Senior Network Automation Engineer

This role will entail, but not limited to, working within the framework of network access control and policy enforcement control access to the network primarily focusing on authentication at the network edge. The critical tasks at hand are: 1. To prepare the test plan(s) certifying IEEE 802.1x across a number of edge devices that carry a IEEE 802.1x supplicant ranging from Window 10/ 11/ Cisco Phones/ speakers bus turret/ Apple iOS/ Android/ and much more working in conjunction with a number of different edge switches as the IEEE 802.1x Authenticator. The backend Authentication Server is Cisco ISE 2. Automate these test plans in a ROBOT framework, using Ansible and Python such that the above validation between IEEE 802.1x Authenticator (the switch) and candidate edge device. The outcome of this is a ROBOT 3. The above two allow the creation of a self-service portal where the 802.1x interop will be verified and within the ROBOT framework a Test Report with Logs will be generated for comprehensive analysis as required. Most helpful will be understanding network DMZ designs and certify the underlying hardware, related software features and desktop endpoints 8021.x functionality and related failure modes. The successful candidate would have a sound knowledge and experience of functional testing performed manually which then can be automated. Good Ansible and Python programming. 1. Proficiency in the ROBOT Framework: Understanding the syntax, libraries, and how to create and execute test cases using the ROBOT framework. 2. 3. Networking Knowledge: Understanding of network protocols, configurations, and troubleshooting TCP/IP, DNS, DHCP, and other networking concepts. 4. Ansible: Using Ansible for automation, including writing playbooks, managing inventories, and using Ansible modules to automate network configurations and deployments. 5. Test Case Design: Ability to design effective test cases that cover various network scenarios and edge cases. 6. Attention to Detail: Meticulous attention to detail to ensure that all aspects of the network and test cases are thoroughly tested. From the networking side hands-on experience on Routing and Switching of Cisco and Arista platform and related security/ hardening aspects, 802.1x or NAC (Network Admission Control) and TrustSec related functionality. The candidate will be collaborating with highly skilled infrastructure engineers and architects from across multiple verticals (eg. cloud/ compute/ security/ telemetry/ desktop engineering teams/ security architects et al) and senior management often on a day-to-day basis. It is absolute imperative that he/ she has excellent written and verbal communication skills. 8+ Years of experience with LAN/WAN network design, engineering, and certification. Proficiency in the ROBOT Framework Ansible playbooks authoring and how to integrate Ansible with ROBOT framework for seamless automation is beneficial. Attention to Detail: Meticulous attention to detail to ensure that all aspects of the test cases are thoroughly tested. Experience with building Lab designs, and certification of hardware and software of products, performing PoCs. Hands-on experience with Cisco Catalyst switches, 802.1X configurations. Understanding of device certificate management and Certificate based authentication (EAP-TLS). Understanding of RADIUS, Dynamic VLAN, Critical VLAN, EAP, AAA, port security, CoA and IBNS2.0 a plus Familiarity with Cisco ISE profiling, authentication, authorization, and policy configurations a plus Good knowledge of Networking technologies: TCP/IP, BGP, OSPF, Work under minimal supervision Experience in using test tools like Ixia/Spirent/ iperf, Latency generators, Wireshark a plus Collaborate and co-ordinate with Network and Security teams, and vendors. Ability to deal with multiple projects and prioritize the tasks Create all necessary test cases and develop config templates and operational manuals. Demonstrate strong interpersonal and communication skills, while working with diverse audiences including highly skilled IT professionals and senior management. Extensive liaising with Cisco and Arista Knowledge of Network protocols BGP, OSPF, Spanning Tree protocol Knowledge on 802.1X, End point authentication, Radius, EAP is a must. Design and troubleshoot Cisco, Arista Network platforms and protocols IP Routing Platforms: ISR, ASR1K, ASR9K, Catalyst 9K, Nexus9K Cabling and optics 10/25G/40G/50G/100G - Break out cables, break out panels. ROBOT framework Python Test automation within CI/CD infrastructure, ROBOT framework a plus Cisco SDA solution and DNA Center a plus Consequently, our recruiting efforts reflect our desire to attract and retain the best and brightest from all talent pools. We want to be the first choice for prospective employees. It is the policy of the Firm to ensure equal employment opportunity without discrimination or harassment on the basis of race, color, religion, creed, age, sex, sex stereotype, gender, gender identity or expression, transgender, sexual orientation, national origin, citizenship, disability, marital and civil partnership/union status, pregnancy, veteran or military service status, genetic information, or any other characteristic protected by law. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren't just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There's also ample opportunity to move about the business for those who show passion and grit in their work. To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser. Consequently, our recruiting efforts reflect our desire to attract and retain the best and brightest from all talent pools. We want to be the first choice for prospective employees. It is the policy of the Firm to ensure equal employment opportunity without discrimination or harassment on the basis of race, color, religion, creed, age, sex, sex stereotype, gender, gender identity or expression, transgender, sexual orientation, national origin, citizenship, disability, marital and civil partnership/union status, pregnancy, veteran or military service status, genetic information, or any other characteristic protected by law.