The New York City Department of Investigation (DOI) is one of the oldest law enforcement agencies in the country with a mission of combating municipal corruption. It serves the people of New York City by acting as an independent and nonpartisan watchdog for New York City government, City agencies, and City employees, vendors with City contracts, individuals and entities that receive City funds.

The Information Technology Unit of the NYC Department of Investigation is looking for a Senor Network Systems Engineer to support the agency's IT infrastructure. The ideal candidate will provide enhancements and implementation of new technologies to support the strategic needs of the agency and its partners in the delivery of applications and services in a reliable and secure fashion. The engineer will be responsible for preparing technical reports, design documentation, and run books.

The engineer is required to assist with scheduled authorized security patches and assist with change management operations once approved by in house CMB and Security management team.

The selected candidate must demonstrate the ability to exercise independent initiative and judgment when managing and monitoring the Advanced network infrastructure (CISCO Nexus Switches, Palo Alto Firewalls, VMware Infrastructure), along with the DOI applications that reside on them. This includes over 300 Windows and Linux servers running multiple applications such as Exchange, SQL, Oracle, and custom in-house applications.


Candidate is required to work Nights and Weekends as needed.
NYC Acceptable Vendor/Professional Certificate required for position: Certified Cisco CCNP (Data Center / Enterprise) and VMWare VCP 7.x/6.x

All current City Employees may apply by going to Employee Self Service (ESS) http://cityshare/ess Click on Recruiting Activities/Careers and search for the specific Job ID #642979.

All other applicants, please go to https://cityjobs.nyc.gov/ and Search for the specific Job ID #642979.

Please do not email, mail or fax your resume to DOI directly. Submissions of resumes does not guarantee an interview. Due to the high volume of resumes DOI receives for positions, only selected candidates will be contacted.

Professional/vendor certification(s) in local area network administration that is required for the position to be filled. In addition, all candidates must have the following:

1. A baccalaureate degree from an accredited college, and two years of satisfactory full-time (not classroom based) experience in local area network and/or wide area network planning, design, configuration, installation, implementation, troubleshooting, integration, performance monitoring, maintenance, enhancement, and security management; or

2. A four-year high school diploma or its educational equivalent and six years of satisfactory full-time (not classroom based) information technology experience of which at least 2 years must have been as described in "1" or

3. A satisfactory equivalent of education and/or experience equivalent to "1" or "2" above. Education may be substituted for experience on the basis that 30 undergraduate semester credits from an accredited college is equivalent to 6 months of experience. A master’s degree in computer science or a related field from an accredited college may be substitute for one year of experience. However, all candidates must have at least one year of satisfactory (not classroom based) full-time information technology experience as described in "1" above.

Note: In addition to meeting the minimum Qualification Requirements: Incumbents may be required to update existing and/or obtain additional professional industry-standard certification(s) for current and future technical environments(s) in which they may be assigned to work, as determined by the employing agency.

Must hold a valid Cisco CCNP Certification ( Data Center or Enterprise) Configuring and managing Cisco network Core and Access switches and routers. (Nexus and Catalyst switches) Cisco Wireless Networks Configured VLANs, inter-VLAN communication, DHCP, DNS, RIP, EIGRP, OSPF, IS-IS, and BGP Advanced TCP/IP, Layer 2 and 3 switching and Routing a must, (VLAN, RSTP, DNS, DHCP, NAT, OSPF Tables, BGP, EIGRP,MPLS, VXLAN, SIP, SNMPv3, ICMPv6) Data Center Networking, L3 network troubleshooting, Load Balancing, Firewall/Network security, Network Virtualization, AWS EC2 instances, S3 storage, VPC networking Advanced Working Knowledge of Palo Alto Firewalls, Panorama, NetScaler Load Balancer Working Knowledge of Citrix NetScaler Load Balancer Virtual Infrastructure IP filtering, Event log analysis, ManageEngine OpManager, is a plus. Heavy Root Cause Analysis resolution. Sound problem resolution, judgment, and decision-making skills. Strong customer and quality-focus. Experience with managing VoIP is a plus Knowledge of authentication services (Kerberos/SAML/MFA) and SSL certificate management. Knowledge of server and application architectures. Highly self-motivated and flexible. Working with an enterprise wide, large-scale implementation. Managing VMWare infrastructure is a must. (vSphere Cloud 6.5./7.x) Intermediate knowledge working with Cloud Providers MSO365 AZURE, Amazon AWS. Knowledge in converged/HCI infrastructure, AirWatch, Strong hands-on administration experience on Windows 2019 server - Forest, Domain, AD, Schema, DNS, WINS, DHCP, OU, Distribution list, Windows folder security. installation, and administration of Windows Server 2019, including user setup and defining roles, performance tuning, backup and restore, security monitoring, registry, and AD scripting. Configure Windows security such as permission levels, groups, and user profiles. Ability to plan, manage time according to schedules, and provide status updates required. Ability to quickly learn new tools and resolve issues using all available resources. Strong interpersonal skills and ability to work well in a team environment. Managing Exchange Hybrid 2016 Server Environment. Managing Citrix VDI Infrastructure - Virtual Apps and Virtual Desktops Working Knowledge in converged/HCI infrastructure (HPE SimpliVity), and Manage Engine NetOps, is a plus. Working Knowledge of HPE Synergy Frame Enclosures Working Knowledge of HPE 3PAR Storage Systems Working Knowledge of HPE Store Once Storage Devices Knowledge of backup methodology and best practices using Veeam. Weekend work is required. Linux bash shell Scripting is a plus. Microsoft /Azure / MCSA/ MCSE certification is plus. Linux certification is a plus – but not required. Required: -VMware Certified Professional (VCP) - VMWare vSphere 6.5/7.01. - Cisco Certified Network Professional (CCNP). – Data Center or Enterprise

This position is also open to qualified persons with a disability who are eligible for the 55-a Program. Please indicate at the top of your resume and cover letter that you would like to be considered for the position through the 55-a Program.

As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs. For more information, please visit the U.S. Department of Education’s website at https://studentaid.gov/pslf/.

New York City Residency is not required for this position

The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.