The Network Administrator – Level III – Firewall SME is to provide high level network engineering design, installation and support expertise across the full lifecycle of the systems, services, and solutions supported by the Corporate Technology team. This primary focus will be firewall, internet connectivity and VPN but will also include, to a lesser extent, LAN, WAN, SD-WAN - both on-prem and cloud-hosted. The position requires strong problem-solving, analytical and communications skills as well as deep knowledge of the technologies used.

The NetworkAdministrator will also serve as a Subject Matter Expert (SME) to the Network Administrators in an environment that fosters cross-training and voluntary knowledge transfer.

Responsibilities
• Works under the direction of the Director Global IT Infrastructure
• Work with internal and external 3rd party vendors i.e. software and systems engineering teams to understand and implement technical requirements
• Documents design, implementation and final configuration findings for both new and existing techniques and equipment
• Provides support for incidents and end user request for services
• Resolves Network issues; complete audits; identify trends; determine system improvements; implement changes
• Escalates problems to vendors and/or senior manager for resolution
• Opens up problem reporting tickets with OEM and vendor support, and accurately uses all problem tracking software systems
• Contribute to strategic plans and reviews; prepare and complete action plans; design cost-effective networks which follow industry best practices
• Achieve network design and operational objectives by designing and engineering, evaluating, recommending, formulating, testing and implementing plans for current and new technology
• Maintain a healthy network by monitoring and evaluating network performance and issues, including availability, utilization, throughput, and latency to mitigate and prevent future issues
• Responsible for the creation and maintenance of technical documentation and ensure it is updated and kept current
• Ability to be on call and provide critical incident response 24 x7 x 365
• Occasional night and week end work
• On call rotation
• Travel up to 20%

Qualifications
Must possess strong working knowledge of design and implementation experience for data networking, routing and switching, subnetting and network segmentation in a large, multi-sites (100+) enterprise network with a keen focus around security, availability, resiliency and performance
Deep, current, hands on knowledge, of the following required:
Palo Alto networks
PanOS both physical and virtual (VMware, Azure, AWS…)

• HA setup
• “Cradle to Grave” support

Panorama, using advanced config and features such as:

• Multi VSYS
• Multi-Layer template structure / stacking
• Device Group
• Dynamic Objects / Tagging
• IOT Device Profile/Structure
• Plugin (Azure, VMware…)

 Rule creation by Reverse engineering of traffic (Expedition, log export...)

• IPSEC and Global protect based VPN

 Experience with following is a plus:

• Cisco Routers-Switches, Nexus (9000, 7000) , Catalyst (9300, 9200, 3800, 2960, 1000), ISR and ASR
• Aruba Wireless
• VMware VeloCloud
• NSX Network virtualization
• Azure Cloud Networking
• Aruba ClearPass
• F5, A10, AVI load balancers
• Network automation Deploy, configure and troubleshoot network component, routers, switches, load balancers, VoIP gateways, Session Border Controllers, and other network equipment

Strong communication and organizational skills
Ability to triage technical issues and problems
Bachelor’s Degree and/or 10+ years of experience