Network Engineer - Baltimore City Community College

Description/Job Summary

The Network Engineer is responsible for the maintenance, availability and security of network infrastructure and voice services. Working with other team members, the candidate will support networking, voice, and security services that are technically sound, resilient to failure and meet the requirements of the College.

This position will actively contribute to the architecture, design and implementation of the College LAN/WAN infrastructure, including network security and voice/collaboration services. This role requires collaboration with internal and external customers and service providers, ensuring projects are completed within scope and on-time.

Primary responsibilities include implementing and maintaining the College's data and voice network. The ideal candidate will have experience and direct knowledge of managing enterprise network infrastructure in large, complex multi-campus environment.

The ideal candidate will leverage a collaborative approach, anticipate needs, and be able to communicate and work effectively with technical and non-technical stakeholders in a diverse and talented institution.

The Network Engineer is a senior technical point of escalation for network and voice service issues and provides Tier 3 support. Tasks may include working with vendors to resolve service problems, upgrade planning and coordination, capacity planning, technical roadmaps, health-checks and will be involved in any quality issues for the existing infrastructure.

Responsibilities/Duties

• Provide & support secure network remote access to on premise and cloud services
• Secure, support and optimize the campus WLAN
• Configure, deploy, optimize and manage network switches and routers, including current patch levels, VLANs, routing protocols, network protocols, including QoS
• Support VoIP infrastructure and related telephony services
• Configure and support DHCP, DNS, routing protocols, Directory Services
• Assigns configuration of authentication and authorization of directory services
• Supports network access for all devices (servers, endpoints, phones, peripherals, etc.)
• Lead / participate in regular off-hours maintenance windows and incident resolution
• Work with multiple stakeholders to restore service rapidly during an incident
• Installs, integrates, operates, and maintains network hardware and software
• Tests, certifies, troubleshoots, and resolves network including physical layer
• Ensures network connectivity throughout the College's LAN/WAN infrastructure is on par with technical considerations;
• Monitors networks to ensure security, performance and availability
• Design and implement network security controls by means of firewall rules, access control lists, management and monitoring tools, intrusion prevention tools, etc.
• Coordinates with vendors, service providers, and internal teams to provide stable operation of network and security technology;
• Review firewall logs daily to detect and remediate against network threats
• Participate in leading and defining best of class security practices for BCCC enterprise networks
• Implement and maintain the enterprise grade network infrastructure to support faculty, staff, students, and community
• Participate in creating/updating documentation of build, backup and recovery procedures
• Ensure the confidentiality, integrity and availability of the data residing on or transmitted to/from/through the enterprise networks
• Respond to mandatory state IT audits and inquiries
• Maintain an inventory of network devices and licenses required to support day to day network operations
• Coordinate service provider activity
• Develop and maintain documentation of configurations, processes, procedures, and guidelines in support of BCCC's network policies and standards
• Recommend and provide specifications for purchase of IT solutions and services
• Provide technical leadership for project-based assignments
• Assist in designing, implementing and testing an effective Disaster Recovery solution for critical BCCC IT infrastructure. Regularly backup configuration of all firewalls, IPS, and other network devices and ship the files to offsite storage at least once every quarter
• Communicate system trends, issues and outages to management/stakeholders
• Analyze and resolve user and system issues in a timely and accurate manner
• Resolve assigned tickets in IT service management tool
• Perform related duties as assigned

The above statements are intended only to describe the general nature of the job and should not be construed as an all-inclusive list of position responsibilities.

Required Skills

• Strong organizational and customer service skills with high level of professionalism
• Ability to work with complex and ambiguous situations
• Ability to simultaneously manage multiple projects or tasks
• Strong planning, organization, communication, presentation skills
• Ability to meet deadlines
• Ability to work with others in a collaborative environment
• Ability to work productively without close supervision
• Ability to communicate confidently, both verbally and in writing

Required Qualifications

Qualifications Certifications:

• Associates Degree required
• Bachelor's Degree preferred
• JNCIA-JUNOS or JNCIP-ENT preferred
• Security+ or other security-related certifications preferred
• MCSA/MCSE preferred

Job Related Experience:

• 5+ years of hands-on, progressive experience with:
  • deploying and managing network switching and routing configuration and equipment.
  • VoIP configuration, administration, and troubleshooting of network-attached devices.
  • working in an IT operations group.
  • network LAN/WAN related technologies - network routing, switching, packet analysis.
  • Enterprise network infrastructure security best practices and procedures
  • supporting Tier 1/Tier 2 technicians
• Juniper and Aruba experience preferred
• Microsoft Teams VoIP experience preferred
• ITIL knowledge preferred
• Strong background in network security related technologies
• Proven hands-on experience with IP networking and network security including DMZ, QoS, encryption, IPsec, VPNs, proxy services, and DNS
• Ability to produce well-written operational reports and documentation, including Visio diagrams, as well as detailed instructions outlining the steps required to repeat the build- out and configuration of the infrastructure