cisco and Microsoft Azure networking and information security are desirable.
12 days ago