Senior Network Engineer

The Senior Network Engineer is a hands-on technical leader responsible for designing, implementing, securing, and supporting CES’s enterprise network infrastructure across North America, India, Vietnam, and Japan. This position reports to the Senior Cloud and Network Security Architect.

The role serves as the primary owner of on-premises routing, switching, firewall, and network security platforms and supports their integration with CES’s cloud and hybrid environments. The successful candidate must be able to manage competing priorities, lead complex network projects, and maintain reliable day-to-day operations.

This position works directly with internal stakeholders and external clients to address connectivity requirements, resolve service-impacting issues, and communicate clearly with both technical and non-technical audiences.

This is an on-site position based at CES’s Philadelphia headquarters. A hybrid work arrangement may be considered in the future based on operational needs and demonstrated performance., Network Engineering

• Design, implement, upgrade, and maintain routing and switching infrastructure across CES locations.
• Manage a multi-site, multi-circuit WAN environment with appropriate redundancy, availability, and failover.
• Configure and support advanced routing protocols, including BGP, OSPF, and EIGRP.
• Establish and maintain network standards, configuration baselines, and change management procedures.
• Lead network projects from requirements and planning through implementation, validation, and post-implementation review.
• Evaluate and recommend network technologies, vendors, and platforms based on business, security, and growth requirements.

Network Security

• Manage Cisco ASA, Cisco Firepower/FMC, Palo Alto Networks, and other network security platforms.
• Administer Cisco ISE, including 802.1X, NAC, RADIUS/TACACS+, guest access, and endpoint profiling.
• Configure and maintain F5 BIG-IP load balancers and web application firewalls.
• Develop and maintain firewall rules, access control policies, and network segmentation strategies.
• Serve as the senior escalation point for firewall and network security incidents.

WAN and Cloud Connectivity

• Manage primary and failover circuits, carrier relationships, SLA performance, and connectivity issues.
• Design and maintain site-to-site, DMVPN, and remote-access VPN infrastructure.
• Implement QoS policies for business-critical traffic.
• Integrate on-premises networks with AWS, Azure, and other cloud environments using Direct Connect, ExpressRoute, Transit Gateway, and IPsec VPN technologies.
• Configure and support VPCs, VNets, security groups, routing tables, and network ACLs.
• Collaborate with Cloud and IS teams on secure and scalable hybrid network architecture.

Operations and Support

• Monitor network availability, performance, and capacity and proactively address potential issues.
• Provide Tier 3 incident support, root cause analysis, and permanent corrective actions.
• Maintain network diagrams, IP address records, runbooks, configuration documentation, and change history.
• Coordinate with internal teams and external clients regarding connectivity and service-impacting incidents.
• Manage multiple concurrent priorities and communicate status, risks, and recommendations to stakeholders.
• Participate in a rotating on-call schedule supporting 24x7 network operations.
• Mentor junior team members on networking technologies and operational practices.

• Bachelor’s degree in Information Technology, Computer Science, Network Engineering, or a related field preferred; equivalent professional experience will be considered.
• 7+ years of hands-on enterprise network engineering experience in a multi-site, multi-vendor environment.
• Experience supporting globally distributed networks across remote locations and hybrid on-premises and cloud infrastructure.
• Advanced experience administering Cisco ASA and Cisco Firepower/FMC, including policy management, NAT, IPS/IDS, and SSL inspection.
• Advanced experience with Cisco ISE, including 802.1X, NAC, RADIUS/TACACS+, endpoint profiling, and posture assessment.
• Hands-on experience with F5 BIG-IP, including LTM and ASM/WAF; AFM experience is strongly preferred.
• Advanced proficiency configuring and troubleshooting BGP, OSPF, and EIGRP in complex, multi-path environments.
• Strong knowledge of WAN architecture, multi-circuit connectivity, redundancy, failover, and fault-tolerant design.
• Hands-on experience integrating on-premises networks with AWS, Azure, or GCP, including hybrid routing, connectivity, and security.
• Experience supporting physical network equipment across multiple vendors. Experience with Palo Alto Networks or Fortinet is preferred.
• Ability to manage multiple projects and operational priorities in a fast-paced environment.
• Excellent written and verbal communication skills, including the ability to communicate with technical and non-technical audiences.
• Demonstrated client-facing experience coordinating solutions, explaining service impact, and managing high-pressure incidents

Preferred Experience

• SD-WAN platforms such as Cisco Viptela, Meraki, Palo Alto Prisma, or comparable technologies.
• Network automation and infrastructure-as-code tools such as Python, Ansible, or Terraform.
• Regulated or compliance-driven environments, including SOC 2 or NERC CIP.
• Enterprise monitoring and observability platforms such as SolarWinds, PRTG, or Kentik.
• Zero-trust network access or Secure Service Edge frameworks.

Preferred Certifications

• CCNP Enterprise or Security
• CCIE
• Cisco security or Firepower certification
• Palo Alto Networks PCNSE
• F5-CA or F5-CTS
• Cisco ISE certification
• Fortinet certification

Pulled from the full job description

• Tuition reimbursement
• Health insurance
• 401(k) matching
• Life insurance
• Disability insurance
• Profit sharing, CES offers a competitive salary commensurate with experience, plus a performance bonus, profit-sharing, a Medical Savings Account, comprehensive health insurance, disability and life insurance, 401(k) matching, and tuition reimbursement.

Beyond the package, here’s what you can expect at CES:

• Meaningful responsibility and the opportunity to make a real impact in dynamic energy markets.
• The chance to learn from and collaborate with experienced professionals across global teams.
• Ongoing opportunities to strengthen your technical, analytical, and leadership skills.
• A supportive culture that values initiative, accountability, and continuous professional growth.

Customized Energy Solutions (CES) is a global energy services and technology company that helps market participants operate, comply, and compete in deregulated electricity and natural gas markets. Founded in 1998 and headquartered in Philadelphia, CES works with utilities, independent power producers, energy suppliers, developers, asset owners, and investors across North America and globally.

CES delivers market intelligence, regulatory and market design support, asset and portfolio management, retail market operations, and energy technology solutions. Our teams track and interpret ISO/RTO rules and policy developments, support resource planning and market participation, manage operational and settlement processes, and develop proprietary software platforms-including CES BLUE, GOLD, RED, GRIDBOOST, and CoMETS-that help clients manage risk, optimize performance, and respond effectively to market change.

CES is committed to advancing transparent, efficient, and non-discriminatory energy markets while delivering practical, high-quality solutions marked by integrity, rigor, and long-term client value.

With headquarters in Philadelphia and offices across the U.S., Canada, Japan, India, and Vietnam, CES offers a collaborative, flexible, and globally connected work environment for professionals passionate about the future of energy.