NYS ITS PRD-120 DevOps Engineer- Level 2, Remote
Job Title & Skill Level DevOps Engineer- Level 2
Client: NYS ITS
Information Technology Services
Designated Work Location
CNSE ZEN Bldg., Room 205, 201 Fuller Road, Albany, NY 12203
Telecommuting offered with the position: Negotiable / TBD
Anticipated Duration of the Engagement: 36
Number of resources being requested: 1
Project: Data Center Networks (DCN) Hybrid Cloud - GCP
Mandatory Qualifications:
- Level I- Between three (3) and seven (7) years of experience as a DevOps Engineer
- Expert GCP network infrastructure: VPCs, subnets, firewall rules, VPC routing, Network Connectivity Center, Cloud Router, CloudVPN, Cloud Interconnect, CloudNAT, load balancers, private service connections, logging, alerting, and troubleshooting
- Advanced experience designing, implementing, and supporting hybrid GCP connectivity.
- Proficiency in layer 3 routing including Border Gateway Protocol (BGP), VRFs, route maps, redistribution, NAT, subnetting, etc.
- Proficiency in Palo Alto PAN-OS including security policies, NAT policies, zones, routing, tunnels, upgrades, logging, and monitoring
Desirable Qualifications
- Working knowledge of cloud application platforms and their networking requirements (Kubernetes engines/services, serverless, etc.)
- Proficiency in Terraform to assist in the development of Infrastructure as Code (IaC) and CI/CD for uniform cloud configuration and backup solutions
- Proficient Microsoft Azure network infrastructure: VNets, subnets, NSGs, route tables, VNGs, Site-to-site VPN, ExpressRoute Direct, load balancers, logging, alerting, and troubleshooting.
- Proficient AWS network infrastructure: VPCs, subnets, security groups, route tables, Virtual Private GW, Transit Gateway, Cloud WAN, Site-to-Site VPN, Direct Connect,
- NACLs, load balancers, peering, logging, alerting, and troubleshooting.
- Experience working with monitoring and packet capture/analysis tools such as Zenoss, Splunk, Palo Alto Panorama, Arista Cloud Vision as a Service, NfSen, Ixia, Gigastor, Wireshark, etc
- Proficiency in Microsoft Visio for solutions documentation
- Proficiency in Domain Name System (DNS) and managing split-brain public/private resolution design
Project or Program : Data Center Networks (DCN) Hybrid Cloud - GCP
Duties and Responsibilities to be performed by the consultant
- Manage and lead in the orchestration of multi-discipline technologies for the resolution of complex problems; communicate with technology and business leaders for problem resolution and make recommendations for system enhancements as required.
• Provide 24x7x365 on-call network support for advanced troubleshooting, escalation and ticket resolutions on a rotating basis
• Design, deploy, and maintain cloud networking infrastructure in AWS, Azure, and GCP to support new and existing NYS agency application deployments in the cloud
• Design, deploy, and maintain network virtual appliances as needed including Arista CloudEOS and Palo Alto PAN-OS with integrations into CSP network
infrastructure (GCP NCC, AWS TGW Connect, etc.) , etc.)
• Design and implement on-prem to cloud connectivity solutions as required by application needs in collaboration with ISO and network/application architecture
teams
• Assist with application design to ensure connectivity compliance with NYS ITS information security standards
• Collaborate and troubleshoot with direct cloud connectivity providers to develop solutions and solve problems
• Assist in the development of Infrastructure as Code (IaC) uniform cloud configuration, deployment, and backup solutions using Terraform
• Provide in-depth analysis on network performance using monitoring tools such as Zenoss, Splunk, Palo Alto Panorama, Arista Cloud Vision as a Service, NfSen, Ixia,
Gigastor, Wireshark, etc.
• Ensure that network availability of cloud environments is maximized by overseeing Change Control procedures, code upgrades, network monitoring, installations,
moves and changes, and troubleshooting complex issues.
• Oversee network monitoring to ensure maximum network availability.
• Participate in network performance analysis, training, and capacity planning.
• Document all design and implementation work using Microsoft Visio
• Participate in knowledge transfer and training sessions with junior staff
• Occasional travel may be required
