Job Title: Network Architect - Senior Task ID: HBITS-08-14917 Position Duration: 24 Months Client: State of NY Agency: Information Technology Services (ITS) Please call
(703) 466-0951 | (571) 351-1868 | (703) 348-3018 or email at
[email protected] Description Responsibilities include but not limited to the following:
Network Design and Architecture:
- Design, implement, and maintain robust and secure IT and OT network infrastructures for transportation systems (e.g., traffic management centers).
- Develop network architectures that integrate IT and OT environments, ensuring seamless data flow and interoperability.
- Plan for network scalability, redundancy, and disaster recovery to ensure continuous operation of critical transportation services.
Network Implementation and Configuration:
- Install, configure, and manage network hardware (routers, switches, firewalls, wireless access points, VPN concentrators) and software.
- Implement and manage network protocols relevant to both IT (TCP/IP, BGP, OSPF) and OT (Modbus, DNP3, IEC 60870-5- 101/104, Profinet, EtherNet/IP).
- Configure and maintain network security devices and policies, including firewalls, intrusion detection/prevention systems (IDS/IPS), and VPNs.
- Deploy and manage network monitoring and management tools.
Network Operations and Maintenance:
- Monitor network performance, identify bottlenecks, and troubleshoot network issues proactively.
- Respond to network incidents and outages, performing root cause analysis and implementing corrective actions.
- Perform regular network maintenance, including software/firmware updates and hardware replacements.
- Manage network configurations and documentation, ensuring accuracy and completeness.
IT/OT Convergence and Security:
- Bridge the gap between IT and OT networks, understanding the unique requirements and challenges of each.
- Implement and enforce cybersecurity best practices for both IT and OT environments, adhering to relevant industry standards (e.g., NIST Cybersecurity Framework, ISA/IEC 62443).
- Develop and implement network segmentation strategies to isolate critical OT systems from IT networks.
- Conduct security assessments and vulnerability testing of network infrastructure.
Collaboration and Support:
- Collaborate with cross-functional teams (e.g. business, technical and security) to ensure network requirements are met.
- Provide technical guidance and support to operations staff.
- Participate in project planning, design reviews, and implementation phases.
- Stay abreast of emerging technologies and industry trends in IT, OT, and transportation systems.
Documentation and Reporting:
- Create and maintain detailed network diagrams, configuration guides, and operational procedures.
- Generate reports on network performance, security incidents, and project status.
Mandatory Qualifications 1 72 months experience in foundational IT and OT networking including networking protocols (routing, switching and wireless protocols); network design and architecture; network security principles; and network monitoring and troubleshooting 2 72 months experience in designing, building, securing and managing IT and OT networks, with IT/OT convergence challenges and solutions preferably in the Transportation sector. 3 60 months experience in OT including network protocols; cybersecurity threats and vulnerabilities; IT/OT Convergence challenges; and real-time data processing and management 4 60 months experience in specific networks needs of transportation sector technologies such as adaptive traffic signal control; safety and reliability standards; Intelligent Transportation Systems (ITS); and Advanced Traffic Management Systems (ATMS). 5 60 months experience with IT and OT Network operational support including incident response and root cause analysis. 6 48 months experience with Cybersecurity specific to IT/OT Convergence including implementation of layered security approaches; compliance with regulations and standards; and zero- trust architecture and implementation 7 48 months experience collaboration with cross-functional teams (business, technical and security); and producing both written and verbal communication articulating secure networking concepts to both technical and non-technical audiences 8 MUST hold at least one of these Certifications:
**Cisco (CCNA, CCNP, CCIE)
**CompTIA Network+/Security+
**CISSP
Required Documentation • Resume
• Copy of Candidate Identification
(i.e., Driver's License/Green Card/Visa and Passport if applicable)
• Any documents referenced in the above Requested Qualifications
(i.e., professional certifications, degrees, etc.)