Senior Network Engineer

The Senior Network Engineer designs, secures, operates, and improves the company’s enterprise network infrastructure across distributed offices, on-premises systems, and cloud environments. This hands-on role owns network architecture, availability, performance, security, documentation, and lifecycle management.

The position will lead the standardization and modernization of Fortinet, Cisco Meraki, Zscaler, and Microsoft Azure networking while serving as the senior escalation point for complex network incidents. Success requires strong technical ownership, effective cross-functional collaboration, and a focus on delivering secure, resilient, and consistent connectivity across the enterprise.

Essential Duties and Responsibilities Network Engineering and Administration

• Design, implement, and maintain enterprise LAN, WAN, WLAN, SD-WAN, VPN, Internet-edge, and cloud network services.

• Configure and optimize enterprise switching, including VLANs, trunks, Spanning Tree Protocol, link aggregation, port security, Quality of Service, and resilient uplinks.

• Administer Fortinet firewalls, including routing, NAT, security policies, VPNs, logging, high availability, and configuration standards.

• Design and support Cisco Meraki switching and wireless networks, including standardized SSIDs, RF settings, roaming, and WPA2/WPA3-Enterprise authentication.

• Implement and maintain Zscaler-based secure connectivity, network segmentation, identity-aware access policies, and zero-trust networking principles.

• Design resilient connectivity between company locations, on-premises infrastructure, Microsoft Azure, and other cloud services, including site-to-site VPNs and ISP failover.

Operations, Security, and Reliability

• Serve as the senior escalation point for complex network, firewall, wireless, VPN, ISP, DNS, DHCP, and cloud-connectivity incidents.

• Troubleshoot issues using packet captures, traffic analysis, logs, routing data, wireless metrics, and structured root-cause analysis.

• Deploy and maintain network monitoring, scanning, discovery, configuration-management, and performance-analysis capabilities.

• Plan and execute network upgrades, hardware refreshes, migrations, maintenance, and cutovers using documented testing and rollback procedures.

• Partner with Cybersecurity to remediate vulnerabilities, obsolete configurations, excessive access, unsupported firmware, and unnecessary firewall rules.

Documentation and Leadership

• Maintain network diagrams, enterprise topologies, IP address management, VLAN records, port maps, circuit inventories, firewall rules, VPN documentation, and configuration standards.

• Manage incidents, problems, and changes through Jira and Jira Service Management, and maintain technical standards and procedures in Confluence.

• Lead technical design reviews, coordinate vendors and carriers, mentor technical staff, and identify opportunities to improve resilience, standardization, and automation.

• Must qualify as a U.S. Person under applicable U.S. export-control laws and regulations.

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field, or an equivalent combination of education, certifications, and experience.

• At least 8 years of progressive enterprise network engineering experience, including at least 3 years in a senior, lead, or Tier 3 engineering role.

• Advanced knowledge of TCP/IP, IPv4 subnetting, routing, switching, VLANs, trunking, Spanning Tree Protocol, link aggregation, DNS, DHCP, NAT, VPNs, and network segmentation.

• Strong hands-on experience with Fortinet firewalls, Cisco Meraki switching and wireless infrastructure, enterprise Wi-Fi, RF troubleshooting, and 802.1X authentication.

• Experience implementing Azure hybrid connectivity, site-to-site VPNs, redundant ISP services, and Zscaler or a comparable SASE or zero-trust platform.

• Demonstrated ability to diagnose complex network issues, maintain accurate technical documentation, and support Windows, macOS, and Linux environments.

• Experience leading network projects and changes, managing critical incidents, and communicating technical risks and recommendations to technical and nontechnical stakeholders.

Desired Additional Qualifications

• Cisco CCNP, Cisco Meraki, Fortinet, Zscaler, or Microsoft Azure networking certification.

• Experience with advanced Azure networking, AWS networking, ExpressRoute, Virtual WAN, Transit Gateway, or Direct Connect.

• Experience supporting Microsoft GCC High, Microsoft Commercial, or environments governed by CMMC, NIST SP 800-171, or ITAR requirements.

• Familiarity with Active Directory, Microsoft Entra ID, RADIUS, Microsoft NPS, Cisco ISE, certificate-based authentication, and network access control.

• Experience automating network administration using Python, PowerShell, or APIs.

• Experience with FortiManager, FortiAnalyzer, SolarWinds, PRTG, LogicMonitor, NetBox, Infoblox, or comparable monitoring and IP address management platforms.