Senior Network Engineer

UDR, Inc. is now hiring a Senior Network Engineer to join our team at our corporate office in Highlands Ranch, CO.

GENERAL SUMMARY OF DUTIES: Responsible for effective provisioning, installation/configuration, operation, support, design, and maintenance of network and security systems, hardware, software, and related infrastructure. Participates in technical research and development to enable continuing innovation within the network infrastructure. Ensures that system hardware, operating systems, software systems, and related procedures adhere to organizational values and strategic goals. Balances priorities between items such as working support issues, training lower level support groups, creating and updating documentation, performing required maintenance and backups, participating in meetings as required, providing project support through the completion of assigned tasks, participating in on-call rotations, and completing other duties as assigned by team leads, supervisors, and direct managers.

SUPERVISION RECEIVED: Reports to the Manager – IT Availability

SUPERVISION EXERCISED: N/A

ESSENTIAL FUNCTIONS:

Engineering and Provisioning:

1. Engineering of Network-related solutions for various project and operational needs.
2. Install new / rebuild existing switches, routers, firewalls, monitoring systems, management platforms, and configure hardware, network modules, UCS servers, services, settings, policies, etc. in accordance with standards and project/operational requirements.
3. Install and configure systems such as servers and business applications supporting infrastructure and business functions.
4. Develop and maintain documentation for installation and configuration procedures, cross training, and on-going support.
5. Contribute to and maintain system standards, policies, procedures, processes, and support documentation.
6. Research and recommend innovative and automated approaches for system administration tasks. Identify approaches that leverage existing UDR resources and provide economies of scale.
7. Measure infrastructure efficiencies by documenting and recording trends of infrastructure usage and make necessary adjustments and recommendations for scaling needs ahead of time.
8. Perform continual performance reporting to support capacity planning. Engineering of Network-related solutions for various project and operational needs.

Operations and Support:

1. Perform daily system monitoring, verifying the integrity and availability of all hardware, network resources, application usage, systems and key processes, reviewing system and security logs, and verifying completion of scheduled jobs such as configuration and image backups.
2. Perform and assist with regular security monitoring to identify any possible intrusions as needed and when requested to do so by the cyber security incident response commander.
3. Perform daily backup operations, ensuring all required file systems and configuration data are successfully backed up to the appropriate media and sent off site as defined in BCP/DR policies.
4. Perform regular backup archival and purge/cleanup as necessary by working directly with other team members.
5. Create, change, and delete user accounts within TACACS or directly on network devices themselves as per request.
6. Provide Tier III/other network support for corporate, data center, and property network issues per request from various constituencies.
7. Investigate and troubleshoot issues by working and triaging all incidents as they come in via email, ticketing system, walk-up, or phone call.
8. Repair and recover from hardware or software failures. Coordinate and communicate with impacted constituencies.
9. Backfill Infrastructure and Security teams as necessary. Perform daily system monitoring, verifying the integrity and availability of all hardware, network resources, application usage, systems and key processes, reviewing system and security logs, and verifying completion of scheduled jobs such as configuration and image backups.

Maintenance:

1. Apply OS patches and upgrades on a regular basis and upgrade administrative tools and utilities.
2. Configure, add, and or procure new services or hardware as necessary.
3. Upgrade and configure system software that supports UDR infrastructure applications and business applications per project or operational needs.
4. Maintain operational, configuration, or other processes and procedures.
5. Perform periodic performance reporting to support capacity planning initiatives.
6. Perform ongoing performance tuning, hardware upgrades, and resource optimization as required.
7. Configure CPU, memory, and disk partitions as required.
8. Maintain data center environmental, infrastructure, and monitoring equipment.
9. Backfill Infrastructure and Security teams as necessary.

Security:

1. Monitor UDR's networks and systems for security breaches and investigate a violation when one occurs.
2. Install and use software/hardware, such as firewalls and data encryption programs, to protect sensitive information by working directly with the security and infrastructure teams.
3. Prepare reports that document network security breaches and the extent of the damage caused by the breaches.
4. Conduct network penetration testing, which is when analysts simulate attacks to look for vulnerabilities in UDR systems before they can be exploited.
5. Research the latest information security threats and trends.
6. Help plan and carry out UDR's cybersecurity methodologies.
7. Help develop security standards and best practices for UDR.
8. Recommend security enhancements to management or senior IT staff.
9. Help computer users when they need to install or learn about new security products and procedures.

Project Work:

1. Assist project teams and senior level engineers with technical issues during the Initiation and Planning phases of the UDR Architecture Program & Project Execution Methodology. These activities will include the gathering and definition of needs, benefits, requirements, features, use cases, and technical strategies; research & development within the project and system life cycle; technical analysis and design; and support of operations staff in executing, testing and rolling-out solutions.
2. Participation in project work is focused on ensuring the smooth deployment, transition, and hand-off of systems from deployment stage to the production and operationalization stage by establishing supporting policies, processes, procedures, standards, documentation, and training of operations activities as it pertains to the technologies within the scope of projects.
3. Perform other duties as assigned or as necessary for all of the above categories.

PERFORMANCE REQUIREMENTS: Knowledge of organizational policies and procedures. Ability to apply policies and procedures to solve everyday company issues. Ability to interpret invoices, to track and analyze payments and to work individually as well as a member of a team. Understanding of Sarbanes Oxley (SOX) compliance and auditing processes, procedures, and requirements. Proven analysis and communications skills are critical and the ability to be self-sufficient in fast-paced environment is required. Must have the ability to manage workload, to develop efficient and effective processes, and to communicate with managers and staff at all levels of the organization. Strong organization skills and the ability to work with minimal supervision. Ability to manage priorities and clearly communicate risks and challenges. Ability to proactively address and make recommendations. Ability to proactively recognize and implement superior customer service to internal and external customers. Ability to analyze data and recommend strategy. Perform duties that require initiative, analytical research, organizational skills, independent judgment, and strong communication skills. Ability to establish priorities and coordinate work activities. Ability to travel as needed. Must be skilled in focusing on desired results, determining what is important and urgent, and clarifying next steps to meet deadlines and achieve desired results. Ability to create, compose, and edit written materials. Excellent verbal and written communication skills. Ability to communicate effectively to managers and staff at all levels of the organization. Ability to deliver presentations to both technical and non-technical staff. Excellent technical background in PC applications including Word, Excel, e-mail, and file management software. Ability to develop workflows and support.

TECHNOLOGY SUMMARY: The technologies of primary focus for this role include but are not limited to:

Cisco: ASA, UCS, Nexus, 2900/3500/3600/3800/4000 series switches (L2/L3), ISR G2 and 4K Routers, ASR Routers, IOS, IOS XE, NX OS, AnyConnect, ISE, Prime, Meraki, CSR1000V, ASAv, CWS, SourceFire FireSight and Threat Defense/3D, UCS-E blades, APIC-EM, Plug’n’Play, WAAS, etc.

Juniper: SRX/SSG, EX, QFX, MX/J-Series, Junos, ScreenOS, IPS, Space

Wi-Fi: Aruba, Meraki, Cisco, Aerohive

Protocols: PfR/OER, IWAN, DMVPN, VRF/VRF-Lite, ZBF, ACL, VLAN, VXLAN, IS-IS, I-BGP/E-BGP, OSPF, EIGRP, Spanning-Tree, VTP, VACL, PACL, NAT, PNAT, PAT, IPSec, PPTP, Frame-Relay, ISAKMP, CA/PKI, TACACS, Radius, CAPWAP, MPLS, LTE, 802.1X, 802.1Q, MSCHAP, EAP, PEAP, SSL, TLS, FTPS/SFTP, LDAPS/LDAP, SAML, APP-NAV, WCCP, etc.

Virtualization: VMware vSphere 5/6, IOS-XE Containers

Scripting: PowerShell, Bash, TCL/TCLSH, Expect, Prime UI Scripting, IOC

Cloud/SaaS: AWS, Azure, Azure AD, Akamai, Anti-Spam Gateways, Glacier

TYPICAL PHYSICAL DEMANDS: Some bending, stooping and stretching. Occasionally moving and/or lifting items weighing up to or over 75 lbs. above heights of 5ft. Requires eye-hand coordination and manual dexterity sufficient to operate a keyboard, photocopier, telephone, calculator, and other office equipment. Requires normal range of hearing and eyesight to record, prepare, and communicate appropriate reports. Extensive data input and required ability to sit for long periods of time. Regular and consistent attendance on the job is an essential function. Requires mobility sufficient to travel.

TYPICAL WORKING CONDITIONS: Normal office environment. Occasional evening or weekend work. On-Call rotations. 10% travel (or as required).

EDUCATION AND EXPERIENCE:

1. Bachelor’s degree in Computer Information Systems, related field, or its equivalent experience, required.
2. Minimum of five years’ experience in a Network Engineer role or equivalent along with a broad knowledge of technology products and services.
3. Work experience with Cisco ISE, Cisco Prime, Cisco ISR’s, Cisco ASR’s, Cisco Catalyst 4K’s, Nexus 9K’s, ASA, BGP, IS-IS, OSPF, EIGRP, DMVPN, AnyConnect, CWS, SourceFire, Cisco ZBFW, ACL’s, PfR, PBR, NetFlow, Flexible NetFlow, IWAN, FireSight Manager, APIC-EM, Meraki, TACACS, Cisco CA, Wireless (Aruba/Meraki/Cisco), PVLAN, VACL, VXLAN, LoadBalancing, WAF, Proxy, Routing, Switching, Firewalling, Perimeter Security, IPS, MM/SM Duplex/Simplex Fiber, etc.
4. CCNP, CCNP Security, CCIE, CCIE Security, or similar certification(s) desired but not required.
5. Experience with ServiceNow, Splunk a plus but not required.
6. Must have and maintain a valid driver’s license unless otherwise noted.

Benefits Offered: Medical, Dental, Vision Plans Medical Flexible Spending Account Dependent Care Spending Account Supplemental Term Life Insurance Voluntary Cancer Insurance Supplemental Short-Term Disability Insurance / AD&D Insurance Voluntary Long Term Care Insurance 401(k) Plan with company match

Salary Range: $120,000/yr. (minimum) - $145,000/yr. (maximum), depends on experience

Bonus Potential: Eligible for 10% annual bonus potential, based on personal and company performance