> Markdown version of [/jobs/ext/1506003-principal-network-engineer](https://www.wearedevelopers.com/jobs/ext/1506003-principal-network-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Network Engineer - **Company:** Texas Association of School Boards - **Location:** Austin, TX, United States - **Experience:** Expert - **Salary:** $108,650.0 - $174,250.0 - **Contract:** Permanent contract - **Skills:** IEEE 802.1X, Microsoft Azure, Complex Networks, Cyber Security, System Configuration, Data Centers, IT Management, Virtual Private Networks (VPN), Network Security, Network Architecture, Routing, Network Segmentation, Network Administration, Cisco Nexus Switches, Virtual Local Area Networks, Firewalls (Computer Science), Juniper, Information Technology, Hardware Infrastructure, Cisco Switches, Cisco - **Published:** July 30, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=ca5cf0bb3bce4a4e ## About the Role * Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field, or equivalent professional experience * Required certifications: JNCIP-ENT (JNCIE-ENT preferred) and CCNP Enterprise or CCIE Enterprise Infrastructure; Microsoft Certified: Azure Network Engineer Associate strongly preferred; or ability to obtain required certifications within the first 12 months of employment as a condition of employment * 10+ years of progressive enterprise networking experience * 5+ years of network architecture and design ownership; not participation, but accountable decision-making * Hands-on experience deploying and administering Juniper EX Series switching and SRX Series security platforms, and administering Cisco Catalyst and Nexus platforms, in a production enterprise environment * Experience designing and implementing network segmentation, trust zones, VLANs, NAC, and 802.1X in a multi-entity or multi-tenant environment, ideally with compliance-aware requirements such as FINRA or SOC2 * Experience with Microsoft Azure hybrid networking in multi-subscription environments, including VPN Gateway, ExpressRoute, NSGs, and hub-spoke topologies Knowledge, Skills, and Abilities * Demonstrated ability leading or executing a network platform migration in a production enterprise environment. * Ability to operate as a senior individual contributor in a lean team * Skilled in Juniper EX Series (access/distribution/core switching), SRX Series (stateful firewall, routing, security policy). * Knowledge with Network security policy design, firewall rule management, traffic flow analysis * Ability to present architecture and investment recommendations to non-technical leadership * Knowledgeable in nonprofit, public sector, or multi-affiliate organizational environments ## Description As a Principal Network Engineer, you will serve as TASB's most senior individual-contributor authority on enterprise networking, owning both the architecture and the hands-on engineering of a multi-entity, hybrid Azure/on-premises environment with compliance-sensitive segmentation requirements. You will build the multi-year network modernization roadmap and personally implement it, leading TASB's platform migration from Cisco to Juniper while keeping the existing Cisco environment fully stable throughout the transition. A Typical Day * Own and evolve enterprise network architecture and the multi-year technology roadmap, including platform standards, topology design, and lifecycle planning for switching, routing, and security infrastructure * Lead the design, planning, and execution of the Cisco-to-Juniper platform migration, including risk assessment, cutover planning, and post-migration validation * Collaborate with the Information Security team on network security policy, firewall rule management, and traffic flow analysis, and mentor supporting network staff * If you're still reading, we'd love to meet you! How You'll Make an Impact * Own and continuously evolve enterprise network architecture and the multi-year technology roadmap, including platform standards, topology design, and lifecycle planning for switching, routing, and security infrastructure * Lead the design, planning, and execution of network platform migrations and major technology transitions, including risk assessment, cutover planning, and post-migration validation * Design and implement network segmentation strategies - including trust zones, VLANs, NAC, and 802.1X to enforce security boundaries and meet entity-specific and regulatory isolation requirements * Perform hands-on configuration, deployment, and troubleshooting of switching, routing, and firewall infrastructure across campus, datacenter, and edge environments * Architect and maintain hybrid connectivity between on-premises infrastructure and Microsoft Azure, including VPN Gateway, ExpressRoute, VNets, NSGs, and multi-subscription routing * Serve as the escalation point for complex network incidents, performing root cause analysis and driving remediation for issues affecting production systems * Provide technical mentorship and day-to-day guidance to network administration staff, building team capability on current and emerging platforms * Develop and maintain network documentation, standards, and diagrams, ensuring architecture decisions are captured and repeatable * Evaluate emerging network technologies and vendor products, and recommend investments aligned to organizational strategy and budget * Manage network-related change control activities, including change proposals, testing, and coordination with the Change Advisory Board * Collaborating with the Information Security team on network security policy, firewall rule management, and traffic flow analysis * Present architecture strategy, project status, and technology investment recommendations to IT leadership and other non-technical stakeholders * Participate in an on-call rotation and provide after-hours support for critical network incidents as needed ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch) - [Your Infrastructure Is Not a Playground: AI Agents for Infra Done Right](https://www.wearedevelopers.com/videos/2084-your-infrastructure-is-not-a-playground-ai-agents-for-infra-done-right) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) - [A Technical Introduction to Bitcoin's 2nd Layer- The Lightning Network](https://www.wearedevelopers.com/videos/15-a-technical-introduction-to-bitcoin-s-2nd-layer-the-lightning-network) - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)