Senior Engineer, Networking

This candidate will provide technical support for ICU Medical FDA-approved software and wireless medical devices deployed within customer-controlled networks. Additionally, the candidate will provide internal infrastructure support to the Research and Development (R&D) groups and Service Center teams around the world.

Essential Duties & Responsibilities

• Configuring, supporting and troubleshooting enterprise wireless network controllers and access points (Cisco preferred).
• Deploy new wireless controllers, deploy new SSID’s using various encryption and authentication methods on the ISM 2.4, 5.2Ghz and 6GHz radio bands
• Troubleshoot and isolate client network connectivity issues that might be caused by device misconfiguration, environmental interference, or system misconfigurations
• Strong wireless understanding around configuring RADIUS servers for client/device profiling and 802.1x authentication to include EAP-PEAP, EAP-TLS, EAP-TTLS and EAP-FAST.
• Knowledge of the 802.11 standards and identify what channels are available for use and common sources of wireless interference
• Install, configure and maintain Cisco Catalyst network routers and switches using IPv4 and IPv6 protocols
• Capture both wired and over-the-air wireless network traffic and analyze said traffic using common network tools such as AirMagnet and WireShark
• Knowledgeable in network firewalls, site-site VPN tunnels and network access control lists.
• Able to create x509 keystores and certificates and convert certificates into various formats as needed.
• Configuring, supporting and troubleshooting enterprise server hardware, virtual hypervisors and virtual machines (VMware, HyperV, etc.).
• Managing Microsoft Active Directory users, groups, and GPO policies.
• Maintaining detailed documentation of system configurations, processes, and standard operating procedures (SOPs).

Knowledge & Skills

Wireless Network Controllers

• Add/remove/modify ESSID’s to a Cisco Wireless Network Controller
• Add/remove/modify AAA authentication to a Wireless Controller
• Add/remove/modify AP power levels and their assigned channels
• Complete over-the-air wireless network captures

Cisco ISE Server

• Must know how to add/remove devices into Cisco ISE
• Must know how to create AAA profiles to aid in network authentication.
• Must know how to troubleshoot authentication issues when devices are experiencing authentication and authorization issues.

Firewalls and VPN’s

Experienced in creating, diagnosing connectivity issues and maintaining site-site VPN tunnels

Experienced in patching and upgrading network firewalls – both appliance-based and virtual.

Network Switches

Experienced in adding/removing new VLANs and subnets to L3 switches using IPv4 and IPv6

Experienced in common network routing protocols

• Experienced in adding, removing and modifying network ACL’s
• Experienced in installing, troubleshooting, maintaining server hardware components
• Experienced in installing, troubleshooting, maintaining NAS hardware components

Server Hardware

Virtualization

Experienced in installing VMWare ESXi, Hyper-V, or another Hypervisor on new servers

Experienced in adding and managing hosts

• Experienced in deploying and maintaining virtual machines and templates
• Microsoft Windows and SQL Server
• Experienced in building new Microsoft Windows Servers in a virtual environment
• Experience in configuring and managing Microsoft Active Directory deployments
• Experienced in deploying LINUX based OS’s in a virtual environment
• Able to install Microsoft SQL server as needed to support various applications

X509v3 Certificates

Experienced in creating certificate key files, CA certificates and server certificates for SSL/TLS encryption.

Experienced in creating and converting certificates from any given file format to another certificate file format (ex: PKCS#12 to PEM)

Minimum Qualifications, Education & Experience

• Must be at least 18 years of age
• Bachelor’s degree from an accredited college or university is required
• MSCE, CWNA, CCNA, CCIE or equivalent experience desired
• 5+ years related experience
• Experience in 5 or more of the key areas below:
• Cisco or Aruba Wireless Network Controllers
• Cisco Identify Services Engine or Aruba ClearPass
• Enterprise Firewalls (ASA, PAN, or SRX)
• Site to Site VPN setup and maintenance

Cisco Catalyst Network Switches

WireShark Packet Analysis

• Embedded Wireless Network Client support
• Server and NAS Hardware
• Microsoft Windows Server (2016 and newer)
• Microsoft SQL Server 2016 and newer

Virtual Host Management

Support of Wireless Medical Devices