Responsibilities
- Design and deliver network solutions within a Private Cloud infrastructure; Public cloud experience is a plus.
- Execute controlled network changes across firewalls, load balancers, DDOS, WAF, and route/switching.
- Operate network changes using orchestration and automation products, tools, and scripts.
- Support and maintain multiple multi-vendor production network environments critical to the business.
- Manage and execute network and firewall requests in accordance with security policies on mission-critical infrastructure.
- Troubleshoot complex network issues and performance problems.
- Design, configure, and support real-time market data feeds over IP multicast and unicast.
- Research and design new networking solutions based on given requirements.
- Assist ICE staff with problem-solving and escalation procedures.
- Understand and follow operational policies/procedures and promote adherence to the same.
- Provide technical knowledge needed to ensure safe, effective, and efficient changes to the network infrastructure.
- Assist with the development of policies and procedures for maintaining network infrastructure.
- Collaborate and work closely with Cybersecurity, Systems engineering, and Datacenter engineering teams.
- Participate in a 24/7 on-call rotation.
Knowledge and Experience
- Implement, enhance, and maintain network orchestration and automation-based products and solutions such as Ansible, Puppet, Chef, Vendor-based, etc.
- Network programming and scripting skills in Python, Bash, Perl, JSON, etc.
- Network Operating Systems and Product Technologies such as Palo Alto, Checkpoint, Juniper, Arista, Cisco, F5, Kemp, A-10, Cloudflare, Akamai, Fortinet, etc.
- 5+ years of relevant experience in the design, deployment, and support for large-scale, multi-vendor, secured networks.
- Extensive knowledge of three or more network operating systems/platforms including Junos, IOS/NX-OS, EOS, PANOS, IPSO, or F5 LTM/GTM.
- Ability to identify, create, and deliver standards and best practice solutions.
Preferred
- B.S. in Computer Science/Information Technology or equivalent relative work experience.
- Knowledge of stateful packet inspection firewalls.
- Experience administering CDN and DDOS products such as Cloudflare, Akamai, Arbor, Imperva, or similar.
- Knowledge of Juniper MX/EX/QFX and Arista platforms.
- Expert TCP/IP, OSPF, and BGP routing skills.
- Expertise in packet capture, decode, and analysis.
- Extensive knowledge of multicast design and troubleshooting including IGMP and PIM protocols.
- Deep understanding of NAT, route maps/ACLs, routing policies, and IPSEC VPN.
- Experience coding with any combination of Perl, Ruby, Bash, Python, XML, JSON.
- Experience with automation/configuration management tools such as Ansible, Chef, and Puppet.
- Ability to multitask and work independently on multiple projects.
- Ability to differentiate between a critical business-impacting incident and a minor problem and resolve/escalate accordingly.
- Experience working on financial/HFT networks.
- Knowledge and skills with VXLAN and EVPN technologies.
- Juniper, Arista, or Cisco advanced certification.
- Firewall advanced certification.
- Unix/Linux system administration.
- Fluency with operating Splunk or other SIEM-based products.
