Network Administrator - Senior

Provide a short description of the Position

The incumbent will act as Senior Network Administrator for the DOT Transportation Safety Management and Operations (TSMO) Technology Program is responsible for the engineering, secure deployment, and operational management of the critical communications infrastructure supporting regional Intelligent Transportation Systems (ITS). This role focuses on leveraging Cisco Catalyst SD-WAN to connect ruggedized roadside edge devices—specifically Cisco IR1101 routers—to the Traffic Management Center (TMC) and cloud environments. This role will ensure robust, end-to-end security across this converged IT/OT network using Palo Alto Next-Generation Firewalls managed centrally via Panorama.

Provide a list of the day-to-day tasks to be performed by the Selected Candidate: Key Job Duties 1. Cisco Catalyst SD-WAN & Roadside Edge Engineering

SD-WAN Orchestration

Design, configure, and manage the WAN overlay using Cisco Catalyst SD-WAN Manager (formerly vManage). Implement centralized control, data, and Application-Aware Routing (AAR) policies to optimize traffic path selection (e.g., prioritizing critical traffic signal data over video feeds).

Ruggedized Edge Deployment

Configure and deploy Cisco IR1101 Industrial Integrated Services Routers in roadside cabinets. Leverage the modularity of the IR1101 to manage dual-active cellular (LTE/5G) backhaul, fiber connections, and legacy serial connections.

Zero-Touch Provisioning (ZTP)

Develop and maintain bootstrap configurations and WAN Edge templates within Catalyst SD-WAN Manager to enable rapid, automated provisioning of IR1101 routers by field technicians.

Legacy Device Integration

Configure the IR1101’s serial interfaces and raw socket encapsulation to transport legacy serial-based Intelligent Transporation System (ITS) device data (e.g., older conflict monitors or loop detectors) over the modern IP/MPLS or SD-WAN network. 2. Palo Alto & Panorama Security Administration

Centralized Security Management

Utilize Palo Alto Panorama to manage device groups, templates, and security policies across all physical and virtual (VM-Series) firewalls deployed at the TMC, cloud egress points, and critical field hubs.

IT/OT Network Segmentation

Design and enforce strict Zero-Trust segmentation policies. Isolate critical traffic control systems (NTCIP), tolling systems (PCI-DSS compliant), and CCTV multicast streams from each other and from the corporate IT network.

Threat Prevention & Monitoring

Configure Palo Alto security profiles (IPS, Anti-Spyware, URL Filtering, and WildFire) to detect and block malicious activity targeting transportation infrastructure, including specialized signatures for industrial and IoT protocols. 3. TSMO Operations & Multicast Video Management

Multicast Optimization

Design and troubleshoot complex Layer 3 multicast networks (PIM-SM, IGMPv3) to ensure reliable, low-latency distribution of CCTV traffic camera feeds to the TMC, emergency operations centers, and media partners.

Network Performance Monitoring

Monitor network latency, jitter, and packet loss across the SD-WAN fabric using Catalyst SD-WAN Manager’s analytics tools to ensure real-time traffic management applications perform optimally.

Incident Response & Troubleshooting

Serve as the Tier 3 escalation point for complex network outages affecting roadside devices, fiber cuts, or cellular carrier outages.