Network Analyst (Systems Analyst)

About the role

This senior technical position is responsible for the hands-on engineering, configuration, implementation, and operational support of the County’s enterprise network infrastructure. The primary focus of this role is drafting, building, and validating network device configurations—including routers, switches, firewalls, enterprise wireless infrastructure, and Network Access Control (NAC) systems. This includes deploying 802.1X port security and Cisco Identity Services Engine (ISE) policies in strict alignment with established security standards.

Responsibilities

• Deploy and maintain Cisco ISE, 802.1X port security, and NAC policies (MAB, RADIUS/TACACS+) to control wired and wireless network access.
• Design and optimize enterprise wireless networks, managing SSID profiles, RF tuning, coverage mapping, and guest/internal controls.
• Configure IPsec/GRE VPN tunnels, SSL certificates, firewall rules, and ACLs; submit proposed changes through formal review processes before deployment.
• Provide Tier 4 support to diagnose complex enterprise outages, protocol failures, and vendor TAC escalations.
• Maintain high availability by executing firmware updates, patch management, and scheduled hardware replacements during maintenance windows.
• Monitor traffic, QoS, ISE authentication logs, switch port security, and wireless performance using SNMP and packet capture tools.
• Draft change control requests, risk assessments, and rollback plans for all scheduled maintenance activities.
• Serve as the hands-on engineering lead for network, wireless, and NAC rollout projects, performing site surveys and heat mapping.
• Maintain network topology diagrams, wireless coverage maps, ISE policy documentation, and IP/VLAN allocation tables.
• Support field technicians, system administrators, and third-party vendors during deployments and troubleshooting.

Requirements

Graduation from an accredited four-year college or university with major course work in mathematics, public or business administration, or a related field, including or supplemented by specialized training in electronic data processing, programming, operations, and methodologies; and six (6) or more years of experience in electronic data processing systems analysis and design.

Qualifications

• Advanced capability using packet capture tools (e.g., Wireshark), wireless analyzers, ISE logs, diagnostic utility commands, and SNMP monitoring platforms to isolate complex root causes and manage vendor escalations.
• Strong proficiency drafting error-free configurations across major network operating systems (e.g., Cisco IOS/NX-OS, Junos, Palo Alto PAN-OS, Cisco Wireless LAN Controllers).
• Working knowledge of Cisco ISE, 802.1X protocol execution, RADIUS/TACACS+, MAB (MAC Authentication Bypass), and switch port security enforcement.
• Proficiency with enterprise Wi-Fi standards (802.11a/b/g/n/ac/ax), RF spectrum analysis, wireless controllers, heat-mapping software, and central wireless management platforms.
• Solid working knowledge of TCP/IP (IPv4 & IPv6), EIGRP, BGP, MPLS, VLANs, and subnetting.
• Experience configuring enterprise firewalls, IPsec/GRE VPNs, certificates, and border security appliances.
• Ability to clearly document network topology, write technical procedures, and present proposed configurations for review.