Key Responsibilities

DMVPN & Secure Overlay Networking

• Deploy and support Cisco DMVPN (Phase 2/Phase 3) hub-and-spoke and spoke-to-spoke overlay networks across Metro Ethernet transport.

• Configure and troubleshoot IPsec VPN profiles, GRE tunnels, NHRP mappings, and tunnel interfaces for the DMVPN fabric.

• Implement dynamic routing protocols (BGP, OSPF, EIGRP) over DMVPN tunnels to support automated failover and optimal path selection.

• Design failover and redundancy strategies, including LTE/5G backup paths, to ensure uninterrupted connectivity during circuit or equipment outages.

• Monitor tunnel health, latency, and throughput to maintain performance standards across all VPN connections.

Metro Ethernet & WAN Transport

• Coordinate with service providers on Metro Ethernet circuit provisioning (E-Line, E-LAN), turn-up, and incident resolution.

• Manage dual-WAN redundancy models and carrier handoff configurations at each site.

• Perform field installations and cutovers of routers, switches, cabinets, and handoff equipment.

Network Engineering & Operations

• Manage VLAN configurations, IP addressing schemes, and Layer 2/Layer 3 connectivity between remote aggregation points and headend data centers.

• Implement and maintain network segmentation using VRFs, VLANs, and firewall policies to isolate ITS traffic domains.

• Apply and tune QoS policies to prioritize latency-sensitive traffic such as signal control and video.

• Troubleshoot network issues end-to-end from field site through WAN transport to data center.

• Maintain accurate network documentation including diagrams, IP assignments, equipment inventories, and configuration records.

ITS Infrastructure Support

• Support Dot’s traffic signal control systems, CCTV/video surveillance platforms, and IoT field devices by ensuring reliable, low-latency transport connectivity.

• Coordinate field cabinet upgrades to accommodate new network equipment, including power and environmental requirements.

• Manage the migration of remote aggregation points from legacy infrastructure to modern DMVPN-based transport.

• Monitor network performance, availability, and service-level compliance across all ITS transport links.

Security & Compliance

• Ensure all network connections utilize encrypted communications per DDOT and District government security policies.

• Manage VPN certificate lifecycles, key rotation, and trust domain configurations.

• Implement IoT security and segmentation best practices for field-deployed devices.

•       Support security audits, vulnerability assessments, and remediation efforts on ITS network infrastructure.

Work Environment

•      Combination of field work (street-level cabinets, utility corridors), data center operations, and remote support.
•      Travel to field locations across the District required; valid driver’s license required.
•      Ability to lift and rack network equipment up to 50 lbs.
•      Participation in scheduled maintenance windows and on-call availability for after-hours emergency response.