Job Title: Network Architect - Expert
Task ID: HBITS-08-14915
Position Duration: 24 Months
Client: State of NY
Agency: Information Technology Services (ITS)
Please call (703) 466-0951 | (571) 351-1868 | (703) 348-3018 or email at [email protected]

Description
Responsibilities include but not limited to the following:
1. Strategic Network Vision and Roadmap Development:

• Define and articulate the long-term vision for the organization's IT/OT network infrastructure, aligning it with transportation system goals, technological advancements, and business objectives.
• Develop and maintain a multi-year network roadmap, identifying key initiatives, technology investments, and migration strategies.
• Conduct thorough assessments of existing network infrastructure, identifying gaps, risks, and opportunities for improvement.

2. Architecture Design and Engineering:

• Guide the design and architecture of highly available, scalable, secure, and resilient network solutions for diverse transportation systems (e.g., traffic management, ITS, ATMS).
• Create detailed network designs, including logical and physical topologies, IP addressing schemes, routing protocols, and Quality of Service (QoS) policies.
• Design network segmentation strategies to isolate critical OT systems from IT networks, enhancing security and operational integrity.
• Architect solutions for IT/OT convergence, ensuring seamless and secure data exchange between different operational domains.
• Evaluate and select appropriate network hardware, software, and services from various vendors.

3. Network Security and Compliance:

• Establish and enforce robust network security policies and procedures across both IT and OT environments, adhering to industry's best practices and regulatory requirements (e.g., NIST).
• Design and implement security controls, including firewalls, Intrusion Detection/Prevention Systems (IDS/IPS), VPNs, network access control (NAC), and encryption.
• Conduct regular security risk assessments, vulnerability analyses, and penetration testing of network infrastructure.
• Ensure network designs comply with relevant cybersecurity standards and contribute to overall system resilience.
• Support internal and external audits related to network security and compliance.

4. Performance Optimization and Reliability:

• Ensure the optimal performance, availability, and reliability of all network components and services critical to transportation operations.
• Develop and implement network monitoring strategies, utilizing tools to track performance metrics, identify anomalies, and proactively address potential issues.
• Troubleshoot complex network problems, often under pressure, to minimize downtime and impact on transportation services .
• Design and implement disaster recovery and business continuity plans for network infrastructure.

5. Technology Evaluation and Innovation:

• Stay at the forefront of emerging network technologies and trends relevant to transportation, such as 5G, IoT, AI/ML for network analytics, Software
• Defined Networking (SDN), and cloud networking.
• Research, evaluate, and pilot new technologies to enhance network capabilities, efficiency, and security.
• Champion innovation and drive the adoption of advanced network solutions that can improve transportation system management and operations.

6. Project Leadership and Collaboration:

• Guide network-related projects, ensuring successful delivery within scope, budget, and timeline.
• Collaborate effectively with cross
• functional teams, including IT operations, OT engineers, system integrators, cybersecurity teams, business teams, and external vendors.
• Provide technical guidance, and mentorship to network engineering teams.
• Manage vendor relationships, negotiate contracts, and oversee the implementation of vendor solutions.

7. Documentation and Knowledge Management:

• Maintain comprehensive and up-to-date network documentation, including architecture diagrams, configuration details, operational procedures, and security policies.
• Develop and deliver technical training and knowledge transfer to relevant personnel.

Mandatory Qualifications 1 84 months of experience in IT and OT networking including networking protocols (routing, switching and wireless protocols); enterprise-grade network hardware (Cisco, Palo Alto, Fortinet); network security principles and technologies; wireless networking technologies; and network monitoring and troubleshooting 2 84 months of experience in designing and managing complex IT and OT networks within the transportation sector such as adaptive traffic signal control; safety and reliability standards; Intelligent Transportation Systems (ITS); and Advanced Traffic Management Systems (ATMS). 3 72 months of experience in architecting and implementing solutions that integrate IT and OT environments addressing IT/OT Convergence challenges; and real-time data processing and management 4 72 months of experience in designing and managing specific networks needs of transportation sector technologies such as adaptive traffic signal control; safety and reliability standards; Intelligent Transportation Systems (ITS); and Advanced Traffic Management Systems (ATMS). 5 60 months of experience with IT and OT Network operational support including incident response and root cause analysis. 6 60 months of experience with Cybersecurity specific to IT/OT Convergence including implementation of layered security approaches; compliance with regulations and standards; and zero-trust architecture and implementation. 7 60 months of experience collaborating with cross-functional teams (business, technical and security); and, producing both written and verbal communication articulating secure networking concepts to both technical and non-technical audiences 8 MUST hold at least one of these:
**bachelor's degree in computer science, Information Technology or a closely related field
**Cisco Certified Internetwork Expert (CCIE) - Enterprise Infrastructure, Security, or Service Provider
**Vendor-specific advanced certifications (e.g., Palo Alto Networks Certified Network Security Engineer - PCNSE
**Certified Information Systems Security Professional (CISSP) Required Documentation • Resume
• Copy of Candidate Identification
(i.e., Driver's License/Green Card/Visa and Passport if applicable)
• Any documents referenced in the above Requested Qualifications
(i.e., professional certifications, degrees, etc.)