Principal Network Engineer - East Coast or Midwest

MKS Inc.
Andover, United States of America
4 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English
Experience level
Senior
Compensation
$ 183K

Job location

Andover, United States of America

Tech stack

Amazon Web Services (AWS)
Azure
Border Gateway Protocol
Business Systems
Computer Security
Data Centers
Data Transmissions
Dynamic Host Configuration Protocol
DNS
Enhanced Interior Gateway Routing Protocol
Integrated Architecture Framework
IP Addressing
Internet Protocol Security (IP SEC)
Virtual Private Networks (VPN)
Multi-protocol Systems
Network Architecture
Remote Access Technology
Cloud Services
Zero Trust Network Access
Terminal Access Controller Access-Control System (TACACS)
TCP/IP
Virtual Local Area Networks
Wide Area Networks
Wireless Networks
Network Routers
Scripting (Bash/Python/Go/Ruby)
Transport Layer Security
Identity Services Engine
Load Balancing
ServiceNow IT Service Management
Multi-Cloud
Firewalls (Computer Science)
SolarWinds (Software)
Fortinet
Cloud Migration
Open Network Automation Platform
Cisco networks

Job description

As a Principal Network Engineer at MKS, you will partner closely with our Enterprise Infrastructure team to architect, design, and evolve the network technologies that power MKS' global operations. You will collaborate with cross-functional technical groups, business teams, and external partners to deliver resilient, scalable, and secure connectivity across our worldwide footprint. In this role, you will report to the Senior Manager, Network Engineering.

You Will Make an Impact By:

  • Designing, architecting, and implementing data communication networks, including cloud-integrated architecture for AWS and Azure.
  • Leading enterprise network modernization, capacity planning, and continuous improvement initiatives.
  • Managing MKS' global Palo Alto firewall footprint and contributing to Fortinet-based security architecture.
  • Driving deployment and lifecycle management of Aruba technologies (wired, wireless, ClearPass, Aruba Central).
  • Overseeing network implementation plans, schedules, budgets, and communication to leadership.
  • Supporting daily operations, including automation, incident escalation, and participation in on-call rotation.
  • Coordinating technical execution with internal business and technical partners across the organization.
  • Participating in ServiceNow ticketing processes for operational and project-based work.
  • Travel Requirements: Up to 5%

Requirements

  • Bachelor's Degree or equivalent experience
  • 10+ years of similar work experience
  • Experience integrating networks with AWS, Azure, and other cloud service providers.
  • Expertise in DNS, DHCP, and IP addressing.
  • Competency with remote access technologies (SSL, IPSec) and site-to-site VPN.
  • Strong knowledge of wireless networks and controller-based deployments.
  • Deep understanding of WAN and SD-WAN provisioning and optimization.
  • Experience with routers, switches, firewalls, and load balancers in multivendor environments.
  • Strong foundational networking skills: TCP/IP, EIGRP, BGP, MPLS, IPSec VPN, L2/L3 switching, VLANs, firewall policy design.

Preferred Skills

  • Hands-on experience managing and designing solutions with Fortinet and Palo Alto firewalls.
  • Extensive experience with Aruba routers, switches, wireless APs, and cloud management via Aruba Central.
  • Familiarity with authentication services: RADIUS, TACACS/TACACS+, 802.1X.
  • Experience with ClearPass, SolarWinds, Cisco Umbrella, Infoblox, Cisco ISE.
  • Strong analytical, troubleshooting, organizational, and communication skills.
  • Experience supporting network infrastructure in a 24/7 on-call rotation.
  • Ability to work effectively in cross-functional and international team environments.
  • Experience designing or operating Zero-Trust network models.
  • Experience with network automation frameworks or scripting tools.
  • Background leading major network modernization or cloud migration projects.
  • Familiarity with high-availability load balancing across multi-cloud or multi-site environments.

Physical Demands and Working Conditions:

Ability to participate in after-hours maintenance windows and on-call coverage.

Occasional work in data center environments, including moving or installing equipment up to ~20 lbs.

In addition to the above responsibilities, the following are considered material job duties of the position:

  • Ability to take and follow directions and instructions.
  • Ability to interact with other employees, customers, suppliers, vendors, or the public, in a safe, professional, and respectful manner.
  • Access to sensitive and confidential business systems and software, personally identifying information, the company's financial information, and/or the ability to maintain physical security and safety.
  • Because this position involves the above material job duties, trustworthiness, reliability, and good judgment also are material job duties.

Benefits & conditions

Salary Pay Range: $ 109,750.00 - 182,900.00 per year. This range is a good faith estimate of the expected salary range for this position, based on a wide range of factors including qualifications, experience and training, operational and business needs and other considerations permitted by law.

Bonus: This position is eligible for a discretionary annual bonus, in an amount to be determined by MKS [or as applicable].

Benefits: MKS offers a comprehensive benefits package, including health insurance coverage (medical, dental and vision), 401(k) with company match, life and disability insurance, 12 paid holidays, sick time, 15 paid vacation days, [6 weeks fully paid] parental leave, adoption assistance and tuition reimbursement [and for participation in any stock programs, signing bonus, etc.

MKS will consider qualified applicants with acriminalhistory pursuant to the California Fair Chance Act and the Los Angeles County Fair Chance Ordinance for Employers.

Globally, our policy is to recruit individuals from wide and diverse backgrounds. However, certain positions require access to controlled goods and technologies subject to the International Traffic in Arms Regulations (ITAR) or Export Administration Regulations (EAR). Applicants for these positions may need to be "U.S. persons." "U.S. persons" are generally defined as U.S. citizens, noncitizen nationals, lawful permanent residents (or, green card holders), individuals granted asylum, and individuals admitted as refugees.

Apply for this position