Network Administrator - Palo, Cisco

HBITS

HBITS-08-15078

Senior, Network Administrator

24 month contract

Interview

Virtual Interview

Work model

50% telecommuting, 50% Office per week

--- Project Description ---

The incumbent will act as Senior Network Administrator for the DOT Transportation Safety Management

and Operations (TSMO) Technology Program is responsible for the engineering, secure deployment, and

operational management of the critical communications infrastructure supporting regional Intelligent

Transportation Systems (ITS). This role focuses on leveraging Cisco Catalyst SD-WAN to connect

ruggedized roadside edge devices—specifically Cisco IR1101 routers—to the Traffic Management Center

(TMC) and cloud environments. This role will ensure robust, end-to-end security across this converged

IT/OT network using Palo Alto Next-Generation Firewalls managed centrally via Panorama.

--- Day-to-Day Tasks ---

SD-WAN Orchestration

Design, configure, and manage the WAN overlay using Cisco Catalyst SD-WAN

Manager (formerly vManage). Implement centralized control, data, and Application-Aware Routing (AAR)

policies to optimize traffic path selection (e.g., prioritizing critical traffic signal data over video feeds).

Ruggedized Edge Deployment

Configure and deploy Cisco IR1101 Industrial Integrated Services Routers

in roadside cabinets. Leverage the modularity of the IR1101 to manage dual-active cellular (LTE/5G)

backhaul, fiber connections, and legacy serial connections.

Zero-Touch Provisioning (ZTP)

Develop and maintain bootstrap configurations and WAN Edge templates

within Catalyst SD-WAN Manager to enable rapid, automated provisioning of IR1101 routers by field

technicians.

Legacy Device Integration

Configure the IR1101's serial interfaces and raw socket encapsulation to

transport legacy serial-based Intelligent Transporation System (ITS) device data (e.g., older conflict

monitors or loop detectors) over the modern IP/MPLS or SD-WAN network.

Centralized Security Management

Utilize Palo Alto Panorama to manage device groups, templates, and

security policies across all physical and virtual (VM-Series) firewalls deployed at the TMC, cloud egress

points, and critical field hubs.

IT/OT Network Segmentation

Design and enforce strict Zero-Trust segmentation policies. Isolate critical

traffic control systems (NTCIP), tolling systems (PCI-DSS compliant), and CCTV multicast streams from

each other and from the corporate IT network.

Threat Prevention & Monitoring

Configure Palo Alto security profiles (IPS, Anti-Spyware, URL Filtering,

and WildFire) to detect and block malicious activity targeting transportation infrastructure, including

specialized signatures for industrial and IoT protocols.

Multicast Optimization

Design and troubleshoot complex Layer 3 multicast networks (PIM-SM, IGMPv3) to

ensure reliable, low-latency distribution of CCTV traffic camera feeds to the TMC, emergency operations

centers, and media partners.

Network Performance Monitoring

Monitor network latency, jitter, and packet loss across the SD-WAN

fabric using Catalyst SD-WAN Manager's analytics tools to ensure real-time traffic management

applications perform optimally.

Incident Response & Troubleshooting

Serve as the Tier 3 escalation point for complex network outages

affecting roadside devices, fiber cuts, or cellular carrier outages.

--- Required Qualifications ---

• 72 months experience in enterprise - grade network administration. This

includes configuring and troubleshooting LAN and WAN Networking

equipment in a complex networking environment of at least 1,000 remote

endpoints that includes switches, routers/firewalls and VPN devices. This

includes troubleshooting issues using protocol analysis tools (i.e. Wireshark)

and conducting analysis on network data captures.

• 72 months experience with Cisco Catalyst SD-WAN, including Catalyst SD-

WAN Manager, Controllers, and Validator. This includes build and deploy

localized and centralized policies, keeping firmware up to date and

standardizing device configuration.

• 72 months experience with administration of Palo Alto NGFWs and

Panorama. Experience with VM-Series firewalls in public/private clouds is a

plus.

• 60 months experience with Cisco IR1101 hardware, including IOS-XE SD-

WAN software, expansion modules, and cellular configuration

• 60 months experience with routing protocols (BGP, OSPF, EIGRP), IPsec

VPNs, Quality of Service (QoS), and Multicast (PIM, IGMP).

• 36 months experience with with NTCIP 1202 (traffic signals), NTCIP 1203

(dynamic message signs), and video streaming protocols (H.264/H.265,

RTSP)

• 36 months experience in an Operational Technology (OT), Intelligent

Transportation Systems (ITS), or TSMO environment managing roadside

communications (fiber, wireless, cellular).

Must hold one of the following

Cisco

Cisco Certified Network Professional (CCNP Enterprise) and/or

Cisco Certified Specialist - Enterprise SD-WAN Implementation (300-415

ENSDWI).

Palo Alto

Palo Alto Networks Certified Network Security Engineer (PCNSE).

MVP Consulting Plus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by law. Reasonable accommodations are available for qualified individuals with disabilities during the application process.