Network Architect

Job Title: Network Architect - Senior Task ID: HBITS-08-14917 Position Duration: 24 Months Client: State of NY Agency: Information Technology Services (ITS) Please call (703) 466-0951 | (571) 351-1868 | (703) 348-3018 or email at [email protected]

Description Responsibilities include but not limited to the following:

Network Design And Architecture

• Design, implement, and maintain robust and secure IT and OT network infrastructures for transportation systems (e.g., traffic management centers).
• Develop network architectures that integrate IT and OT environments, ensuring seamless data flow and interoperability.
• Plan for network scalability, redundancy, and disaster recovery to ensure continuous operation of critical transportation services.

Network Implementation And Configuration

• Install, configure, and manage network hardware (routers, switches, firewalls, wireless access points, VPN concentrators) and software.
• Implement and manage network protocols relevant to both IT (TCP/IP, BGP, OSPF) and OT (Modbus, DNP3, IEC 60870-5- 101/104, Profinet, EtherNet/IP).
• Configure and maintain network security devices and policies, including firewalls, intrusion detection/prevention systems (IDS/IPS), and VPNs.
• Deploy and manage network monitoring and management tools.

Network Operations And Maintenance

• Monitor network performance, identify bottlenecks, and troubleshoot network issues proactively.
• Respond to network incidents and outages, performing root cause analysis and implementing corrective actions.
• Perform regular network maintenance, including software/firmware updates and hardware replacements.
• Manage network configurations and documentation, ensuring accuracy and completeness.

IT/OT Convergence and Security:

• Bridge the gap between IT and OT networks, understanding the unique requirements and challenges of each.
• Implement and enforce cybersecurity best practices for both IT and OT environments, adhering to relevant industry standards (e.g., NIST Cybersecurity Framework, ISA/IEC 62443).
• Develop and implement network segmentation strategies to isolate critical OT systems from IT networks.
• Conduct security assessments and vulnerability testing of network infrastructure.

Collaboration And Support

• Collaborate with cross-functional teams (e.g. business, technical and security) to ensure network requirements are met.
• Provide technical guidance and support to operations staff.
• Participate in project planning, design reviews, and implementation phases.
• Stay abreast of emerging technologies and industry trends in IT, OT, and transportation systems.

Documentation And Reporting

• Create and maintain detailed network diagrams, configuration guides, and operational procedures.
• Generate reports on network performance, security incidents, and project status.

Mandatory Qualifications 1 72 months experience in foundational IT and OT networking including networking protocols (routing, switching and wireless protocols); network design and architecture; network security principles; and network monitoring and troubleshooting 2 72 months experience in designing, building, securing and managing IT and OT networks, with IT/OT convergence challenges and solutions preferably in the Transportation sector. 3 60 months experience in OT including network protocols; cybersecurity threats and vulnerabilities; IT/OT Convergence challenges; and real-time data processing and management 4 60 months experience in specific networks needs of transportation sector technologies such as adaptive traffic signal control; safety and reliability standards; Intelligent Transportation Systems (ITS); and Advanced Traffic Management Systems (ATMS). 5 60 months experience with IT and OT Network operational support including incident response and root cause analysis. 6 48 months experience with Cybersecurity specific to IT/OT Convergence including implementation of layered security approaches; compliance with regulations and standards; and zero- trust architecture and implementation 7 48 months experience collaboration with cross-functional teams (business, technical and security); and producing both written and verbal communication articulating secure networking concepts to both technical and non-technical audiences 8 MUST hold at least one of these Certifications:

• Cisco (CCNA, CCNP, CCIE)
• CompTIA Network+/Security+
• CISSP Require…