HBITS-08-14915-Network Architect-Expert

Job Description Project/Program: TSMO Technology Program.

The incumbent will act as Expert Network Architect for the DOT Transportation Safety Management and Operations (TSMO) Technology Program as a team member focusing on the overall design, structure, and future direction of the network infrastructure that seamlessly and securely integrates both Information Technology (IT) and Operational Technology (OT) systems. This role is critical for ensuring the secure, reliable, and efficient operation of the NYS TSMO complex transportation networks that integrate both information technology (IT) and operational technology (OT) systems.

Day-to-day Tasks Responsibilities include but not limited to the following:

• Strategic Network Vision and Roadmap Development: - Define and articulate the long-term vision for the organization’s IT/OT network infrastructure, aligning it with transportation system goals, technological advancements, and business objectives.
• Develop and maintain a multi-year network roadmap, identifying key initiatives, technology investments, and migration strategies.
• Conduct thorough assessments of existing network infrastructure, identifying gaps, risks, and opportunities for improvement.
• Architecture Design and Engineering: Guide the design and architecture of highly available, secure, and resilient network solutions for diverse transportation systems (e.g., traffic management, ITS, ATMS).
• Create detailed network designs, including logical and physical topologies, IP addressing schemes, routing protocols, and Quality of Service (QoS) policies.
• Design network segmentation strategies to isolate critical OT systems from IT networks, enhancing security and operational integrity.
• Architect solutions for IT/OT convergence, ensuring seamless and secure data exchange between different operational domains.
• Evaluate and select appropriate network hardware, software, and services from various vendors.
• Network Security and Compliance:
• Establish and enforce robust network security policies and procedures across both IT and OT environments, adhering to industry’s best practices and regulatory requirements (e.g., NIST).
• Design and implement security controls, including firewalls, Intrusion Detection/Prevention Systems (IDS/IPS), VPNs, network access control (NAC), and encryption.
• Conduct regular security risk assessments, vulnerability analyses, and penetration testing of network infrastructure.
• Ensure network designs comply with relevant cybersecurity standards and contribute to overall system resilience.
• Support internal and external audits related to network security and compliance.
• Performance Optimization and Reliability:
• Ensure the optimal performance, availability, and reliability of all network components and services critical to transportation operations.
• Develop and implement network monitoring strategies, utilizing tools to track performance metrics, identify anomalies, and proactively address potential issues.
• Troubleshoot complex network problems, often under pressure, to minimize downtime and impact on transportation services.
• Design and implement disaster recovery and business continuity plans for network infrastructure.
• Technology Evaluation and Innovation:
• Stay at the forefront of emerging network technologies and trends relevant to transportation, such as 5G, IoT, AI/ML for network analytics, Software-Defined Networking (SDN), and cloud networking.
• Research, evaluate, and pilot new technologies to enhance network capabilities, efficiency, and security.
• Champion innovation and drive the adoption of advanced network solutions that can improve transportation system management and operations.
• Project Leadership and Collaboration:
• Guide network-related projects, ensuring successful delivery within scope, budget, and timeline.
• Collaborate effectively with cross-functional teams, including IT operations, OT engineers, system integrators, cybersecurity teams, business teams, and external vendors.
• Provide technical guidance, and mentorship to network engineering teams.
• Manage vendor relationships, negotiate contracts, and oversee the implementation of vendor solutions.
• Documentation and Knowledge Management:
• Maintain comprehensive and up-to-date network documentation, including architecture diagrams, configuration details, operational procedures, and security policies.
• Develop and deliver technical training and knowledg…