Sr. Network Engineer (Cisco VSS, Palo Alto, Cisco ISE, Network Access Control) - UCOP

Senior Network EngineerVirtual USC, GC, GC EAD Hybrid: Oakland, CAMust live in the general area, near Oakland, Fremont or San Francisco, local east Bay candidates only!4-page max resumesCommunication skills are VERY important – will be working with multiple stakeholdersPosition Summary: Senior Network Engineer will support our data network and services team, including security, LAN, WAN, and Wireless. The incumbent manages the operational reliability and performance of existing buildings, promptly resolving any network or security service interruptions that occur. As required by business changes, it extends and enhances the company network.Required Qualifications:Advance knowledge of Network routings and protocols (TCP/UDP, DHCP, DNS, etc.), attack vectors, techniques, and remediations.Advance knowledge of Cisco VSS, wireless, Palo Alto Networks FW, Global Protect VPN, Palo Alto Policy Based Routing, Segmentation, Cisco VRF, routing protocolsEstablish and maintain a comprehensive security framework that includes network access controls.Implement patching and security update program to ensure all network infrastructure equipment is up-to-date on software features and security updatesHas highly developed problem-solving skills to independently resolve issues using defined parameters and technical expertise.Clearly understands the communications and network needs of the organization and has the skills needed to address those needs.Demonstrated ability to analyze highly complex communication hardware and software systems for maintaining a real-time resource that impacts OP-wide network users.Demonstrated ability to gather, organize and analyze data in the completion of a variety of functional assignments.Able to learn effectively and meet deadlines.Demonstrated ability to communicate technical information to technical and non-technical personnel at various levels in the organization.Self-motivated and works independently and as part of a team.Ability to interpret cabling plans and oversee installers to ensure standards are met.

Familiar with cabling and termination specifications, maintenance, and problem determination.Ability to deploy and maintain Infoblox DDIAt least 8 years of experience designing, implementing, and maintaining an enterprise network.May require travel outside of regular business hours.Participate in 24/7 on-call support rotation.General knowledge of Cisco Client, and Network Access Control (Endpoint Compliance, Policy enforcement, MAB)Advance knowledge of PAN NGFW, GlobalProtect VPN, routers, switches, and wireless.Familiarity with Infoblox NIOS-based DNS/DHCP/IPAM implementations.In-depth understanding of communication protocols (mainly TCP/IP) and routing protocols (e.g. BGP, OSPF)Ability to plan, configure, and install Citrix NetScaler/Client load balancing, redirect, and content switching configurations.Education:Bachelor's degree in a related area and/or equivalent experience/training.