Senior Engineer, Systems Administration

This candidate will provide technical support for ICU Medical FDA-approved software and wireless medical devices deployed within customer-controlled networks. Additionally, the candidate will provide internal infrastructure support to the Research and Development (R&D) groups and Service Center teams around the world.

Essential Duties & Responsibilities

• Configuring, supporting and troubleshooting enterprise wireless network controllers and access points (Cisco preferred).
• Deploy new wireless controllers, deploy new SSID’s using various encryption and authentication methods on the ISM 2.4, 5.2Ghz and 6GHz radio bands
• Troubleshoot and isolate client network connectivity issues that might be caused by device misconfiguration, environmental interference, or system misconfigurations
• Strong wireless understanding around configuring RADIUS servers for client/device profiling and 802.1x authentication to include EAP-PEAP, EAP-TLS, EAP-TTLS and EAP-FAST.
• Knowledge of the 802.11 standards and identify what channels are available for use and common sources of wireless interference
• Install, configure and maintain Cisco Catalyst network routers and switches using IPv4 and IPv6 protocols
• Capture both wired and over-the-air wireless network traffic and analyze said traffic using common network tools such as AirMagnet and WireShark
• Knowledgeable in network firewalls, site-site VPN tunnels and network access control lists.
• Able to create x509 keystores and certificates and convert certificates into various formats as needed.
• Configuring, supporting and troubleshooting enterprise server hardware, virtual hypervisors and virtual machines (VMware, HyperV, etc.).
• Managing Microsoft Active Directory users, groups, and GPO policies.
• Maintaining detailed documentation of system configurations, processes, and standard operating procedures (SOPs).

Knowledge & Skills

Wireless Network Controllers:

• Add/remove/modify ESSID’s to a Cisco Wireless Network Controller
• Add/remove/modify AAA authentication to a Wireless Controller
• Add/remove/modify AP power levels and their assigned channels
• Complete over-the-air wireless network captures

Cisco ISE Server

• Must know how to add/remove devices into Cisco ISE
• Must know how to create AAA profiles to aid in network authentication.
• Must know how to troubleshoot authentication issues when devices are experiencing authentication and authorization issues.

Firewalls and VPN’s:

• Experienced in creating, diagnosing connectivity issues and maintaining site-site VPN tunnels
• Experienced in patching and upgrading network firewalls - both appliance-based and virtual.

Network Switches

• Experienced in adding/removing new VLANs and subnets to L3 switches using IPv4 and IPv6
• Experienced in common network routing protocols
• Experienced in adding, removing and modifying network ACL’s
• Experienced in installing, troubleshooting, maintaining server hardware components
• Experienced in installing, troubleshooting, maintaining NAS hardware components

Server Hardware

Virtualization

• Experienced in installing VMWare ESXi, Hyper-V, or another Hypervisor on new servers
• Experienced in adding and managing hosts
• Experienced in deploying and maintaining virtual machines and templates

Microsoft Windows and SQL Server

• Experienced in building new Microsoft Windows Servers in a virtual environment
• Experience in configuring and managing Microsoft Active Directory deployments
• Experienced in deploying LINUX based OS’s in a virtual environment
• Able to install Microsoft SQL server as needed to support various applications

X509v3 Certificates

• Experienced in creating certificate key files, CA certificates and server certificates for SSL/TLS encryption.
• Experienced in creating and converting certificates from any given file format to another certificate file format (ex: PKCS#12 to PEM)

Minimum Qualifications, Education & Experience

• Must be at least 18 years of age
• Bachelor’s degree from an accredited college or university is required
• MSCE, CWNA, CCNA, CCIE or equivalent experience desired
• 5+ years related experience
• Experience in 5 or more of the key areas below:

Cisco or Aruba Wireless Network Controllers

Cisco Identify Services Engine or Aruba ClearPass

Enterprise Firewalls (ASA, PAN, or SRX)

Site to Site VPN setup and maintenance

Cisco Catalyst Network Switches

WireShark Packet Analysis

Embedded Wireless Network Client support

Server and NAS Hardware

Microsoft Windows Server (2016 and newer)

Microsoft SQL Server 2016 and newer

Virtual Host Management

Support of Wireless Medical Devices