Senior Network Engineer

Application Deadline: 23 April 2025

Department: Information Technology

Employment Type: Full Time

Location: Crystal Building 40 W20th St

Reporting To: Jeffrey Marable

Compensation: $120,000 - $130,000 / year

Description

Overview
The IT Infrastructure & Operations Network Engineering department is responsible for the architecture, planning, implementation, installation and operations of NYPL's network infrastructure. NYPL covers three boroughs with 90+ branch locations, 12K+ endpoints, public/private cloud, and public/staff WiFi serving millions of New Yorkers every year. The Library’s network is highly redundant to ensure essential services are available with maximum uptime. 
We are looking for someone we can count on to:
Own:

• Engineering level administration of NYPL’ network including routing, firewalls, ACLs, VLAN designs, VPN and of NYPL’s Public and Staff WiFi networks
• Reviewing initial business requirements and work alongside colleagues to provide initial technical designs
• Providing installation and engineering level support of NYPL network equipment and services
• Liaising with business partners on projects as necessary

Teach:

• And support Network Engineers on the team
• Other IT departments to ensure understanding of network considerations
• Colleagues across the business to ensure clear expectations are set

Learn:

• The Library’s unique place in providing network access as a means to accomplish its mission and bridge the digital divideAdvanced networking administration and implementation methodologies
• And explore Zero-Trust network security models and help NYPL prepare for the future
• E-rate funding guidelines

Improve:

• Monitoring and operation efficiency of the networking stack
• Network security tools and practices

Some expectations for this role are that within:
1 month, this person will:

• Be familiar with IT practices and teams, roles & responsibilities
• Build initial relationships with key vendors and services providers
• Build initial relationships with internal stakeholders 
• Understand NYPL’s network topology (WAN, LAN, WiFi)
• Be familiar with current project backlog
• Coordinate with team leadership to prioritize work
• Have clear expectations and goals moving forward

3 months, this person will:

• Plan for future bandwidth upgrades Branch locations 
• Able to field change and support requests for most of the network
• Support key projects with minimal supervision

6 months and beyond, this person will:

• Own WAN, VPN, and core routing administration, day-to-day management and operations
• Begin preparing for network equipment upgrades
• Participate in roadmap development

Responsibilities

• Architect, deploy, monitor and maintain the NYPL data network environment which consists largely of Cisco routers, switches and firewalls, as well as Extreme, & Cisco wireless network equipment  
• Install, configure and maintain network firewalls (Cisco. Fortinet)
• Design and implement appropriate network level security controls at the Internet, datacenter, WiFi, and departmental LAN layers of the network (VLANS design, ACLs)
• Install and maintain data circuits between core locations, including dark and lit fiber at multigigabit speeds
• Prepare bid specifications for network routers, switches and security appliances, network monitoring systems, and core circuit connections, and participate in the evaluation of bids
• Plan future growth and integrate new technologies into the NYPL network
• Perform other assigned duties as necessary

Required Education, Experience & Skills

Required Education & CertificationsBachelor’s degree Required Experience

• 5+ years administering networks for a widely distributed organization
• Experience designing and implementing networks
• Experience collaborating across IT support groups and business units  

Required Skills

• Deep hands-on experience with Cisco IOS features and LAN/WAN switching & routing technologies, including BGP, OSPF, EIGRP & Spanning Tree protocols, VPN, port/etherchannel, VLAN design, and ACLs
• Excellent knowledge of Cisco network security practices and competent in configuring and supporting network firewalls (Cisco, Palo Alto)