Information Technology Architect 1 (Network Solution)

Job description

Duties Description The New York State Office of Information Technology Services (ITS) provides operational support 24 hours a day, 7 days a week, 365 days of the year, supporting more than 4,900 applications for 53 New York State Agencies.

The New York State Department of Transportation (DOT) Office of Traffic Safety and Mobility (OTSM) and ITS are in year one of five years, implementing a Technology Plan designed to improve both safety and mobility by enhancing, streamlining, and improving resiliency of transportation system management and operations (TSMO) strategies.

The portfolio of work includes 29 overall projects that address governance, legacy technology replacement, and installation of proven technology innovations.

OTSM and ITS have established a joint Operational Technology Team (OT Team) to design, build, test and implement the portfolio of work and provide ongoing operational support of the portfolio.

Under the direction of the Director of IT/OT Convergence within Dedicated Support, Department of Transportation (DOT), the Information Technology Architect 1 (Network Solution) will be responsible for the design, implementation, maintenance, and support of network infrastructure supporting critical Operational Technology (OT) systems within the transportation environment.

This position requires a strong blend of operational expertise and IT acumen, ensuring the network is reliable, secure, and aligned with business objectives.

The Information Technology Architect 1 (Network Solution) will lead projects, mentor junior staff, and play a key role in shaping the future of the network.

Duties include, but are not limited to, the following:

Network Design and Implementation
• Design and implement network architectures for OT environments: This includes considering factors like real-time communication requirements, deterministic networking, redundancy, and security specific to industrial protocols (., Modbus TCP, Profinet, EtherNet/IP).
• Configure and maintain network devices in OT environments: This involves switches, routers, firewalls, wireless access points, and other network hardware, often from specialized vendors like Cisco and Palo Alto.
• Implement and manage network segmentation: Creating VLANs, firewalls, and other security measures to isolate critical OT systems from the corporate network and the internet.
• Monitor network performance and troubleshoot issues: Using network monitoring tools to identify and resolve network bottlenecks, latency problems, and other performance issues that can impact OT system operations.
• Manage and maintain wireless networks in industrial environments: Deploying and managing wireless networks for mobile devices, sensors, and other equipment, considering factors like interference, security, and coverage.
• Implement and manage remote access solutions for OT systems: Providing secure remote access for vendors, engineers, and other personnel to monitor and maintain OT systems.

Network Security
• Implement and maintain network security measures for OT environments: This includes firewalls, intrusion detection/prevention systems (IDS/IPS), and other security tools to protect OT systems from cyber threats.
• Conduct security assessments and vulnerability scans of OT networks: Identifying and mitigating security vulnerabilities in OT network devices and systems.
• Develop and implement security policies and procedures for OT networks: Ensuring that OT networks are configured and operated in a secure manner.
• Stay up-to-date on the latest OT security threats and vulnerabilities: Researching and understanding emerging threats and vulnerabilities that could impact OT systems.
• Participate in incident response activities: Responding to security incidents that affect OT networks and systems.

Documentation and Reporting
• Maintain accurate and up-to-date documentation of network configurations, diagrams, and procedures.
• Prepare reports on network performance, security incidents, and project status.

Emerging Technologies
• Stay abreast of emerging network technologies and trends, particularly those relevant to OT and transportation.
• Evaluate and recommend new technologies to improve network performance, security, and efficiency.

Collaboration and Communication
• Collaborate with OT engineers, control system specialists, and other stakeholders: Working closely with other teams to understand their networking needs and ensure that OT networks are designed and operated effectively.
• Communicate effectively with both technical and non-technical audiences: Explaining complex technical concepts in a clear and concise manner.
• Develop and maintain documentation for OT networks: Creating and maintaining network diagrams, configuration documentation, and other documentation to support OT network operations.
• Provide training and support to other IT and OT staff: Sharing knowledge and expertise with other team members.

Compliance and Standards
• Ensure compliance with relevant industry standards and regulations: Understanding and adhering to standards such as ISA/IEC 62443, NIST Cybersecurity Framework, and other relevant regulations.
• Participate in audits and assessments: Supporting internal and external audits of OT network security and compliance.

Minimum Qualifications EMPLOYMENT:
• Six (6) years of broad information technology (IT) experience, demonstrating a comprehensive understanding of network engineering, IT network solution project management, IT network solution architecture, network administration or other IT networking-related specialty and its application within large-scale organizations.
• Four (4) years of specialized experience in IT network engineering, with a focus on Operational Technology (OT) environments.

EDUCATION/EXPERIENCE SUBSTITUTIONS:
Earned college degrees in computer science, information technology or a related field of study may substitute for the specified years of broad IT experience as follows:
• Bachelor's or higher-level degree in any field including or supplemented by 15 semester credit hours in computer science, information technology, or related field substitutes for three (3) years of general information technology experience; any bachelor’s substitutes for two (2) years of general information technology experience.
• Associate degree with 15 semester credit hours in computer science, information technology, or related field may substitute for one (1) year of general information technology experience.

Candidates in a bachelor’s degree program with at least 15 semester credit hours in computer science, information technology, or related field may substitute such credits for one (1) year of general information technology experience.
• Master’s degree or higher in computer science, information technology, or related field substitutes for one (1) year of general information technology experience.

PREFERRED QUALIFICATIONS:

Certifications
• Preference for candidates holding relevant IT networking industry certification, such as Cisco Certified Network Professional (CCNP) or higher, Cisco Certified Specialist - Enterprise SD-WAN Implementation, Palo Alto NGFW Engineer / PCNSC, or other relevant certification in networking, security, or Operational Technology (OT).

Technical Skills
• Strong understanding of networking protocols and technologies (., TCP/IP, Ethernet, VLANs, routing protocols, VPNs, SD-WAN).
• Experience with network monitoring and management tools (., Wireshark, SolarWinds, Nagios, Zenoss).
• Proficiency in configuring and managing network devices (., routers, switches, firewalls) from major vendors (., Cisco, Palo Alto, Aruba).
• Experience with industrial control systems (ICS) and SCADA systems: Understanding of how these systems work and their networking requirements.
• Knowledge of wireless communication technologies (., Wi-Fi, cellular, radio).
• Experience with cloud networking technologies (., AWS, Azure, Google Cloud) is a plus.
• Experience with managing a fleet of routers using centralized configuration and management systems like Cisco Catalyst SD-WAN Manager.

Operational Technology (OT)-Specific Skills
• Knowledge of industrial networking protocols (., Modbus TCP, Profinet, DNP3, OPC UA).
• Understanding of OT network architectures and security considerations (., Purdue Model).
• Experience with OT security appliances and software (., industrial firewalls, intrusion detection systems).
• Familiarity with OT asset management and vulnerability management tools.
• Knowledge of real-time operating systems (RTOS) used in OT devices.
• Experience with PLC (Programmable Logic Controller) and HMI (Human Machine Interface) systems.
• Understanding of SCADA (Supervisory Control and Data Acquisition) systems and their communication protocols.
• Experience with deploying and managing wireless networks in industrial environments.

Transportation Skills
• Experience working in the transportation industry is desirable.
• Understanding of intelligent transportation systems (ITS) architectures and technologies.
• Experience with transportation-specific communication protocols (., NTCIP).
• Knowledge of transportation safety regulations and standards (., FRA, FTA, DOT).
• Experience with video surveillance systems used in transportation environments.
• Knowledge of ATMS (Advanced Transportation Management Systems) and TSMO (Transportation Systems Management and Operations.
• Experience supporting communication with transportation-specific hardware such as 2070 controllers, non-intrusive detection systems, variable message signs and related devices.

Soft Skills
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills.
• Ability to work independently and as part of a team.
• Ability to prioritize tasks and manage time effectively.
• Ability to communicate technical information to non-technical audiences.
• Strong leadership and mentoring skills.

PLEASE NOTE:
• Appointment to this position and continued employment with the agency is contingent upon obtaining and/or maintaining New York State residency within six months of hiring.


• Appointment to this position is not final until all agency approvals have been granted.

Required Skill Profession

Computer Occupations