Network Routing/Switching and Security Engineer

The Network Routing and Security Analyst provides a leadership role in delivering advanced network routing and switching services to the University community. This position ensures the availability, integrity, security and reliability of mission critical networking and switching services. This position is primarily involved with network routing, switching and security management. As a member of the Network Routing and Switching group, the Analyst is also responsible for managing and monitoring network infrastructure, analyzing and resolving network problems, and regularly improving network and security infrastructure.

• As a key representative of the Office of Information Technology (OIT), you will collaborate with University departments to deploy and manage highly reliable, advanced network routing and switching solutions. You will also design and implement necessary security services for campus and border networks to ensure the safety of the University's network. Primary responsibility for the administration and support of networking systems including network switch and router management. 
• Design and manage the configuration of network core devices, Internet border routers, building routers and connectivity to service providers. 
• Participate in and manage the analysis, design, installation and management of network infrastructure and network systems, through the full lifecycle of development, quality assurance, user acceptance testing and production. 
• Monitor, analyze and verify scalability, performance, high availability, and data integrity for networking and security using service management best practices  
• Configure and regularly update all monitoring, alerting, and reporting for network routing and switching services. 
• Maintain documentation and configuration information for networking and monitoring systems using service management tools including knowledge management, change management, and event management 
• Provide operational support for all advanced network routing and switching services to OIT and the University community on a routine schedule using request management practices. 
• Ensure services and systems are reliably monitored for security and performance on a regular basis 
• Routinely apply critical bug fixes, security updates, and required configuration changes, following established change management procedures. 
• Lead & provide advanced troubleshooting assistance, and routinely collaborate, with University departments and OIT teams on operational issues, projects, and initiatives using incident management practices 
• Routinely review, test, and verify backup and restore procedures for networking and monitoring systems. 
• Provide on-call support on a routine schedule to perform network upgrades, execute maintenance changes, and effectively resolve major incidents outside of normal business hours.  
• You are responsible for designing, implementing, and managing secure networks for the university campus.  
• You must assess the security of existing networks, identify potential risk areas, and take proactive measures to protect network resources from unauthorized access.  
• You should lead and participate in the design: creating secure network architectures, developing access control policies, implementing encryption protocols, and configuring and managing firewalls.  
• The security design must take into account various aspects of connectivity including LAN, WAN, internet, remote access, and VPN.  
• You must also stay up to date with the latest industry best practices, trends, and technologies from a security perspective.  
• Regularly review network routing and security system log files and resolve any issues identified 
• Support and maintain networking technologies and tools using the standard ITIL framework and service management processes in ServiceNow
• You must adhere to the data confidentiality policies according to the university guidelines.
• Proactively participate in professional development opportunities to continuously develop professional and technical skills  
• Adhere to OIT IT service management processes 
• Maintain confidential data in the strictest confidence and ensure privacy, security, and proper use in accordance with University Information Security Policy 
• Assist other colleagues with a lower technical skillset in Network Services. 

Essential Qualifications

• Minimum of 5 years of experience managing or supporting medium to large network routing and network security infrastructure 
• Demonstrated innovative thinker and creative problem solver 
• Knowledge and experience in network routing, switching, and security management. 
• Demonstrated skill in solving complex problems in the network environment particularly in the areas of packet switching, routing and network security 
• Extensive understanding of network protocols including TCP/IP and network security policies.  
• Experience with Cisco equipment and IOS configurations 
• Experience with Aruba equipment and OS-CX configurations 
• Experience with Palo Alto Firewalls. 
• Experience with Palo Alto Global Protect VPN solution 
• Demonstrated ability to adapt to multiple operating systems and platforms.  
• Excellent oral and written communications skills in this highly collaborative environment 
• Knowledge of service management processes including change management, request and incident handling, knowledge management, and event management 
• Ability to work on multiple projects simultaneously, to respond to shifting priorities, and to work efficiently under the pressure of critical problems and deadlines 
• Ability to work outside of normal working hours and be on call to perform network maintenance and support unexpected critical network failures 
• Ability to work independently, as well as in a team environment 
• Education: Bachelor’s degree preferred or equivalent experience and/or certifications degree 

Preferred Qualifications

• Familiarity with network routing and switching management tools. 
• Experience with Aruba and Cisco Network equipment 
• Experience with Aruba downloadable user roles and Clearpass integration 
• Experience with VxLAN overlay, Multicast/Anycast and BGP routing. 
• Ability to leverage network automation tools to improve overall service delivery. 

Princeton University is an Equal Opportunity/Affirmative Action Employer and all qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity or expression, national origin, disability status, protected veteran status, or any other characteristic protected by law. KNOW YOUR RIGHTS