IT@JH Enterprise Directory and Infrastructure Services is seeking a Sr. Systems Engineer who is responsible for managing servers, appliances and applications supported by the Enterprise Directory and Infrastructure Services (EDIS) team. Some infrastructure supported by the team includes the Efficient IP DHCP, and DNS appliances, Ivanti (formerly Pulse Secure) VPN appliances and the Microsoft Enterprise PKI environment comprising of PKI CAs, OCSP, CRL NDES and FAS servers. This position will be responsible for providing architect engineering design, implementation, governance, testing, support, and compliance with Johns Hopkins policies for infrastructure services supported by the EDIS team. The position will be responsible for the daily operation of the services and understanding the complexity of a large environment with multiple infrastructure requirements. Must be able to work independently but also the ability to be collaborative.
Specific Duties & Responsibilities
Interact with customers daily.
Work closely with customers and vendors to understand and translate their functional needs into technical requirements.
Understand business critical application support of network connectivity.
Function as a knowledgeable liaison between the functional and technical communities.
Develop an understanding of the general business requirements needed to support services supported by the EDIS team.
Configure systems to meet client needs and quickly grasp client-specific solutions for PKI, VPN, certificate services and DDI.
Provide support for the configuration, deployment, and management of EDIS systems and solutions.
Testing, configuration, design, and troubleshooting highly complex server hardware and operating systems.
Meet with customers to share methods and procedures that help customers understand services supported by EDIS.
Provide advice to customers and following up with customer to ensure complete satisfaction.
Build and maintain strong, trusted customer and vendor relationships.
Present to executives, end-users as the subject-matter expert.
Work on a team responsible for supporting EDIS systems and appliances.
Work independently testing and troubleshooting any issues.
Work independently in an Enterprise environment and maintain 100% uptime of systems and appliances.
Possess strong technical skills and independently stay current with a constantly changing technology and vendor landscape.
Lead projects and manage supporting staff as assigned to complete the project.
Work with management on setting timelines and priorities and work independently to achieve project goals.
Scale/Size Of Area, Project And/ Or System Supported
DNS, DHCP, PKI, and VPN services are used across the university, hospitals, and medical institutions for business-critical processes. It is used by applications, systems and network attached devices (Wired and Wireless).
Special Knowledge, Skills & Abilities
Knowledge of Certificate Authority (CA), Certification Revocation List (CRL), x.509.
NDES/SCEP or Active Directory Certificate Services (ADCS) experience.
Knowledge of PKI administration internal and public.
Ability to create and install PKI certs on servers and various hardware devices.
Knowledge of Hardware Security Modules (HSM) administration.
Ability to build and maintain Windows servers.
Implement, troubleshoot, and maintain different protocols including but not limited to DNS, DHCP, IPAM, LDAP/LDAPS, RADIUS.
Ability to build and manage VMware guest servers.
Ability to design and implement solutions to support server requirements for High Availability (load-balancing, data replication, failover, clustering).
Knowledge of Scripting (PowerShell, Python).
Knowledge of VPN.
Must demonstrate strong critical thinking and analytical reasoning skills.
Ability to work on multiple priorities effectively.
Ability to prioritize conflicting demands.
Ability to execute assigned project tasks within established schedule.
Ability to work collaboratively in a team environment.
Ability to communicate effectively in the service of users and colleagues.
Writes and communicates clearly and concisely.
Possesses sound documentation skills.
Ability to maintain confidentiality.
Must demonstrate exemplary customer service skills.
Strong PKI and VPN experience are essential. PKI and certificate services are used throughout Hopkins for and with integrations with various applications. Our environment must be highly available and secure to successfully support both the Hospital and the University missions.
The technologies involved in designing, deploying, and managing EDIS supported services include a knowledge of DNS protocol, DHCP protocol, PowerShell scripting, Networking, IP Subnetting, AD, PKI/Certificate services, VPN, server and appliances support. Implementation involved strong technical and implementation knowledge of implementing systems in the public cloud (Azure and AWS).
On-call requirement Yes
Five years related experience (Direct programming experience while pursuing education may count towards related experience. Significant undergraduate programming coursework or independent project can be considered as related experience.)
Additional education may substitute for required experience and additional related experience may substitute for required education, to the extent permitted by the JHU equivalency formula.
Knowledge of VPN.
Knowledge of PKI and certificate services.
Knowledge of Scripting (PowerShell).
Knowledge of DDI (DNS, DHCP, IPAM).
Knowledge of Windows Servers and Operating Systems.
Knowledge of AD.
Classified Title: Sr. Systems Engineer Role/Level/Range: ATP/04/PF Starting Salary Range: $83,100 - $114,230 (Commensurate with experience) Employee group: Full Time Schedule: Mon-Friday 8:30am-5:00pm Exempt Status: Exempt Location: Hybrid/Mount Washington Campus / Remote Department name: IT@JH Enterprise Directory and Messaging Personnel area: University Administration
Please refer to the job description above to see which forms of equivalency are permitted for this position. If permitted, equivalencies will follow these guidelines:
30 undergraduate degree credits (semester hours) or 18 graduate degree credits may substitute for one year of experience. Additional related experience may substitute for required education on the same basis. For jobs where equivalency is permitted, up to two years of non-related college course work may be applied towards the total minimum education/experience required for the respective job.
The successful candidate(s) for this position will be subject to a pre-employment background check.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
If you are interested in applying for employment with The Johns Hopkins University and require special assistance or accommodation during any part of the pre-employment process, please contact the Talent Acquisition Office at email@example.com. For TTY users, call via Maryland Relay or dial 711. For more information about workplace accommodations or accessibility at Johns Hopkins University, please visit accessibility.jhu.edu.
The following additional provisions may apply, depending on campus. Your recruiter will advise accordingly.
The pre-employment physical for positions in clinical areas, laboratories, working with research subjects, or involving community contact requires documentation of immune status against Rubella (German measles), Rubeola (Measles), Mumps, Varicella (chickenpox), Hepatitis B and documentation of having received the Tdap (Tetanus, diphtheria, pertussis) vaccination. This may include documentation of having two (2) MMR vaccines; two (2) Varicella vaccines; or antibody status to these diseases from laboratory testing. Blood tests for immunities to these diseases are ordinarily included in the pre-employment physical exam except for those employees who provide results of blood tests or immunization documentation from their own health care providers. Any vaccinations required for these diseases will be given at no cost in our Occupational Health office.
Note: Job Postings are updated daily and remain online until filled.
Johns Hopkins University remains committed to its founding principle, that education for all students should be grounded in exploration and discovery. Hopkins students are challenged not just to learn but also to advance learning itself. Critical thinking, problem solving, creativity, and entrepreneurship are all encouraged and nourished in this unique educational environment. After more than 130 years, Johns Hopkins remains a world leader in both teaching and research. Faculty members and their research colleagues at the university's Applied Physics Laboratory have each year since 1979 won Johns Hopkins more federal research and development funding than any other university. The university has nine academic divisions and campuses throughout the Baltimore-Washington area. The Krieger School of Arts and Sciences, the Whiting School of Engineering, the School of Education and the Carey Business School are based at the Homewood campus in northern Baltimore. The schools of Medicine, Public Health, and Nursing share a campus in east Baltimore with The Johns Hopkins Hospital. The Peabody Institute, a leading professional school of music, is located on Mount Vernon Place in downtown Bal...timore. The Paul H. Nitze School of Advanced International Studies is located in Washington's Dupont Circle area.