Job Summary

In this role the individual will be responsible for designing, building, and maintaining ICANN’s network services; providing support for the entire Org across multiple data centers, cloud providers, and international offices. ICANN’s Network Engineering team ensures that ICANN’s services are available to people around the world who have vested interest in the ongoing improvement of the internet and DNS services.

Key Responsibilities & Duties

• Deploy and maintain network resources in data centers
• Remotely support ICANN staff in domestic and international offices
• Work with InfoSec and Operations to support ICANN services
• Available outside normal working hours to support ICANN’s network as needed
• Ability to determine Root Cause Analysis after incidents
• Architect and deploy network improvements
• Create and maintain concise operational and disaster recovery documentation
• Automate and orchestrate network and system resources and provide documentation and support for such
• Work on and collaborate with management and department leaders on the business issues requiring expert technical knowledge where near and long-term analysis of situations requires evaluation of intangibles
• Interact with vendors, outsourcers and contractors to secure systems and network products and services
• Engage in the review processes for new systems or infrastructure and document the technical operations of new infrastructure working across the entire E&IT function
• Contribute to the creation of detailed plans for the integration of new infrastructure into or replacing existing infrastructure inclusive of logistical plans and providing technical direction and support

Required Knowledge, Skills, and Abilities (KSAs)

(Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions)

• Experience with network operations: routing, switching, and firewalls
• Experience with network services such as NAT, VRRP, and DHCP
• Juniper and/or Arista configuration experience
• Understanding of Authentication, Authorization, and Accounting and ability to utilize such
• Understanding of Network Security Principles (such as BCP38 and BCP84)
• Understanding of network monitoring and insight (such as flows, SNMP, and telemetry)
• Understanding of Disaster Recovery scenarios and ability to plan for them
• Layers 1, 2, and 3 of the OSI model and protocols thereof (e.g. TCP/IP, BGP, and OSPF)
• IP versions four and six and how to implement them practically
• Ability to document devices and processes; ability to follow documentation

Preferred Qualifications

• Experience with Aruba Wireless and ClearPass
• Experience with Linux systems administration; hardware and software deployment and maintenance
• Experience with Ansible or Terraform
• Experience with Python or other scripting languages
• Experience with CI/CD pipelines
• Understanding of general security practices including certificate management
• Understanding of ITIL, Asset Management, and Change Management
• Understanding of Virtual Routing Instances and Software-Defined Networking

Education and Experience Requirements

• Minimum five (5) years of related IT experience with a bachelor’s degree

Language

• Fluency, both written and spoken, in English is required
• ICANN is a global organization that values diversity; preference will be given to candidates with demonstrated skills in additional languages besides English

Working Conditions & Physical Requirements

• While performing the duties of this job, the employee is frequently required to stand and walk
• The employee regularly is required to sit
• The employee is frequently required to talk or hear; use hands and arms to reach, handle or feel
• Specific vision