Technology Architect (RQ11426) Health Services Cluster

Job Responsibilities

• Work in collaboration with Network Designer to roll out Next Generation LAN and WAN to MOH PSAP locations.
• Produce SD-WAN configuration (policy, template development) as per MOH design.
• Produce high-level and low-level network design (design workbooks).
• Configure switches, routers, firewalls as per the network design.
• Configure dynamic routing protocols (BGP/OSPF) on both SD-WAN and Firewall devices
• Perform physical Install of SD-WAN routers, LAN Switches, HA Firewalls
• Develop and apply Firewall policies
• Develop Centralized and Localized policies for traffic and App-Aware routing
• Test configurations and troubleshot network issues.
• Implement QoS policies for the Next Gen LAN and WAN
• Deploy configurations in network inventory DB.
• Work with facility SME/Cable Designer to assist with facility remediation.
• Develop and Configure Palo Alto Cloud logging
• Maintain and support the network environment during Pilot phase of the project
• Assist in configuration management automation initiative using Ansible and other tools
• Configure Aruba Clear Pass as Identity management solution
• Install and configure OOB management Firewalls across PSAP locations
• Perform other project related duties as required

NOTE

Extension/Amendment Attestation: Extension(s) only allowed using unused days/funds left on contract. No additional funds will be added beyond the maximum contract value and any extension options included in the original SOW.

Assignment Type: This position is listed as Onsite; the resource is expected to work 7.25 hours per calendar day between the standard working hours of 8:00-5:00 PM (excluding lunch breaks) every Monday to Friday inclusive at the identified OPS office location.

• Cisco SD-WAN (Viptela) implementation, configuration, migration, strong troubleshooting experience
• Palo Alto Firewalls, Panorama, installation, configuration, daily operation
• VMware, strong knowledge of networking operation
• Expert level IP routing and L2 in datacenter using Cisco9K switches
• Strong VoIP experience, implementing QoS for enterprise voice.
• Fluent with both Windows and Unix OS Administration
• IPv6 experience
• OS/Tools Skills
• Configuration management of networking devices using automation tools (Jenkins/Ansible) and API scripting
• Docker Containers,
• Ansible Tower
• ELK/Elastiflow Stacks,
• Netbox,
• VMware ESXi networking, vDS, clustering and high availability in virtualized environments,
• Windows Active Directory, LDAP, DNS (Infoblox or similar)

• IPv6 experience
• Strong knowledge IP communication and routing is required (OSPF, BGP).
• Aruba Clear Pass Policy Manager implementation/configuration experience
• Knowledge and experience with Palo Alto technologies (Panorama, XDR).
• Experience with the projects related to 24×7 critical environments and operations

• Ability work in agile dynamic environment
• Strong interpersonal, written, and oral communication skills with the ability to work well in a collaborative environment.
• Able to conduct research into networking issues and products as required.
• Highly self-motivated and directed, with keen attention to detail.
• Able to effectively prioritize tasks in a high-pressure environment.
• Strong customer service orientation with proven analytical and problem-solving abilities.
• Related degree in computer science or electrical engineering and/or seven to ten years equivalent network engineering experience.

Closing Date – , 1:00 p.m.

Maximum Number of Submissions – 1 (one)

Assignment Type:

Onsite

This position is listed as “Onsite”; the resource is expected to work 7.25 hours per calendar day between the standard working hours of 8:00-5:00 PM (excluding lunch breaks) every Monday to Friday inclusive at the identified OPS office location.

MUST HAVES:

• Palo Alto Firewalls, Panorama, installation, configuration, daily operation
• Cisco SD-WAN (Viptela) implementation, configuration, migration, strong troubleshooting experience
• Strong knowledge IP communication and routing is required (OSPF, BGP).