Design, configure, and manage the WAN overlay using Cisco Catalyst SD-WAN Manager (formerly vManage). Implement centralized control, data, and Application-Aware Routing (AAR) policies to optimize traffic path selection (e.g., prioritizing critical traffic signal data over video feeds). ?
Ruggedized Edge Deployment:
Configure and deploy Cisco IR1101 Industrial Integrated Services Routers in roadside cabinets. Leverage the modularity of the IR1101 to manage dual-active cellular (LTE/5G) backhaul, fiber connections, and legacy serial connections. ? Zero-Touch Provisioning (ZTP): Develop and maintain bootstrap configurations and WAN Edge templates within Catalyst SD-WAN Manager to enable rapid, automated provisioning of IR1101 routers by field technicians. ?
Legacy Device Integration:
Configure the IR1101?s serial interfaces and raw socket encapsulation to transport legacy serial-based Intelligent Transportation System (ITS) device data (e.g., older conflict monitors or loop detectors) over the modern IP/MPLS or SD-WAN network. Palo Alto & Panorama Security Administration ?
Centralized Security Management:
Utilize Palo Alto Panorama to manage device groups, templates, and security policies across all physical and virtual (VM-Series) firewalls deployed at the TMC, cloud egress points, and critical field hubs. ?
IT/OT Network Segmentation:
Design and enforce strict Zero-Trust segmentation policies. Isolate critical traffic control systems (NTCIP), tolling systems (PCI-DSS compliant), and CCTV multicast streams from each other and from the corporate IT network. ?
Threat Prevention & Monitoring:
Configure Palo Alto security profiles (IPS, Anti-Spyware, URL Filtering, and WildFire) to detect and block malicious activity targeting transportation infrastructure, including specialized signatures for industrial and IoT protocols. TSMO Operations & Multicast Video Management ?
Multicast Optimization:
Design and troubleshoot complex Layer 3 multicast networks (PIM-SM, IGMPv3) to ensure reliable, low-latency distribution of CCTV traffic camera feeds to the TMC, emergency operations centers, and media partners. ?
Network Performance Monitoring:
Monitor network latency, jitter, and packet loss across the SD-WAN fabric using Catalyst SD-WAN Manager?s analytics tools to ensure real-time traffic management applications perform optimally. ?
Incident Response & Troubleshooting:
Serve as the Tier 3 escalation point for complex network outages affecting roadside devices, fiber cuts, or cellular carrier outages. Collaboration & Standards Compliance ?
Field Support:
Partner with field technicians to troubleshoot physical layer issues (fiber optics, patch panels, antennas, and power supplies) inside roadside cabinets. ?
Standards Adherence:
Ensure all network designs comply with FHWA (Federal Highway Administration) guidelines, NEMA TS-2 cabinet standards, and
NIST SP 800-82
guidelines for industrial control systems security. Operational Support 24/7/365 on a Rotation Basis ? Provide operational support 24/7/365 for the Cisco Catalyst SD-WAN Manager and Palo Alto/Panorama environments.
Mandatory Qualifications:
? Maintains computer infrastructures with emphasis on networking. Key areas of expertise are with on-site servers, software-network interactions and network integrity/resilience. ? Candidate is able to work independently, without assistance and provides guidance to others. May have an advanced education. ? 72 months experience in enterprise - grade network administration. This includes configuring and troubleshooting LAN and WAN Networking equipment in a complex networking environment of at least 1,000 remote endpoints that includes switches, routers/firewalls and VPN devices. This includes troubleshooting issues using protocol analysis tools (i.e. Wireshark) and conducting analysis on network data captures. ? 72 months experience with Cisco Catalyst SD-WAN, including Catalyst SD-WAN Manager, Controllers, and Validator. This includes build and deploy localized and centralized policies, keeping firmware up to date and standardizing device configuration. ? 72 months experience with administration of Palo Alto NGFWs and Panorama. Experience with VM-Series firewalls in public/private clouds is a plus. ? 60 months experience with Cisco IR1101 hardware, including
IOS-XE SD-WAN
software, expansion modules, and cellular configuration ? 60 months experience with routing protocols (BGP, OSPF, EIGRP), IPsec VPNs, Quality of Service (QoS), and Multicast (PIM, IGMP). ? 36 months experience with
NTCIP 1202
(traffic signals), NTCIP 1203 (dynamic message signs), and video streaming protocols (H.264/H.265, RTSP) ? 36 months experience in an Operational Technology (OT), Intelligent Transportation Systems (ITS), or TSMO environment managing roadside communications (fiber, wireless, cellular). Must hold one of the following: ?