About this opportunity
Rise Broadband lists this Senior Engineer, Network and Systems opportunity in westlake, Texas. Review the employer’s description below for duties, qualifications and application requirements.
Job description
Position Purpose
The Senior Systems and Network Engineer provisions, operates, and secures the Company’s core infrastructure, with primary focus on Linux servers, VMware virtualization, and storage. Because the Company has no separate network team, this position also owns the data center and corporate network, including the routers, switches, and firewalls that provide routing, VPNs, and perimeter security. The position is based in Dallas and supports the Company’s two Dallas-area offices and its Dallas and Denver data centers, remotely managing Denver and assisting the onsite Denver counterpart with major projects as needed. In addition to day-to-day operations, the position monitors and evaluates systems and procedures to protect the Company from unauthorized access, recommends and implements improvements to security, reliability, and utilization, and helps ensure compliance with software licensing, network, and systems legal requirements.
Deploy, maintain and support core IT infrastructure, including Linux servers, VMware vSphere, physical server and storage hardware, and file, email (Postfix), application and DNS servers
Administer NetApp storage and storage protocols (iSCSI, Fibre Channel, NFS, SMB/CIFS), including provisioning, capacity planning and performance monitoring
Manage physical server hardware primarily through out-of-band tools (Dell iDRAC/HP iLO), including remote provisioning, firmware lifecycle management and hardware health monitoring
Perform hands-on data center work in the Dallas data center as needed for installations and projects
Maintain, patch and upgrade server and network operating systems and applications
Monitor infrastructure health and performance and respond to alerts.
Network & Perimeter
Design, implement and maintain the Company’s data center and corporate LAN/WAN infrastructure, including switching, routing, firewalls, IPSec VPN tunnels, dynamic routing protocols (including BGP on servers such as load balancers) and perimeter security
Manage network authentication, authorization and directory services, including RADIUS, TACACS+ and LDAP systems
Support the Active Directory-based security model, which acts as the root authority for most authenticated applications, by integrating Linux systems and services with it (LDAP, Kerberos, SSSD)
Security & Risk Management
Develop and deploy IT infrastructure hardening standards, and help shape the Company’s IT security and infrastructure standards
anticipate hardware and software degradation issues
Secure business applications to reduce risk; Help ensure compliance with software licensing, network and systems legal requirements
Backup & Disaster Recovery
~ Implement and maintain backup and disaster recovery systems across the Dallas and Denver data centers
Automate provisioning, configuration and routine operational tasks through scripting and configuration management
Multi-Site Support (Denver)
Develop and deploy IT infrastructure hardening standards, and help shape the Company’s IT security and infrastructure standards
anticipate hardware and software degradation issues
Secure business applications to reduce risk; Help ensure compliance with software licensing, network and systems legal requirements
Maintain Company server and network documentation and information retention policies
Collaborate with divisional resources to ensure that the Company’s IT standards are achieved
Meet fiscal requirements while ordering new equipment including servers, routers, switches, network storage, software, etc.
Work requires periodic evening and weekend work for planned maintenance windows and major projects
Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent experience
~7+ years of progressive experience in systems and network administration, including hands-on production administration of Enterprise Linux and responsibility for routing and firewall infrastructure (or an equivalent combination of education and experience)
~ Expert proficiency with Enterprise Linux (CentOS, Rocky, Red Hat), VMware virtualization (vSphere, vCenter, etc.) Solid understanding of PAM, LDAP, RADIUS, TACACS+, DNS (BIND and domain registration), certificate and PKI lifecycle, host firewalls, HAProxy, Apache, NGINX, Postfix, NTP and other common Linux server applications
~ Bash, Python) and configuration management tools (e.g., Advanced proficiency with NetApp network storage and storage protocols such as iSCSI, Fibre Channel, NFS and SMB/CIFS
~ Advanced skills in dynamic routing protocols such as OSPF and BGP, including BGP on Linux hosts; working knowledge of Cisco routers and switches and Spanning Tree
~ Ability to work with confidential information in a secure and professional manner
Experience with Meraki equipment and management portal
Working knowledge of Zabbix network management, Sandvine traffic shaping and Infoblox IP management
Familiarity with CSG Systems, Sugar Customer Management System and Catcher Middleware, and how they relate to the network and system infrastructure
Experience with highly available database clustering, specifically MariaDB (Galera clusters) and PostgreSQL (Patroni clusters)
Familiarity with Kubernetes container orchestration, including the administration, maintenance, and troubleshooting of self-hosted, in-house clusters
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.