Network Engineer III (Systems Automation Engineer)

Overview
As a Network Engineer III (Systems Automation Engineer), your effort will be focused on all aspects of City-wide IT computer management infrastructure, desktop and server configuration/imaging/deployments, endpoint management and security, development of server and cloud infrastructure processes, design and execution of future state endpoint management, and orchestration of workflows to optimize the value of investments in server and endpoint infrastructure. Microsoft System Center Configuration Manager and related components for endpoint management and Microsoft Active Directory and Group Policy administration will be major responsibilities. Additional skills or aptitude to develop and optimize infrastructure and perform current systems maintenance will be critical to carry us forward with DevOps methodologies for standardized system provisioning and orchestration across various IT tools.

The Opportunity - Examples of duties include:

• Participate in and support capacity planning and the development of long-term strategic goals for systems and software in conjunction with end-users and department managers.
• Coordinate with information security, network engineering, service desk, business application, and database administration functions to implement desktop and server systems that utilize industry best practices to meet corporate objectives.
• Deploy servers, host-based firewalls, encryption systems, and all host security systems.
• Manage and administer Microsoft Active Directory infrastructure using best practices.
• Manage and administer Advanced Group Policy Management.
• Manage SCCM infrastructure, operating system, and application deployment including troubleshooting and applying MSI packaging best practices.
• Continuously assess server infrastructure for process improvements including virtual machine provisioning and performance monitoring.
• Azure administration and infrastructure development using Azure Portal, ARM templates, Ansible.
• Writing configuration management code for Ansible, Chef, ARM.
• Writing container code for Docker, Docker Swarm, Kubernetes.
• Writing shell scripts for Bash.
• Design, deploy, cross-train, adhere and enforce, contribute to server baseline configuration and automated provisioning process improvements.
• Develop, document, and maintain policies, procedures, and associated training plans for system administration and appropriate use.
• Perform network and security audits.
• Conduct research on emerging products, services, protocols, and standards in support of systems software procurement and development efforts.
• Contribute to continuous integrations and enhancements with Splunk, Nagios, SCOM, and other monitoring and alerting tools.
• Conduct research and make recommendations on products, services, protocols, and standards in support of all infrastructure procurement and development efforts.
• Work with vendors, outsourcers, and contractors to secure infrastructure-specific products and services.
• Lead with the planning and deployment of desktop and server security measures.
• Contribute to design, maintenance, development, and evaluation of all infrastructure systems.
• Develop, test, and manage computer systems performance and provide performance statistics and reports; contribute to strategies for maintaining infrastructure.
• Reviewing, recommending, approving, and deploying automated process improvements through application of DevOps concepts and best practices.
• Participate in the design, architecture, implementation, and maintenance of secure systems architecture standards and review and approval of architectural changes.
• Working with and fostering collaboration among key stakeholders, developing, communicating, and adhering to all information security policies, standards, procedures, and internal controls to ensure compliance with local, state, and federal laws and information security best practices.
• Providing technical and functional demonstrations and information to recommend and approve best-practice configurations for operating systems, applications, networking, and telecommunications equipment.
• Investigating and recommending innovative technologies that reduce IT risk and provide potential cost savings for the City.
• Manage, deploy, and support identity access management services such as single sign-on (SSO) integrations with on-prem and hosted services.
  
• Performing other duties as assigned.

About the Department
The Information Technology Services Department is responsible for enterprise technology operations for the City of Alexandria. ITS provides technology services and solutions to City departments to enhance service delivery. ITS aligns its work with City needs by providing leadership, resources, expertise, and products that enable departments to better serve the City’s residents, businesses, and visitors. ITS resources support initiatives funded through the multi-year Information Technology Capital Improvement Plan (IT/CIP) to improve the overall technology landscape. The City of Alexandria’s ITS Department has been a Top Ten National Finalist in the Digital Cities Award program for over the past 15 years.

Minimum & Additional Requirements

Four-Year College Degree; five or more years of experience in firewall technologies and advanced network and server support, Ethernet routing switches, web filtering, bandwidth management, Quality of Service (QOS) techniques, Wireless AP's and Security switch devices that include SSL-VPN & IPSEC VPN; considerable working knowledge of network troubleshooting techniques; at least three years of experience in the design and configuration of Voice over IP (VoIP) networking; at least three years of experience in the design, configuration and operation of DHCP & DNS networking services; at least three years of experience in Internet backbone connectivity; or any equivalent combination of experience and training which provides the required knowledge, skills, and abilities.

Preferred Qualifications

Preferred candidates will have all the above as well as the following:

• Experience with audit and regulatory compliance, business continuity and disaster recovery, and configuration management.
• Experience with and knowledge of automation and orchestration of infrastructure and network resources using common industry orchestration tools.
• Demonstrated progressive technical experience and industry knowledge of either Citrix, Linux/Unix products, Ansible, or VMWare products.
• Experience writing container code for Docker, Docker Swarm, and Kubernetes
• 5-year technical experience with and STRONG working knowledge of and application of best practices for:

Microsoft Active Directory and Group Policy

SCCM architecture and design

SCCM configuration and maintenance

SCCM deployments, application deployment, and endpoint management

Microsoft Modern Device Management

Experience with image development and deployment for servers/desktops

PowerShell scripting

Additional Computer Management Tools

• Recent experience with and knowledge of information protection standards, guidelines, and applied procedures.
• Five (5) years experience with and knowledge of information security best practices aligned with system administration.
• Technical experience with and knowledge of server, cloud, and automation administration as applied with DevOps concepts and best practices.
• Appropriate technical certifications.