Infrastructure Senior Engineer - Network

Job Summary

Looking for a career where you can give back to those who have supported you? Have a favorite teacher or snowplow driver who helped you through a storm or maybe a State Trooper that let you off with a warning? If so, there is a good chance they are a PERA member. Colorado PERA provides retirement benefits for Colorado State Employees, like many teachers, snowplow drivers and State Troopers.

Come join the team and give back to those who have helped you.

Colorado PERA’s Information Technology team is expanding, and we're looking for talented individuals to join us! We have an immediate opening for a Full Stack Senior Networking Engineer who can design networks on-prem, in the cloud, on the edge and everywhere in between. You will be the go-to person for all network related hardware and software along with protecting our network from unauthorized access, threats and vulnerabilities.

• Protect our network perimeter by filtering incoming and outgoing traffic, ensuring only authorized access is granted, while monitoring for potential security threats and implementing necessary security policies
• Design, implement, manage, integrate, and maintain the organization's network including on‑prem and in the cloud
• Experience with network security including Intrusion Detection, Protection, and tunneling
• Management of Certificate Authority and certificate issuance

• Degree in technical (STEM) field and four years’ experience in technical role preferred, or equivalent combination of education and experience
• Expertise in firewall technologies and network security
• Strong understanding of network protocols including TCP/IP, UDP, MPLS, BGP, OSPF, and TLS
• Experience with design and implementation of security through IP subnets and routing
• Networking certifications including CCNP (Data Center/Enterprise) and CCDE preferred

This position is an SME for firewalls and networking responsible for designing, integrating, implementing, maintaining, testing, monitoring, and assessing system technology across the organization. Leads efforts in network security and traffic flow management, primarily responsible for planning, implementing, and integrating disparate network software and hardware solutions. Mentors, coaches, and guides other Engineers and Administrators to address complex networking solutions that require proactive strategies and in‑depth evaluation.

Leads technical projects and delivers short‑ and long‑term technological networking solutions.

Employees are held accountable for all duties of the job. Individuals must be able to perform these duties with or without reasonable accommodations.

• Subject Matter Expert in perimeter network domain including WAN‑LAN integrations, security, redundancy, design, implementation, support, and vendor interaction
• Ability to support other staff working Level 3 calls, immediately recognizing solutions without relying on vendor support, occasionally research, resolve, and document unknown root cause solutions
• Oversee and manage firewall systems, design multiple tool integrations to support vulnerability reduction while supporting Administrators and Engineers working on specific vulnerability and security risks
• Research and develop mitigations for security related network vulnerabilities, act as SME for specific security tools within PERA’s networking domain, and evaluate and review configurations and actions ensuring all changes improve the infrastructure security posture at PERA
• Design, implement, and mentor other staff in firewall management and participate in disaster recovery testing with a focus on communications in a DR test/event, ensuring documentation is written, diagrammed, up to date, tested, and improved for system recovery and operation
• Expert comprehension of multiple PERA systems, projects, project specifications, and Dev Sec Ops  initiatives that require a firewall/network SME contributor
• Identify and evaluate opportunity to improve confidentiality, integrity, and availability in multiple areas of SME expertise, design and lead various network and encryption…