Network Engineer II

SALARY

$95,500 – $111,500

POSITION SUMMARY

Under general supervision, installs, configures, administers, monitors, and maintains the Authority's enterprise network infrastructure. Provides advanced technical support for network systems by troubleshooting hardware, software, and connectivity issues; assists with network upgrades and infrastructure projects; and ensures the reliability, security, and performance of the Authority's network environment.

Qualifications

PRIMARY RESPONSIBILITIES

• Installs, configures, administers, and maintains enterprise network infrastructure.

• Installs, configures, and supports routers, switches, wireless controllers, firewalls, and related network equipment.

• Performs routine network maintenance, firmware updates, software upgrades, and system patches.

• Monitors network performance and availability using enterprise monitoring tools.

• Implements network configuration changes in accordance with Authority standards and best practices.

• Performs performance tuning to improve network reliability and efficiency.

• Troubleshoots network hardware, software, and connectivity issues.

• Investigates and resolves complex network incidents escalated from lower support tiers.

• Diagnoses routing, switching, wireless, firewall, and WAN connectivity issues.

• Coordinates with telecommunications providers and hardware vendors to resolve service interruptions and equipment failures.

• Documents problems and resolutions for future reference.

• Assists with network infrastructure projects.

• Assists in planning, testing, implementing, and validating network upgrades, installations, and technology refresh initiatives.

• Coordinates installation activities to minimize operational impacts.

• Verifies that network implementations comply with Authority standards.

• Maintains network security and system integrity.

• Administers firewall policies, access control lists, authentication services, and network security configurations.

• Assists with implementing cybersecurity recommendations and security best practices.

• Ensures network devices remain current with vendor-supported firmware and security updates.

• Develops and maintains technical documentation.

• Documents network configurations, standards, procedures, diagrams, and topology information.

• Maintains reports and documentation supporting network operations and management decision-making.

• Performs related duties as assigned.

MANAGEMENT RESPONSIBILITIES

Reporting to this position are the following jobs:

Job Title

• None

CHALLENGES

• Supporting a 24-hour per day, 7-day per week transit operation.

• Maintaining reliable network connectivity across geographically dispersed facilities and transit operations.

• Implementing infrastructure upgrades while minimizing service interruptions.

• Keeping current with evolving networking technologies and cybersecurity best practices.

EDUCATION/EXPERIENCE REQUIREMENTS

• Bachelor’s degree in information technology, Computer Science, Electrical Engineering, or a related field, plus three (3) years of experience installing, configuring, administering, and maintaining enterprise network infrastructure, or an equivalent combination of education and experience relating to this position.

• Experience supporting enterprise routing, switching, wireless, firewall, and WAN technologies required.

• Cisco Certified Network Associate (CCNA) certification or equivalent vendor certification required.

• Cisco Certified Network Professional (CCNP) certification preferred.

PHYSICAL REQUIREMENTS

• Requires sitting for extended periods of time, standing, visual acumen, manual dexterity, and fingering for working with computer keyboards and other electronic equipment.

• Requires stooping, bending, kneeling, standing, climbing, lifting, and walking on ballasted track and in subway tunnels.

• May be required to lift and transport network equipment and materials weighing up to approximately 40 pounds.

• May be required to work in confined spaces and access network equipment located in telecommunications rooms, equipment cabinets, and other operational environments.

• Service Area Requirement: Exempt (Non-Union) employees must live within the boundaries of the CTA Statutory Service Area either at the time of employment or within 6 months of beginning employment at CTA.

KNOWLEDGE, SKILLS, AND ABILITIES

• Detailed knowledge of TCP/IP networking architecture and principles.

• Detailed knowledge of routing protocols including EIGRP, OSPF, and BGP.

• Detailed knowledge of VLANs, spanning tree, link aggregation, DHCP, DNS, SNMP, SSH, FTP/SFTP, VRRP, and related networking protocols.

• Detailed knowledge of enterprise systems monitoring and management tools including LogicMonitor, Cisco Nexus Dashboard, Cisco Catalyst Center, Cisco FMC, Cisco ASDM, SolarWinds, Cisco Secure Network Analytics, and Wireshark.

• Detailed knowledge of Cisco, Fortinet, Nokia, and enterprise networking hardware.

• Detailed knowledge of wireless networking technologies, Cisco Wireless LAN Controllers, HP/Juniper Mist, and industrial wireless architectures.

• Detailed knowledge of network security principles, TACACS+, RADIUS, Cisco ISE, Cisco ASA/FTD, Fortinet Firewalls, and industry best practices.

• Working knowledge of VXLAN/EVPN, multicast protocols, GRE/IPSec tunnels, policy-based routing, load balancing, and SR-MPLS.

• Working knowledge of Python, Ansible, or other network automation technologies preferred.

• Strong analytical, organizational, and problem-solving skills.

• Good written and verbal communication skills.

• Ability to establish and maintain cooperative working relationships with other employees, departments, vendors, and contractors.

WORKING CONDITIONS

• General office environment.

• Required to travel to various locations within the CTA.

• Occasionally works along elevated, ballasted, and subway tracks adjacent to moving rail vehicles and energized power rails, as well as CTA bus garages, maintenance facilities, and other Authority locations.

• Subject to prevailing weather conditions when conducting field work.

• Required to participate in an on-call rotation and respond to network emergencies outside normal business hours.

EQUIPMENT, TOOLS, AND MATERIALS UTILIZED

• Standard office equipment.

• Enterprise network monitoring and management tools, including LogicMonitor, Cisco Nexus Dashboard, Cisco Catalyst Center, Cisco ASDM, Cisco FMC, SolarWinds, Cisco Secure Network Analytics, HP/Juniper Mist, NetBox, Unimus, Ericsson NetCloud, Sierra Wireless, and Nokia NSP.

• Enterprise networking hardware and software, including routers, switches, firewalls, wireless controllers, cellular networking devices, and related diagnostic and testing equipment.

• Microsoft Office Suite, Visio, Teams, Outlook, OneDrive, Zoom, and other business applications.