Virtualization Systems Architect

Description

What You'd Do

Work downtown at the Central Library to maintain and support the network architecture and security of the Library's IT infrastructure. DPL's Engineers are high performing, technically competent and passionate technology evangelists, right at the center of all the action. You will dig deep to resolve complex technical issues, incidents and daily challenges within this environment serving the City and County of Denver community. Additionally, you will take ownership and provide leadership on projects, with a focus on solving sometimes very difficult problems and providing intelligent, scalable, and maintainable solutions.

As a member of the newly formed DevOps team to lead our transition utilizating containerization technologies such as Docker, Kubernetes, Istio, and Terraform. Design, deploy, maintain and optimize standard configurations, patch management, and compliance monitoring. To make the most of your time, you will automate and script network tasks using Python, PowerShell, Ansible, and/or other tools. You will keep an eye on the security of library data and systems using Intrusion Detection Systems, firewall policies, network segmentation, and identity and access control, consistent with a Zero Trust Architecture. Following an Application Centric Infrastructure model, you will help design and maintain the library's systems and network based on business requirements. Deploy tools and plugins that leverage locally hosted and cloud-based VMs for automated testing. Assist in the creation, testing, and implementation of disaster recovery and Continuity of Operations plans.

Serving the Denver Public Library staff, you will resolve customer tickets and join live troubleshooting calls to ensure issue is driven to resolution. Attend periodic meetings to discuss project status, open items, tickets, Change Management, RCA (Root Cause Analysis), Capacity planning, Release planning, Training etc. Ensure technical documents are developed that adhere to department standards and meet project requirements. Perform extended troubleshooting and apply recovery procedures to ensure that the outages are recovered as soon as possible. Provide cross-training/guidance for Service Operations and DevOps team members.

You Have

Knowledge of technology trends, best practices and industry standards. Skill in creative problem solving, adaptive thinking and making connections. Ability to work closely with other IT members to contribute to new and ongoing IT projects and implementation of new technologies. Ability to self-motivate and take on challenging initiatives. Ability to work effectively both independently and as part of a team. Ability to work in a fast-paced, evolving and energetic environment. Experience managing networked storage such as NetApp SAN (including CIFS shares, NFS, replication, etc.) Experience with Exagrid backup appliances using tools such as Veeam for disaster recovery and/or continuity of operations. Proven technical troubleshooting and performance tuning experience in a virtualized environment. Experience with virtual network technologies and related network components (DNS, Sendmail, endpoint monitoring). Experience with scripting, automation, functional/system testing, and continuous integration in a DevOps environment. Ability to utilize and understand best practices in regards to the Software Development Lifecycle, Agile/Scrum, and Lean IT. Ability to work independently as well as part of a cross-functional team. Ability to perform software and hardware research, testing and integration for networks, PCs and new technologies. Experience bringing projects to a timely completion while working independently or with other team members. Ability to creatively solve problems, negotiate and handle stressful situations in a positive manner. Ability to pass a background check after the offer to hire has been made. Commitment to learning, development, teamwork, and finding creative solutions through innovation and flexibility. Desire to work with a diverse group of people in an inclusive environment.

A Bachelor's Degree in information systems, computer science, a related field, or equivalent education and work experience.

At least three years of professional Information Technology experience with installing, maintaining and/or modifying network operating systems with both software and hardware. 

One year of the appropriate type and level of experience may be substituted for each required year of post-high school education. Additional appropriate education or certifications may be substituted for the minimum experience requirements.

It's great if you have

VMware experience with design, installation, support, and optimization; includes VMware vSphere 6.x (6.7 preferred), NSX, SRM, and VMware vRealize Network Insight.

Experience with Linux System Administration including provisioning and patch management.

Experience managing networked and/or virtualized storage such as NetApp (required), Exagrid (preferred), and/or Veeam Backup and Recovery (strongly preferred).

Experience with Cisco Unified Computing System (UCS).

Experience in DevOps and Infrastructure as Code/Network as Code with automation and PHP-orchestrator, Python, and Ansible. Network scripting experience using BASH, Python, and/or Powershell for daily tasks.

Experience with Active Directory Federated Services, SAML, and/or similar identity management tools.

Experience with email routing and/or mail server administration.

Experience with ETL creation/maintenance.

Experience with MySQL server and database administration.

Experience setting up monitoring and alerts with Nagios (or similar tools).

Experience with Microsoft PowerBI, Kimball methodologies, MS-SQL Data Warehouse, and/or MS-SQL SSIS.

Certifications such as Linux+, RHCSA, RHCE, VCP-NV, VCP-DCV, NCTA, VMCE, MSCA in Database/Business Intelligence.

Knowledge of information security standards such as NIST 800 series or ISO 17799/27002; and rules and regulations related to information security and data confidentiality such as FERPA, HIPAA, etc. 

Experience using Google GSuite and/or Office 365.

Knowledge of Cisco Identity Services Engine (ISE) basic AAA policy, custom command sets, command shells using RADIUS and TACACS+.

Experience in Software-Defined Networking, including defining services for managing routing, firewalls, network access control, network performance, network drivers. 

Experience in leveraging RESTful APIs for workflow enhancement.

Certification and experience with ITIL or other ITSM methodologies.

Experience in using following the tools or equivalent:

• Cisco Prime
• Cisco ISE
• Cisco Umbrella DNS and filtering services
• Ansible/Python scripting for Network Automation
• NetBox
• LogRhythm Netmon
• Nagios
• Pelco or other Security Camera systems
• Visio 
• Lansweeper
• Airwatch/VMware Workspace One MDM

Other Things You Should Know

Find information about the application process here.

The Denver Public Library connects people with information, ideas and experiences to provide enjoyment, enrich lives and strengthen our community. The customer is at the center of all work performed at the Denver Public Library. Denver boasts a diversity of age, background, religion, ethnicity, culture, education, socioeconomic level and lifestyle.

It's an exciting and pivotal time at the Library! We have just reorganized the IT department around DevOps principles, which require both a solid technology foundation and the capacity to innovate. You will have the opportunity to help lead this transformation to best serve the Denver Community. 

Although the full salary range for this position is provided, offers are typically made within the starting salary range and depend on qualifications.  The City and County of Denver benefit package will be offered.

While occasional evening and weekend work will be required for periodic off-hours maintenance, the Denver Public Library values work/life balance and offers flexibility in scheduling, telework, and shared responsibility for after-hours support. You will have your holidays and weekends back! The schedule will be determined by the needs of a department that encourages a healthy work-life balance and will rarely ask for hours to be worked outside a normal workday.