Senior Network Engineer

San Diego International is built upon the vision that every team member has a stake in bringing our “Good Feelings, Nonstop” brand to life for every passenger and fellow employee. Here at the Airport Authority, we love San Diego as much as we love flying, and we see our airport as an extension of the always friendly and sunny city we call home. If you’re looking for a team that values each other, does great work, and most importantly, has a lot of fun along the way, we invite you to apply today.

The Information & Technology Services department is looking for a Senior Network Engineer who can come in strong and help lead the charge with a dedicated team of like-minded individuals. This is a pure Cisco shop dedicated to building the best and most secure software defined network using Cisco DNAC, Identity Service Engine (ISE), Cisco Secure Firewall, Cisco ACI and StealthWatch. We have a large campus presence and extensions to the cloud using AWS and Azure.

The selected candidate will need a strong background in Cisco DNAC, ISE and Firewalls, and very strong routing/switching skills. Background with Cisco ACI, Cisco Secure Analytics (formerly StealthWatch), Cisco WLC's, and Cisco VOIP technologies would be great, but not a requirement. However, be prepared to add these to your list of skills as this will be your opportunity to master these technologies and more. You won't be restricted in your opportunities to learn “any and all” of these technologies. Enjoy a flexible telecommuting schedule (3 days remote, 2 days on-site) as you design and configure network infrastructure with the following in mind:

Essential Functions:

1. Designs, configures, Implements and supports a Cisco based Software Defined Network based on Cisco DNA Center and Cisco 9000 series switches that utilizes 802.1x port authentication and Security Group Tags to restrict traffic intra VRF and inter VRF. Intent based network design and software image management.

2. Designs, configures, Implements and supports Cisco’s Identity Service Engine (ISE) in Its role of AAA authentication for VPN, 802.1x authentication (radius), and TACACS+ for management plane access to switches, servers and appliances that make up the network infrastructure.

3. Designs, configures, Implements and supports Cisco’s Secure Firewall technology. This consists of “on-prem” Firepower Management Center, 9300 Firepower Management Chassis, 4100 Firepower Management Chassis, physical and virtual FTD Secure Firewalls, and ASA Firewalls.

4. Designs, configures, Implements and supports Cisco’s ACI (application centric infrastructure) Data Center consisting of APIC controllers and various Nexus 9000 series switches that comprise a multi-pod, redundant data center design.

5. Heavy security focus from edge to device. Utilizing best practices in firewall technologies and responsive SIEM implementations utilizing SolarWinds and Cisco Secure Analytics (formerly StealthWatch).

6. Manage new projects and terminals, consisting of design review, configuration and implementation of changes to the network to accommodate an ever-changing landscape.

7. Implement best practices across all facets of networking, routing, switching, WAN technologies and security.

Competencies

1. Critical Evaluation: Ability to exercise independent discretion and judgment to analyze and define a problem, evaluate alternative solutions, and identify an optimal solution; listens and clarifies information as needed.
2. Communication: Effectively exchange information with stakeholders through various avenues, including but not limited to verbal, written, facilitation, and persuasion.
3. Judgement & Decision Making: Ability to use appropriate judgement and confidentiality in selecting procedures, conducting transactions with other departments, vendors and the public and solving non-routine problems based on experience-based knowledge.
4. Customer & Personal Service: Provides assistance and support to internal and external stakeholders on a diverse and specialized range of IT related functions with a timely, friendly, and welcoming demeanor.
5. Project Coordination: Ability to determine appropriate measures to achieve project goals and prioritize the measures; able to fully engage project participants to deliver an acceptable result in the time allocated.
6. Leveraging Technology: Proficient in wired, wireless, local and area wide network systems.

Requirements

Required Education, Training and Experience:

• Bachelor’s degree with a major in computer science, management informa