Senior Network Automation Engineer

In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities.

This is a Lead Workplace Engineering position at Vice President level, which is part of the job family responsible for managing and optimizing the technical environment and end-user experience across various workplace technologies, ensuring seamless operations and user satisfaction across the organization.

Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.

This position is a Senior Network Engineer role with strong expertise in implementing Network Access Control, 802.1X on Enterprise class switches. Candidate’s focus will be in developing lab testing frameworks, to test and validate the secure access using Cisco Identity Services Engine, RADIUS, authentication protocols and device certificates. This role will be critical in enhancing end point visibility and ensuring compliance across wired and wireless network infrastructure.

What you'll do in the role:

This role will entail, but not limited to, working within the framework of network access control and policy enforcement control access to the network primarily focusing on authentication at the network edge. The critical tasks at hand are:

1. To prepare the test plan(s) certifying IEEE 802.1x across a number of edge devices that carry a IEEE 802.1x supplicant ranging from Window 10/ 11/ Cisco Phones/ speakers bus turret/ Apple iOS/ Android/ and much more working in conjunction with a number of different edge switches as the IEEE 802.1x Authenticator. The backend Authentication Server is Cisco ISE

2. Automate these test plans in a ROBOT framework, using Ansible and Python such that the above validation between IEEE 802.1x Authenticator (the switch) and candidate edge device. The outcome of this is a ROBOT

3. The above two allow the creation of a self-service portal where the 802.1x interop will be verified and within the ROBOT framework a Test Report with Logs will be generated for comprehensive analysis as required.

Most helpful will be understanding network DMZ designs and certify the underlying hardware, related software features and desktop endpoints 8021.x functionality and related failure modes.

What you'll bring to the role:

The successful candidate would have a sound knowledge and experience of functional testing performed manually which then can be automated. Good Ansible and Python programming.

1. Proficiency in the ROBOT Framework: Understanding the syntax, libraries, and how to create and execute test cases using the ROBOT framework.

2. Programming Skills: Knowledge of Python

3. Networking Knowledge: Understanding of network protocols, configurations, and troubleshooting TCP/IP, DNS, DHCP, and other networking concepts.

4. Ansible: Using Ansible for automation, including writing playbooks, managing inventories, and using Ansible modules to automate network configurations and deployments.

5. Test Case Design: Ability to design effective test cases that cover various network scenarios and edge cases.

6. Attention to Detail: Meticulous attention to detail to ensure that all aspects of the network and test cases are thoroughly tested.

From the networking side hands-on experience on Routing and Switching of Cisco and Arista platform and related security/ hardening aspects, 802.1x or NAC (Network Admission Control) and TrustSec related functionality. The candidate will be collaborating with highly skilled infrastructure engineers and architects from across multiple verticals (eg. cloud/ compute/ security/ telemetry/ desktop engineering teams/ security architects et al) and senior management often on a day-to-day basis. It is absolute imperative that he/ she has excellent written and verbal communication skills.

Qualifications:

· 8+ Years of experience with LAN/WAN network design, engineering, and certification.

· CCNP Level of experience

· Proficiency in the ROBOT Framework

· Knowledge of Python

· Ansible playbooks authoring and how to integrate Ansible with ROBOT framework for seamless automation is beneficial.

· Attention to Detail: Meticulous attention to detail to ensure that all aspects of the test cases are thoroughly tested.

· Experience with building Lab designs, and certification of hardware and software of products, performing PoCs.

· Hands-on experience with Cisco Catalyst switches, 802.1X configurations.

· Understanding of device certificate management and Certificate based authentication (EAP-TLS).

· Understanding of RADIUS, Dynamic VLAN, Cr