Network Architect with Transportation Systems

Description

The incumbent will act as Expert Network Architect for the DOT Transportation Safety Management and Operations (TSMO) Technology Program as a team member focusing on the overall design, structure, and future direction of the network infrastructure that seamlessly and securely integrates both Information Technology (IT) and Operational Technology (OT) systems. This role is critical for ensuring the secure, reliable, and efficient operation of the NYS TSMO complex transportation networks that integrate both information technology (IT) and operational technology (OT) systems.

Duties

• Strategic Network Vision and Roadmap Development:
• Define and articulate the long-term vision for the organization's IT/OT network infrastructure, aligning it with transportation system goals, technological advancements, and business objectives.
• Develop and maintain a multi-year network roadmap, identifying key initiatives, technology investments, and migration strategies.
• Conduct thorough assessments of existing network infrastructure, identifying gaps, risks, and opportunities for improvement.
• Architecture Design and Engineering:
• Guide the design and architecture of highly available, scalable, secure, and resilient network solutions for diverse transportation systems (e.g., traffic management, ITS, ATMS).
• Create detailed network designs, including logical and physical topologies, IP addressing schemes, routing protocols, and Quality of Service (QoS) policies.
• Design network segmentation strategies to isolate critical OT systems from IT networks, enhancing security and operational integrity.
• Architect solutions for IT/OT convergence, ensuring seamless and secure data exchange between different operational domains.
• Evaluate and select appropriate network hardware, software, and services from various vendors.
• Network Security and Compliance:
• Establish and enforce robust network security policies and procedures across both IT and OT environments, adhering to industry's best practices and regulatory requirements (e.g., NIST).
• Design and implement security controls, including firewalls, Intrusion Detection/Prevention Systems (IDS/IPS), VPNs, network access control (NAC), and encryption.
• Conduct regular security risk assessments, vulnerability analyses, and penetration testing of network infrastructure.
• Ensure network designs comply with relevant cybersecurity standards and contribute to overall system resilience.
• Support internal and external audits related to network security and compliance.
• Performance Optimization and Reliability:
• Ensure the optimal performance, availability, and reliability of all network components and services critical to transportation operations.
• Develop and implement network monitoring strategies, utilizing tools to track performance metrics, identify anomalies, and proactively address potential issues.
• Troubleshoot complex network problems, often under pressure, to minimize downtime and impact on transportation services.
• Design and implement disaster recovery and business continuity plans for network infrastructure.
• Technology Evaluation and Innovation:
• Stay at the forefront of emerging network technologies and trends relevant to transportation, such as 5G, IoT, AI/ML for network analytics, Software-Defined Networking (SDN), and cloud networking.
• Research, evaluate, and pilot new technologies to enhance network capabilities, efficiency, and security.
• Champion innovation and drive the adoption of advanced network solutions that can improve transportation system management and operations.
• Project Leadership and Collaboration:
• Guide network-related projects, ensuring successful delivery within scope, budget, and timeline.
• Collaborate effectively with cross-functional teams, including IT operations, OT engineers, system integrators, cybersecurity teams, business teams, and external vendors.
• Provide technical guidance, and mentorship to network engineering teams.
• Manage vendor relationships, negotiate contracts, and oversee the implementation of vendor solutions.
• Documentation and Knowledge Management:
• Maintain comprehensive and up-to-date network documentation, including architecture diagrams, configuration details, operational procedures, and security policies.
• Develop and deliver technical training and knowledge transfer to relevant personnel.
  

Mandatory Requirements

• Experience (15 Years)
• Designs and implements computer and information networks, such as local area networks (LAN), wide area networks (WAN), intranets, extranets, and other data communications networks. Performs network modeling, analysis, and planning.
  
  

Requirements

• This is an 100% Onsite.
• 84 months of experience in IT and OT networking including networking protocols (routing, switching and wireless protocols); enterprise-grade network hardware (Cisco, Palo Alto, Fortinet); network security principles and technologies; wireless networking technologies; and network monitoring and troubleshooting.
• 84 months of experience in designing and managing complex IT and OT networks within the transportation sector such as adaptive traffic signal control; safety and reliability standards; Intelligent Transportation Systems (ITS); and Advanced Traffic Management Systems (ATMS).
• 72 months of experience in architecting and implementing solutions that integrate IT and OT environments addressing IT/OT Convergence challenges; and real-time data processing and management.
• 72 months of experience in designing and managing specific networks needs of transportation sector technologies such as adaptive traffic signal control; safety and reliability standards; Intelligent Transportation Systems (ITS); and Advanced Traffic Management Systems (ATMS).
• 60 months of experience with IT and OT Network operational support including incident response and root cause analysis.
• 60 months of experience with Cybersecurity specific to IT/OT Convergence including implementation of layered security approaches; compliance with regulations and standards; and zero-trust architecture and implementation.
• 60 months of experience collaborating with cross-functional teams (business, technical and security); and, producing both written and verbal communication articulating secure networking concepts to both technical and non-technical audiences.
• MUST hold at least one of these:
• **bachelor's degree in computer science, Information Technology or a closely related field
• **Cisco Certified Internetwork Expert (CCIE) - Enterprise Infrastructure, Security, or Service Provider
• **Vendor-specific advanced certifications (e.g., Palo Alto Networks Certified Network Security Engineer - PCNSE
• **Certified Information Systems Security Professional (CISSP)
• R sum
• Copy of Candidate Identification (i.e., Driver's License/Green Card/Visa and Passport if applicable)
• Any documents referenced in the above Requested Qualifications (i.e., professional certifications, degrees, etc.)