Senior Network Engineer

The Senior Network Engineer is responsible for designing, implementing, and operating a large-scale, multi-site enterprise network supporting ~1,800-2,000+ locations, corporate sites, and data-center/cloud connectivity. This role owns day-to-day network reliability and serves as a Tier 3 escalation point, leading incident response, root cause analysis, and permanent remediation to improve uptime and reduce repeat issues. The Senior Network Engineer also drives modernization efforts across SD-WAN, Wi-Fi, security edge, and cloud connectivity, partnering closely with carriers, Cisco/Meraki, and third-party field services to plan and execute changes at scale with strong standards, documentation, and change control discipline.

ESSENTIAL DUTIES:

• Design, implement, and support enterprise firewall/security platforms (Cisco Firepower/FTD preferred), including access control policies, NAT, HA/failover, and upgrade planning.

• Design and operate hybrid cloud connectivity, including Azure ExpressRoute and Megaport, supporting multi-carrier interconnects, BGP peering, route advertisements, and validated failover across diverse transport providers.

• Engineer and maintain resilient routing and traffic-path control across the enterprise network using OSPF, BGP, route filtering, summarization, and redistribution best practices.

• Administer and support Cisco Meraki environments (MX, MR, MS, MG) at scale, including templates, configuration standards, firmware lifecycle planning, and large-scale troubleshooting.

• Design, support, and optimize SD-WAN / AutoVPN connectivity, including resiliency models, hub/spoke architectures, routing behavior, and tunnel health validation.

• Own WAN circuit lifecycle and carrier/vendor coordination, including turn-ups, outage escalation, demarcation troubleshooting, and restoration verification.

• Implement and maintain network segmentation and security controls aligned to least-privilege principles across corporate, guest, and IoT environments.

• Design, validate, and troubleshoot wireless solutions for indoor and outdoor deployments, applying RF fundamentals and performance optimization practices.

• Lead complex incident troubleshooting using packet captures and log/event analysis; perform root cause analysis and drive permanent corrective actions.

• Develop and maintain network automation using Python and/or PowerShell, leveraging APIs (e.g., Meraki Dashboard API) to improve reporting, compliance checks, and bulk-change efficiency.

• Execute production network changes using formal change management practices, including implementation plans, rollback procedures, risk assessments, and pre/post validation.

• Create and maintain network documentation, standards, diagrams, and runbooks; communicate technical updates clearly to both technical and non-technical stakeholders.

• Serve as a Tier 3 escalation point, providing technical leadership, mentoring, and guidance to other engineers and operational teams.

• Performs other duties as assigned.

Advanced proficiency in enterprise network design and operations across large, distributed environments.

• Strong expertise in network security and firewall technologies (Cisco Firepower/FTD preferred).

• Advanced proficiency in Azure network connectivity including ExpressRoute, with strong understanding of Megaport interconnect models.

• Strong understanding of resilient routing design (BGP/OSPF) and traffic-path control.

• Proven ability to troubleshoot complex network issues using packet captures and log correlation.

• Strong organizational, documentation, and communication skills; proficiency in Microsoft Office including Visio.

EDUCATION, EXPERIENCE, AND OTHER REQUIREMENTS:

Bachelor's degree (BA/BS) in Computer Science or related field from four-year college or university; or 7+ years related experience and/or training; or equivalent combination of education and experience in a large enterprise network environment.

• 7+ years of experience in network engineering, including design and operational support of enterprise WAN/LAN/Wi-Fi environments.

• 5+ years of hands-on experience supporting Cisco networking solutions, with preference for Meraki-based distributed networks.

• Experience supporting enterprise firewall platforms, including policy management and troubleshooting.

• Experience supporting cloud connectivity and hybrid network designs, including ExpressRoute and third-party connectivity providers (e.g., Megaport, Equinix).

CERTIFICATIONS, LICENSURES, AND LANGUAGE SKILLS:

CCIE Enterprise Infrastructure (required)

• AZ-700 Microsoft Azure Network Engineer Associate (preferred)

PHYSICAL REQUIREMENTS:

Position requires little to moderate physical activity. Handling of average weight objects up to 15 pounds; occasional standing or walking; frequently at a keyboard, workstation, or desk.