DevOps Engineer I (AWS Network Infrastructure)

ATS+Partners•Albany, NY

About The Position

ATS+Partners is seeking an experienced DevOps Engineer I specializing in AWS networking and hybrid cloud connectivity. This role involves managing and leading the orchestration of multi-discipline technologies for complex problem resolution, communicating with technology and business leaders, and making recommendations for system enhancements. The position requires providing 24x7x365 on-call network support for advanced troubleshooting, escalation, and ticket resolutions on a rotating basis. The engineer will design, deploy, and maintain cloud networking infrastructure in AWS, Azure, and GCP, as well as network virtual appliances like Arista CloudEOS and Palo Alto PAN-OS. Responsibilities include designing and implementing on-prem to cloud connectivity solutions, assisting with application design for compliance with NYS ITS information security standards, collaborating with connectivity providers, and developing Infrastructure as Code (IaC) solutions using Terraform. The role also involves in-depth network performance analysis using various monitoring tools, overseeing network monitoring for maximum availability, participating in network performance analysis, training, and capacity planning, and documenting all design and implementation work using Microsoft Visio. Knowledge transfer and training sessions with junior staff are also part of the role. Occasional travel may be required.

Requirements

Level I- Between three (3) and seven (7) years of experience as a DevOps Engineer
Expert AWS network infrastructure: VPCs, subnets, security groups, route tables, Virtual Private GW, Transit Gateway, Cloud WAN, Site-to-Site VPN, Direct Connect, NACLs, load balancers, peering, logging, alerting, and troubleshooting.
Advanced experience designing, implementing, and supporting hybrid AWS connectivity.
Proficiency in layer 3 routing including Border Gateway Protocol (BGP), VRFs, route maps, redistribution, NAT, subnetting, etc.
Proficiency in Palo Alto PAN-OS including security policies, NAT policies, zones, routing, tunnels, upgrades, logging, and monitoring

Nice To Haves

Working knowledge of cloud application platforms and their networking requirements (Kubernetes engines/services, serverless, etc.)
Proficiency in Terraform to assist in the development of Infrastructure as Code (IaC) and CI/CD for uniform cloud configuration and backup solutions
Proficient AWS network infrastructure: VPCs, subnets, security groups, route tables, Virtual Private GW, Transit Gateway, Cloud WAN, Site-to-Site VPN, Direct Connect, NACLs, load balancers, peering, logging, alerting, and troubleshooting.
Proficient GCP network infrastructure: VPCs, subnets, firewall rules, VPC routing, Network Connectivity Center, Cloud Router, CloudVPN, Cloud Interconnect, CloudNAT, load balancers, private service connections, logging, alerting, and troubleshooting.
Experience working with monitoring and packet capture/analysis tools such as Zenoss, Splunk, Palo Alto Panorama, Arista Cloud Vision as a Service, NfSen, Ixia, Gigastor, Wireshark, etc
Proficiency in Microsoft Visio for solutions documentation
Proficiency in Domain Name System (DNS) and managing split-brain public/private resolution designs

Responsibilities

Provide 24x7x365 on-call network support for advanced troubleshooting, escalation and ticket resolutions on a rotating basis
Design, deploy, and maintain cloud networking infrastructure in AWS, Azure, and GCP to support new and existing NYS agency application deployments in the cloud
Design, deploy, and maintain network virtual appliances as needed including Arista CloudEOS and Palo Alto PAN-OS with integrations into CSP network infrastructure (GCP NCC, AWS TGW Connect, etc.)
Design and implement on-prem to cloud connectivity solutions as required by application needs in collaboration with ISO and network/application architecture teams
Assist with application design to ensure connectivity compliance with NYS ITS information security standards
Collaborate and troubleshoot with direct cloud connectivity providers to develop solutions and solve problems
Assist in the development of Infrastructure as Code (IaC) uniform cloud configuration, deployment, and backup solutions using Terraform
Provide in-depth analysis on network performance using monitoring tools such as Zenoss, Splunk, Palo Alto Panorama, Arista Cloud Vision as a Service, NfSen, Ixia, Gigastor, Wireshark, etc.
Ensure that network availability of cloud environments is maximized by overseeing Change Control procedures, code upgrades, network monitoring, installations, moves and changes, and troubleshooting complex issues.
Oversee network monitoring to ensure maximum network availability.
Participate in network performance analysis, training, and capacity planning.
Document all design and implementation work using Microsoft Visio
Participate in knowledge transfer and training sessions with junior staff