In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities.
This is a Lead Workplace Engineering position at Vice President level, which is part of the job family responsible for managing and optimizing the technical environment and end-user experience across various workplace technologies, ensuring seamless operations and user satisfaction across the organization.
Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.
This position is a Senior Network Engineer role with strong expertise in implementing Network Access Control, 802.1X on Enterprise class switches. Candidate’s focus will be in developing lab testing frameworks, to test and validate the secure access using Cisco Identity Services Engine, RADIUS, authentication protocols and device certificates. This role will be critical in enhancing end point visibility and ensuring compliance across wired and wireless network infrastructure.
What you'll do in the role:
This role will entail, but not limited to, working within the framework of network access control and policy enforcement control access to the network primarily focusing on authentication at the network edge. The critical tasks at hand are:
1. To prepare the test plan(s) certifying IEEE 802.1x across a number of edge devices that carry a IEEE 802.1x supplicant ranging from Window 10/ 11/ Cisco Phones/ speakers bus turret/ Apple iOS/ Android/ and much more working in conjunction with a number of different edge switches as the IEEE 802.1x Authenticator. The backend Authentication Server is Cisco ISE
2. Automate these test plans in a ROBOT framework, using Ansible and Python such that the above validation between IEEE 802.1x Authenticator (the switch) and candidate edge device. The outcome of this is a ROBOT
3. The above two allow the creation of a self-service portal where the 802.1x interop will be verified and within the ROBOT framework a Test Report with Logs will be generated for comprehensive analysis as required.
Most helpful will be understanding network DMZ designs and certify the underlying hardware, related software features and desktop endpoints 8021.x functionality and related failure modes.
What you'll bring to the role:
The successful candidate would have a sound knowledge and experience of functional testing performed manually which then can be automated. Good Ansible and Python programming.
1. Proficiency in the ROBOT Framework: Understanding the syntax, libraries, and how to create and execute test cases using the ROBOT framework.
2. Programming Skills: Knowledge of Python
3. Networking Knowledge: Understanding of network protocols, configurations, and troubleshooting TCP/IP, DNS, DHCP, and other networking concepts.
4. Ansible: Using Ansible for automation, including writing playbooks, managing inventories, and using Ansible modules to automate network configurations and deployments.
5. Test Case Design: Ability to design effective test cases that cover various network scenarios and edge cases.
6. Attention to Detail: Meticulous attention to detail to ensure that all aspects of the network and test cases are thoroughly tested.
From the networking side hands-on experience on Routing and Switching of Cisco and Arista platform and related security/ hardening aspects, 802.1x or NAC (Network Admission Control) and TrustSec related functionality. The candidate will be collaborating with highly skilled infrastructure engineers and architects from across multiple verticals (eg. cloud/ compute/ security/ telemetry/ desktop engineering teams/ security architects et al) and senior management often on a day-to-day basis. It is absolute imperative that he/ she has excellent written and verbal communication skills.
Qualifications:
· 8+ Years of experience with LAN/WAN network design, engineering, and certification.
· CCNP Level of experience
· Proficiency in the ROBOT Framework
· Knowledge of Python
· Ansible playbooks authoring and how to integrate Ansible with ROBOT framework for seamless automation is beneficial.
· Attention to Detail: Meticulous attention to detail to ensure that all aspects of the test cases are thoroughly tested.
· Experience with building Lab designs, and certification of hardware and software of products, performing PoCs.
· Hands-on experience with Cisco Catalyst switches, 802.1X configurations.
· Understanding of device certificate management and Certificate based authentication (EAP-TLS).
· Understanding of RADIUS, Dynamic VLAN, Critical VLAN, EAP, AAA, port security, CoA and IBNS2.0 a plus
· Familiarity with Cisco ISE profiling, authentication, authorization, and policy configurations a plus
· Good knowledge of Networking technologies: TCP/IP, BGP, OSPF,
· Work under minimal supervision
· Experience in using test tools like Ixia/Spirent/ iperf, Latency generators, Wireshark a plus
· Strong troubleshooting and debugging skills
· Collaborate and co-ordinate with Network and Security teams, and vendors.
· Ability to deal with multiple projects and prioritize the tasks
· Excellent communication skills a MUST
· Create all necessary test cases and develop config templates and operational manuals.
· Demonstrate strong interpersonal and communication skills, while working with diverse audiences including highly skilled IT professionals and senior management.
· Collaborate with other technical teams at Morgan Stanley to deliver product and solution level support.
· Extensive liaising with Cisco and Arista
Skills Required:
· Knowledge of Network protocols BGP, OSPF, Spanning Tree protocol
· Knowledge on 802.1X, End point authentication, Radius, EAP is a must.
· Working knowledge of DNS And DHCP Servers
· Design and troubleshoot Cisco, Arista Network platforms and protocols
· IP Routing Platforms: ISR, ASR1K, ASR9K, Catalyst 9K, Nexus9K
· Cabling and optics 10/25G/40G/50G/100G – Break out cables, break out
panels.
· Ansible knowledge
· ROBOT framework
· Python
· ISE knowledge a plus
· Test automation within CI/CD infrastructure, ROBOT framework a plus
· Cisco SDA solution and DNA Center a plus
At Morgan Stanley Alpharetta, we support the Firm’s global business and functions from Wealth Management and Institutional Securities to Technology and Operations, Finance and Human Resources. With the 2020 acquisition of E-TRADE, Morgan Stanley Alpharetta grew significantly and has grown its role in our Wealth Management business helping deliver a premiere experience for the digitally inclined investor and trader. Learn more about our work and culture in Morgan Stanley Alpharetta. Morgan Stanley's goal is to build and maintain a workforce that is diverse in experience and background but uniform in reflecting our standards of integrity and excellence. Consequently, our recruiting efforts reflect our desire to attract and retain the best and brightest from all talent pools. We want to be the first choice for prospective employees.
It is the policy of the Firm to ensure equal employment opportunity without discrimination or harassment on the basis of race, color, religion, creed, age, sex, sex stereotype, gender, gender identity or expression, transgender, sexual orientation, national origin, citizenship, disability, marital and civil partnership/union status, pregnancy, veteran or military service status, genetic information, or any other characteristic protected by law.
Morgan Stanley is an equal opportunity employer committed to diversifying its workforce (M/F/Disability/Vet).
WHAT YOU CAN EXPECT FROM MORGAN STANLEY:
We are committed to maintaining the first-class service and high standard of excellence that have defined Morgan Stanley for over 89 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There’s also ample opportunity to move about the business for those who show passion and grit in their work.
To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.
Morgan Stanley's goal is to build and maintain a workforce that is diverse in experience and background but uniform in reflecting our standards of integrity and excellence. Consequently, our recruiting efforts reflect our desire to attract and retain the best and brightest from all talent pools. We want to be the first choice for prospective employees.
It is the policy of the Firm to ensure equal employment opportunity without discrimination or harassment on the basis of race, color, religion, creed, age, sex, sex stereotype, gender, gender identity or expression, transgender, sexual orientation, national origin, citizenship, disability, marital and civil partnership/union status, pregnancy, veteran or military service status, genetic information, or any other characteristic protected by law.
Morgan Stanley is an equal opportunity employer committed to diversifying its workforce (M/F/Disability/Vet).