• local candidates only due to onsite requirement
• 100% ONSITE work
• please do not submit candidates who have been submitted to previous VDOT Infrastructure Solutions Architect reqs in VA Beach

VDOT seeks a security focused, hands-on Infrastructure Solutions Architect to support the Hampton Roads Transportation Operations Center. Required on-call rotation and; initially onsite; hybrid onsite/remote work arrangement is possible after training.

The Virginia Department of Transportation (VDOT) has designed, developed, and implemented a Traffic Operations Center (TOC) in Hampton Roads to manage traffic in the Eastern Region of Virginia. The TOC relies on several field devices to carry out its mission. These devices include but are not limited to permanent dynamic message signs (DMS), portable DMS, closed circuit television cameras (CCTV), traffic monitoring sensors and fog detection systems. These devices are integrated with an Advanced Transportation Management System (ATMS) which is the primary application used by the TOC to manage incidents that affect traffic. Because TOC staff rely heavily on the ATMS in carrying out their mission, it is imperative that the Operations Technology (OT) systems and network upon which the ATMS operates are properly supported and maintained. Therefore, VDOT is issuing this solicitation to obtain the services of an on-site Infrastructure Solutions Architect at the TOC to ensure the reliable and efficient operation of the ATMS.

The Infrastructure Solutions Architect shall assume a technical lead role in the systems and network engineering and administration at the TOC including development of the existing systems and network including the preparation of documentation related to design. The Infrastructure Solutions Architect shall review existing documentation for completeness and accuracy of the documentation relative to the actual operating environment and update as necessary. The Infrastructure Solutions Architect shall closely coordinate TOC systems and network activities with Hampton Roads District Transportation Operations, and the Operations Technology Division as necessary. This will require coordination with both District and Central Office personnel. Activities may include attendance at IT staff meetings and/or planning meetings.

Any Infrastructure Solutions Architect on-site at the TOC will have full access to and significant privileges on VDOT systems. Therefore, the Infrastructure Solutions Architect and all other contract staff are subject to a fingerprint criminal history background check prior to commencing duties at the TOC. System and network security must be maintained. At any time, VDOT reserves the right to immediately discontinue use of the current Infrastructure Solutions Architect should VDOT deem their actions to be disruptive to the operation or in violation of VDOT policies and procedures.

The responsibilities of the Infrastructure Solutions Architect will include mentorship and planning as the technical lead and also hands on participation in the maintenance of all current systems and network hardware and software at the TOC as well as new hardware and software that will be installed in the future. The responsibilities will also include mentoring less-knowledgeable staff. These services will be primarily for central control room hardware, communications infrastructure, and software. Field equipment maintenance is performed by other personnel and is not associated with this role. However, the Infrastructure Solutions Architect is expected to provide support for the field equipment installation, maintenance and troubleshooting communications interconnectivity as necessary or as directed.

This position will also be required to perform some of both system administration and network administration related duties. Typical duties expected of the Infrastructure Solutions Architect shall include, at a minimum, the following:

• Monitor systems and network performance/utilization
• Add / delete system users
• Change user privileges
• Patch management of Windows servers and workstations.
• Provide full system backups and restoration, if necessary
• Manage system and network security policies and procedures
• Participate in Configuration Change Board (CCB) meetings
• Manage systems and network configuration
• Archive data as directed
• Develop reports
• Implement bug fixes, patches and upgrades
• Support the addition of field devices to the system
• Monitor and utilize maintenance support agreements
• Provide other systems or network related technical support as directed by the TOC Systems Manager or designee.

Listed below are examples of long-term/planning duties the Infrastructure Solutions Architect is expected to perform:

• Hardware and software upgrades of system and network components.
• Systems and Network performance planning
• Systems and Network Capacity planning
• Component warranty monitoring
• Hardware lifecycle tracking
• Software version tracking
• Communications planning (local and wide area)

Over time, additional field equipment will be added to the TOC. The Infrastructure Solutions Architect will be responsible for supporting the testing, configuration management, and troubleshooting associated with the integration of the new equipment with the TOC central software.

Work in the System Integration area may include writing specifications, preparing drawings, providing procurement support, and installing and configuring equipment.

• Specific duties related to procurement support include:
• Support in determining equipment specifications, selection of equipment, and selection of models.
• Support in determining if vendor recommendations of equipment meet requirements.
• Assisting in commercial-off-the-shelf procurement decisions.
• Review of vendor proposals/bids/submittals as required.

Cyber Security is a rapidly increasing area of focus for VDOT. The Infrastructure Solutions Architect will be expected to be current with current Security Compliance and emerging security trends, issues, and alerts. Other expectations include:

• Ability to communicate known security risks and solutions to leadership to mitigate risks to business and technology partners as needed.
• Ability to identify, document, and recommend new or revised security processes, policies, and SOPs.
• Participate in knowledge sharing with other security engineers and partners.
• Interface with technical personnel from various disciplines to rapidly resolve critical security issues.

Skill Matrix

• Experience working for a Managed Service Provider Required 3 Years
• MS Windows server and workstations patch management Required 5 Years
• MS Windows Server admin and support Required 5 Years
• Experience with Active Directory Administration - Computers, Users, Groups, Service Accounts Required 5 Years
• Experience with Windows Group Policy Administration Required 5 Years
• Ability to effectively troubleshoot complex systems & network issues and possessing knowledge of how to research on the internet for answers. Required 5 Years
• VMWare/vSphere/VXRail administration Required 5 Years
• Experience with DHCP & DNS Administration on Windows Server Required 5 Years
• Experience with Linux administration. Required 5 Years
• Experience working with Hardware and Software manufacturer Technical Support teams. Required 3 Years
• Ability to produce accurate technical documentation to include systems architecture drawings, network topology maps, implementation plans. Highly desired 5 Years
• Ability to produce accurate technical documentation to include migration plans, whiteboard drawing and discussion, etc. Highly desired 5 Years
• Systems & Network Monitoring skills Knowledge of systems & network and infrastructure monitoring using SNMP WMI Highly desired 5 Years
• network skills: IP subnetting Ethernet IPSEC VPN Tunnels Highly desired 5 Years
• Experience with Firewall concepts / admin experience of next generation firewalls and stateful firewalls. Highly desired 3 Years
• Experience with Intelligent Traffic System field device integration/trouble shooting Highly desired 3 Years
• Experience with Video Management Systems Highly desired 3 Years
• Network Administration (Experience with Cisco Products - CCNA or equivalent preferred) Highly desired 3 Years
• Experience performing network data capture and analysis with tools such as Wireshark, etc. Highly desired 3 Years
• Experience with cellular data connectivity using 4g/5g data routers such as Digi brand. Highly desired 2 Years
• Forescout monitoring experience. Desired 2 Years
• Nagios / Nagios XI monitoring experience. Desired 2 Years