Sr. Systems Engineer

IT@JH Enterprise Directory and Messaging is seeking a Sr. Systems Engineer who is is responsible for managing servers, appliances and applications supported by the Enterprise Directory and Infrastructure Services (EDIS) team. Some infrastructure supported by the team includes the Efficient IP DHCP, and DNS appliances, Ivanti (formerly Pulse Secure) VPN appliances and the Microsoft Enterprise PKI environment comprising of PKI CAs, OCSP, CRL NDES and FAS servers. This position will be responsible for providing architect engineering design, implementation, governance, testing, support, and compliance with Johns Hopkins policies for infrastructure services supported by the EDIS team. The position will be responsible for the daily operation of the services and understanding the complexity of a large environment with multiple infrastructure requirements. Must be able to work independently but also the ability to be collaborative.

Specific Duties & Responsibilities

• Interacts with customers daily. Must be able to work closely with customers and vendors to understand and translate their functional needs into technical requirements.
• Understands business critical application support of network connectivity.
• Serves as a knowledgeable liaison between the functional and technical communities. 
• Responsible for developing an understanding of the general business requirements needed to support services supported by the EDIS team. Successful configuration of the systems to meet client needs also calls for an ability to quickly grasp client-specific solutions for PKI, VPN, certificate services and DDI. Tasked with providing support for the configuration, deployment, and management of EDIS systems and solutions.
• Hands on with testing, configuration, design, and troubleshooting.
• Meets with customers to share methods and procedures that help customer understand services supported by EDIS. Responsible for providing advice to customers and following up with customer to ensure complete satisfaction. Building and maintaining strong, trusted customer and vendor relationships are critical as well and the Sr. Systems Engineer should have experience presenting to executives, end-users as the subject-matter expert.
• Works on a team responsible for supporting EDIS systems and appliances. Will also need to work independently testing and troubleshooting any issues. Must have the ability to work independently in an Enterprise environment and maintain 100% uptime of systems and appliances.

Specific Devices, Software, Projects

• Strong PKI and VPN experience are essential.
• PKI and certificate services are used throughout Hopkins for and with integrations with various applications. Our environment must be highly available and secure to successfully support both the Hospital and the University missions.
• The technologies involved in designing, deploying, and managing EDIS supported services include a knowledge of DNS protocol, DHCP protocol, PowerShell scripting, Networking, IP Subnetting, AD, PKI/Certificate services, VPN, and server and appliances support. Implementation involved strong technical and implementation knowledge of implementing systems in the public cloud (Azure and AWS).

Scale/size of area, Project and/or System supported

• DNS, DHCP, PKI, and VPN services are used across the university, hospitals, and medical institutions for business-critical processes. It is used by applications, systems and network attached devices (Wired and Wireless).
• The Sr. Systems Engineer must:
• Possess strong technical skills and independently stay current with a constantly changing technology and vendor landscape.
• Lead projects and manage supporting staff as assigned to complete the project.
• Work with management on setting timelines and priorities and work independently to achieve project goals.

On-Call Requirements

• Yes

Special Knowledge, Skills, & Abilities

• Knowledge of Ivanti VPN or VPN technologies.
  

• Knowledge of Certificate Authority (CA), Certification Revocation List (CRL), x.509.
  

• NDES/SCEP or Active Directory Certificate Services (ADCS) experience.
  

• PKI administration internal and public.
  

• Creating and installing PKI certs on servers and various hardware devices.
  

• Hardware Security Modules (HSM) administration.
  

• Building and maintaining Windows servers.
  

• Implement, troubleshoot, and maintain different protocols including but not limited to DNS, DHCP, IPAM, LDAP/LDAPS, RADIUS...
  

• Build and manage VMware guest servers.
  

• Design and implement solutions to support server requirements for High Availability (load-balancing, data replication, failover, clustering...)
  

• Scripting (PowerShell, Python....)
  

• Knowledge of Sectigo certificates management.
  

• Knowledge of certificate management solutions.
  

• Managing domain names with third party registrants like Network Solutions, Google DNS, Go Daddy, etc.

Work Location

• Hybrid, Mt. Washington

• Bachelor's Degree.
• Five years related experience (Direct programming experience while pursuing education may count towards related experience. Significant undergraduate programming coursework or independent project can be considered as related experience.).
• Additional education may substitute for required experience and additional related experience may substitute for required education, to the extent permitted by the JHU equivalency formula.

• Experience or demonstrated familiarity in more than one of the following technologies, with a desire to learn others.
• Familiarity with PKI concepts including SSL certificates & HTTPS configurations.
• Microsoft Windows administration (Server 2016, 2019...)
• Familiarity with DNS, DHCP, IPAM concepts.
• Familiarity with VPN concepts.
• Splunk queries.
• Scripting (Powershell...)
• Understanding of standard client/server.
• Understanding of networking & TCP/IP
• Pulse/Ivanti VPN
• AD
  

• Azure
  

• AWS
• SMTP
  

• SysLog
  

• Windows OS
  

• Linux OS
  

• Networking
  

• IP Subnetting
  

• VBScript
  

Classified Title: Sr. Systems Engineer   
Role/Level/Range: ATP/04/PF  
Starting Salary Range: Min $83,100/ Mid $114,230/ Max $145,360 Annually (Commensurate with experience) 
Employee group: Full Time 
Schedule: Mon-Fri, 8:30am-5pm 
Exempt Status: Exempt 
Location: Hybrid/Mount Washington Campus 
Department name: ​​​​​​​IT@JH Enterprise Directory and Messaging  
Personnel area: University Administration 

Please refer to the job description above to see which forms of equivalency are permitted for this position. If permitted, equivalencies will follow these guidelines:

*JHU Equivalency Formula: 30 undergraduate degree credits (semester hours) or 18 graduate degree credits may substitute for one year of experience. Additional related experience may substitute for required education on the same basis. For jobs where equivalency is permitted, up to two years of non-related college course work may be applied towards the total minimum education/experience required for the respective job.

**Applicants who do not meet the posted requirements but are completing their final academic semester/quarter will be considered eligible for employment and may be asked to provide additional information confirming their academic completion date.

The successful candidate(s) for this position will be subject to a pre-employment background check.

The Johns Hopkins University values diversity, equity and inclusion and advances these through our key strategic framework, the JHU Roadmap on Diversity and Inclusion.

Equal Opportunity Employer

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

EEO is the Law
Learn more:
https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf

Accommodation Information

If you are interested in applying for employment with The Johns Hopkins University and require special assistance or accommodation during any part of the pre-employment process, please contact the Talent Acquisition Office at jhurecruitment@jhu.edu. For TTY users, call via Maryland Relay or dial 711. For more information about workplace accommodations or accessibility at Johns Hopkins University, please visit accessibility.jhu.edu.

Johns Hopkins has mandated COVID-19 and influenza vaccines, as applicable. Exceptions to the COVID and flu vaccine requirements may be provided to individuals for religious beliefs or medical reasons. Requests for an exception must be submitted to the JHU vaccination registry. For additional information, applicants for SOM positions should visit https://www.hopkinsmedicine.org/coronavirus/covid-19-vaccine/ and all other JHU applicants should visit https://covidinfo.jhu.edu/health-safety/covid-vaccination-information/.

The following additional provisions may apply, depending on campus. Your recruiter will advise accordingly.

The pre-employment physical for positions in clinical areas, laboratories, working with research subjects, or involving community contact requires documentation of immune status against Rubella (German measles), Rubeola (Measles), Mumps, Varicella (chickenpox), Hepatitis B and documentation of having received the Tdap (Tetanus, diphtheria, pertussis) vaccination. This may include documentation of having two (2) MMR vaccines; two (2) Varicella vaccines; or antibody status to these diseases from laboratory testing. Blood tests for immunities to these diseases are ordinarily included in the pre-employment physical exam except for those employees who provide results of blood tests or immunization documentation from their own health care providers. Any vaccinations required for these diseases will be given at no cost in our Occupational Health office.

Note: Job Postings are updated daily and remain online until filled.