Network Engineer

We are seeking a Network Engineer with deep expertise in enterprise networking and security architecture. This role will serve as a senior technical contributor responsible for the design, implementation, optimization, and support of a modern, secure, and scalable network infrastructure. The ideal candidate has strong hands-on experience with Fortinet solutions and Zscaler cloud security platforms and is comfortable operating in a hybrid on-premises and cloud environment.

• Requires occasional domestic travel to retail sites and international travel to production facilities in Latin America and Europe.

WHAT WILL YOU BE RESPONSIBLE FOR?

• Design, deploy, and maintain enterprise network architectures, including LAN, WAN, SD-WAN, and cloud connectivity.
• Lead implementation and ongoing management of Fortinet solutions (FortiGate, FortiManager, FortiAnalyzer, FortiSwitch, FortiAP).
• Architect and administer Zscaler solutions (ZIA, ZPA, ZDX) to support zero trust, secure access, and cloud-first strategies.- Act as a senior escalation point for complex network and security incidents; perform root cause analysis and drive remediation.
• Develop and enforce network security standards, best practices, and operational procedures.
• Partner with security and systems teams to align networking solutions with business and security requirements.
• Lead network modernization initiatives, including migration from legacy perimeter models to Zero Trust architectures.
• Perform capacity planning, performance tuning, and continuous optimization of network environments.
• Evaluate new technologies and provide technical recommendations aligned with business strategy.
• Create and maintain detailed network documentation, diagrams, and operational runbooks.
• Mentor junior engineers and provide technical leadership across projects.

Do you have experience in VPN management?, 5+ years of experience in enterprise networking and infrastructure engineering.

• In-depth knowledge of TCP/IP, DNS, DHCP, BGP.
• Strong hands-on experience with Fortinet technologies, especially FortiGate firewalls and SD-WAN.
• Proven experience implementing and operating Zscaler (ZIA and ZPA required).- Experience with VPN technologies (IPsec, SSL).
• Experience with hybrid networking (on-prem, data center, and public cloud environments such as Azure).
• Strong troubleshooting skills in complex, multi-vendor environments.
• Ability to clearly communicate technical concepts to both technical and non-technical stakeholders., Fortinet certifications (NSE 4-7) and/or Zscaler certifications.
• Experience with SASE and Zero Trust network architectures.
• Experience supporting global or multi-region enterprise networks.- Background working in regulated or security-sensitive environments.

CORE COMPETENCIES

• Strategic thinking and problem-solving.
• Strong documentation and process discipline.
• Ability to lead by influence and technical expertise.- Customer-focused, service-oriented mindset.
• Comfortable operating in fast-paced, evolving environments.

Pulled from the full job description

• Tuition reimbursement
• 401(k)
• Health insurance
• 401(k) matching
• Paid time off
• Employee discount
• Vision insurance, As a colleague at Scandinavian Tobacco Group, you will receive a comprehensive compensation package as a generous benefits package.
• Comprehensive Health Care, Vision & Dental Plan
• Flexible Spending Account
• Disability Plans
• Basic & Supplemental Life Insurance
• Additional Supplemental Benefits
• Paid Vacation, Paid Time Off (PTO) days, Holidays
• 401(k) Retirement Saving Plan including a generous Company match, * 401(k) matching
• Dental insurance
• Employee discount
• Health insurance
• Life insurance
• Paid time off
• Tuition reimbursement
• Vision insurance