Senior Engineer, Network and Systems

Rise Broadband•Westlake, TX

6d•Onsite

About The Position

The Senior Systems and Network Engineer provisions, operates, and secures the Company’s core infrastructure, with a primary focus on Linux servers, VMware virtualization, and storage. The position also owns the Company’s data center and corporate network, including routers, switches, and firewalls that provide routing, VPNs, and perimeter security. Based in Dallas, the role supports two Dallas-area offices and the Dallas and Denver data centers, remotely managing Denver and assisting the onsite Denver counterpart with major projects as needed. The role monitors and evaluates systems and procedures to protect the Company from unauthorized access, recommends and implements improvements to security, reliability, and utilization, and helps ensure compliance with software licensing and applicable network and systems legal requirements. It participates in a rotating after-hours on-call schedule and requires periodic evening and weekend work for planned maintenance windows and major projects.

Requirements

Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent experience.
At least 7 years of progressive experience in systems and network administration, including hands-on production administration of Enterprise Linux and responsibility for routing and firewall infrastructure, or an equivalent combination of education and experience.
Expert proficiency with Enterprise Linux (CentOS, Rocky, Red Hat), VMware virtualization (vSphere, vCenter, etc.), and server hardware management (Dell iDRAC/HP iLO and firmware lifecycle).
Solid understanding of PAM, LDAP, RADIUS, TACACS+, DNS (BIND and domain registration), certificate and PKI lifecycle, host firewalls, HAProxy, Apache, NGINX, Postfix, NTP, and other common Linux server applications.
Experience automating infrastructure tasks with scripting such as Bash or Python and configuration management tools such as Ansible.
Advanced proficiency with NetApp network storage and storage protocols such as iSCSI, Fibre Channel, NFS, and SMB/CIFS.
Advanced proficiency with Palo Alto firewalls, IP routing, and IPSec VPNs.
Advanced skills in dynamic routing protocols such as OSPF and BGP, including BGP on Linux hosts; working knowledge of Cisco routers and switches and Spanning Tree.
Ability to work with confidential information in a secure and professional manner.

Nice To Haves

Experience with Meraki equipment and management portal.
Working knowledge of Zabbix network management, Sandvine traffic shaping, and Infoblox IP management.
Familiarity with CSG Systems, Sugar Customer Management System, and Catcher Middleware, and how they relate to network and system infrastructure.
Relevant certifications such as RHCSA/RHCE, VCP, PCNSE, or CCNP.
Experience with highly available database clustering, specifically MariaDB (Galera clusters) and PostgreSQL (Patroni clusters).
Familiarity with Kubernetes container orchestration, including administration, maintenance, and troubleshooting of self-hosted, in-house clusters.

Responsibilities

Deploy, maintain, and support core IT infrastructure, including Linux servers, VMware vSphere, physical server and storage hardware, and file, email (Postfix), application, and DNS servers.
Administer NetApp storage and storage protocols, including iSCSI, Fibre Channel, NFS, and SMB/CIFS; handle provisioning, capacity planning, and performance monitoring.
Manage physical server hardware primarily through Dell iDRAC and HP iLO, including remote provisioning, firmware lifecycle management, and hardware health monitoring.
Perform hands-on data center work in Dallas for installations and projects as needed.
Maintain, patch, and upgrade server and network operating systems and applications.
Monitor infrastructure health and performance and respond to alerts.
Design, implement, and maintain data center and corporate LAN/WAN infrastructure, including switching, routing, firewalls, IPSec VPN tunnels, dynamic routing protocols, and perimeter security.
Deploy, maintain, and support routers, switches, and firewalls; administer HAProxy load balancing services; and maintain responsibility for VPN gateways and the intrusion detection system.
Manage network authentication, authorization, and directory services, including RADIUS, TACACS+, and LDAP systems.
Integrate Linux systems and services with the Active Directory-based security model using LDAP, Kerberos, and SSSD.
Manage certificate and PKI lifecycle and configure and support SPF, DKIM, and DMARC email authentication.
Develop and deploy IT infrastructure hardening standards and help shape Company IT security and infrastructure standards.
Troubleshoot and identify possible security threats, anticipate hardware and software degradation, and secure business applications to reduce risk while abiding by applicable third-party regulations.
Help ensure compliance with software licensing and network and systems legal requirements.
Implement and maintain backup and disaster recovery systems across the Dallas and Denver data centers.
Automate provisioning, configuration, and routine operational tasks through scripting and configuration management.
Support the Denver data center remotely and assist the onsite Denver counterpart with major projects as needed.
Maintain Company server and network documentation and information retention policies.
Collaborate with divisional resources to ensure Company IT standards are achieved.
Meet fiscal requirements when ordering equipment, including servers, routers, switches, network storage, and software.
Participate in a rotating after-hours on-call schedule and perform periodic evening and weekend work for planned maintenance windows and major projects.