Senior Engineer, Network and Systems in Westlake, Texas at JAB Wireless

Position Purpose

The Senior Systems and Network Engineer provisions, operates, and secures the Company’s core infrastructure, with primary focus on Linux servers, VMware virtualization, and storage. Because the Company has no separate network team, this position also owns the data center and corporate network, including the routers, switches, and firewalls that provide routing, VPNs, and perimeter security. The position is based in Dallas and supports the Company’s two Dallas-area offices and its Dallas and Denver data centers, remotely managing Denver and assisting the onsite Denver counterpart with major projects as needed. In addition to day-to-day operations, the position monitors and evaluates systems and procedures to protect the Company from unauthorized access, recommends and implements improvements to security, reliability, and utilization, and helps ensure compliance with software licensing, network, and systems legal requirements.

Essential Duties/Responsibilities

Systems, Virtualization & Storage

• Deploy, maintain and support core IT infrastructure, including Linux servers, VMware vSphere, physical server and storage hardware, and file, email (Postfix), application and DNS servers
• Administer NetApp storage and storage protocols (iSCSI, Fibre Channel, NFS, SMB/CIFS), including provisioning, capacity planning and performance monitoring
• Manage physical server hardware primarily through out-of-band tools (Dell iDRAC/HP iLO), including remote provisioning, firmware lifecycle management and hardware health monitoring
• Perform hands-on data center work in the Dallas data center as needed for installations and projects
• Maintain, patch and upgrade server and network operating systems and applications
• Monitor infrastructure health and performance and respond to alerts.

Network & Perimeter

• Design, implement and maintain the Company’s data center and corporate LAN/WAN infrastructure, including switching, routing, firewalls, IPSec VPN tunnels, dynamic routing protocols (including BGP on servers such as load balancers) and perimeter security
• Deploy, maintain and support routers, switches and firewalls
• Administer load balancing services (HAProxy)
• Maintain responsibility for VPN gateways and intrusion detection system

Identity, Authentication & Email Security

• Manage network authentication, authorization and directory services, including RADIUS, TACACS+ and LDAP systems
• Support the Active Directory-based security model, which acts as the root authority for most authenticated applications, by integrating Linux systems and services with it (LDAP, Kerberos, SSSD)
• Manage certificate and PKI lifecycle
• Configure and support the email authentication framework (SPF, DKIM, DMARC)

Security & Risk Management

Backup & Disaster Recovery

Automation

Multi-Site Support (Denver)

Documentation, Standards & Administration

Availability & Schedule

Job Requirements

Required

Preferred

Working Conditions

Disclaimer

This job description is not meant to be an all-inclusive statement of every duty and responsibility which will ever be required of an employee in this position, however, the employee will be held responsible for all duties assigned.