Systems Engineer Jobs

About The Position

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Network Engineering, or a related field, or equivalent professional experience; 11 years required.
• Six years conveying technical and functional concepts for a specific technical specialty.
• Six years preparing complex technical documentation.
• Six years of ITS experience, including traffic signal controllers, CCTV/video surveillance transport, and traffic management.
• Six years of experience with LTE/5G failover solutions.
• Six years of network automation experience using Ansible or Python-based scripting.
• Five years of knowledge of IoT security and segmentation best practices.
• Eight years of knowledge of high-availability network design, redundant architectures, and disaster recovery planning.
• Six years of fiber optic network experience, including single-mode fiber design and SFP/SFP+ transceivers.
• Six years of prior experience working with a state or municipal Department of Transportation.
• Active CCNA certification.

Nice To Haves

• CCIE Enterprise Infrastructure certification.
• Certified Fiber Optic Technician (CFOT) certification or equivalent.
• CompTIA Network+ or Security+ certification.
• ITIL v4 Foundation certification.

Responsibilities

• Deploy and support Cisco DMVPN Phase 2/Phase 3 hub-and-spoke and spoke-to-spoke overlay networks across Metro Ethernet transport.
• Configure and troubleshoot IPsec VPN profiles, GRE tunnels, NHRP mappings, and tunnel interfaces for the DMVPN fabric.
• Implement BGP, OSPF, and EIGRP over DMVPN tunnels to support automated failover and optimal path selection.
• Design failover and redundancy strategies, including LTE/5G backup paths, for connectivity during circuit or equipment outages.
• Monitor tunnel health, latency, and throughput across VPN connections.
• Coordinate Metro Ethernet circuit provisioning (E-Line, E-LAN), turn-up, and incident resolution with service providers.
• Manage dual-WAN redundancy models and carrier handoff configurations at each site.
• Perform field installations and cutovers of routers, switches, cabinets, and handoff equipment.
• Manage VLAN configurations, IP addressing, and Layer 2/Layer 3 connectivity between remote aggregation points and headend data centers.
• Implement and maintain network segmentation using VRFs, VLANs, and firewall policies to isolate ITS traffic domains.
• Apply and tune QoS policies to prioritize latency-sensitive traffic such as signal control and video.
• Troubleshoot network issues end-to-end from field sites through WAN transport to data centers.
• Maintain network diagrams, IP assignments, equipment inventories, and configuration records.
• Support traffic signal control systems, CCTV/video surveillance platforms, and IoT field devices by ensuring reliable, low-latency transport connectivity.
• Coordinate field cabinet upgrades to accommodate network equipment, including power and environmental requirements.
• Manage migration of remote aggregation points from legacy infrastructure to modern DMVPN-based transport.
• Monitor network performance, availability, and service-level compliance across ITS transport links.
• Ensure network connections use encrypted communications consistent with DDOT and District government security policies.
• Manage VPN certificate lifecycles, key rotation, and trust domain configurations.
• Implement IoT security and segmentation best practices for field-deployed devices.
• Support security audits, vulnerability assessments, and remediation efforts on ITS network infrastructure.