> Markdown version of [/jobs/ext/2653874-it-network-engineer](https://www.wearedevelopers.com/jobs/ext/2653874-it-network-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Network Engineer - **Company:** Good, Inc. - **Location:** Portland, OR, United States - **Experience:** Experienced - **Salary:** $115,000.0 - $130,000.0 - **Contract:** Permanent contract - **Skills:** IEEE 802.1X, Amazon Web Services, Systems Engineering, Virtual Private Networks (VPN), Python (Programming Language), Network Security, Network Configuration and Change Management, Routing, Network Segmentation, PCI Data Security Standards, Azure Active Directory, Ansible, Zero Trust Network Access, Virtual Local Area Networks, Wide Area Networks, Data Logging, Identity Services Engine, Enterprise Software Applications, Network Access Control, Computer Network Operations, Cloud Platform System, HybridCloud, Firewalls (Computer Science), Information Technology, Fortinet, 3-tier Architectures, Cisco - **Published:** August 10, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=ca37e1a738c02bbe ## About the Role * Enterprise networking depth - Hands-on experience configuring and troubleshooting firewalls, routing, switching, and VPN across a complex multi-site environment. Fortinet (FortiGate, FortiManager) is strongly preferred; equivalent depth in Palo Alto, Cisco, Check Point, or similar enterprise platforms will be considered. * 3+ years of multi-site network operations - Supporting routing, switching, and firewall policy across a distributed footprint of multiple locations. * Network security fundamentals - Firewall policy design, segmentation, and least-privilege access. PCI-DSS experience in a retail environment is a plus. * Zero Trust / NAC exposure - Familiarity with 802.1X and Network Access Control concepts. Hands-on experience with FortiNAC, Cisco ISE, Aruba ClearPass, or any NAC platform is a meaningful differentiator. * Hybrid cloud connectivity - Experience supporting secure connectivity between physical infrastructure and cloud environments, AWS preferred. Preferred * Fortinet specifically - FortiGate, FortiManager, FortiNAC, or FortiAnalyzer operational experience. * Microsoft Entra ID - Working familiarity with Entra ID, conditional access, and hybrid identity as they intersect with network authentication. * AWS networking - VPCs, Transit Gateways, VPN connectivity, and routing in an AWS environment connected to physical infrastructure. * Certifications - Fortinet FCP or FCA · CCNP or equivalent · AWS networking or SysOps · Microsoft identity certifications. * Automation - Python, Ansible, or similar for network configuration and compliance tasks. * Retail / PCI background - Multi-site retail or grocery environment experience. ## Description Good Food Holdings is the parent company behind five of the West Coast's most beloved grocery brands - Bristol Farms, Lazy Acres, Metropolitan Market, New Seasons Market, and New Leaf Community Markets - across 50+ locations in WA, OR, and CA. New Seasons and New Leaf are Certified B Corporations that give 10% of after-tax profits to local non-profits. The network you help run here keeps community grocers serving real neighborhoods up and down the coast. We're hiring an IT Network Engineer to work alongside our Senior Network Engineer and Systems Engineer on a lean infrastructure team. This is a hands-on individual contributor role - roughly 70% project engineering and 30% operations support. Networking is the core of the job, but you'll also get meaningful exposure to hybrid identity (Microsoft Entra ID), cloud connectivity (AWS), and enterprise systems work as part of a collaborative team that doesn't operate in silos. On the project side, you'll be a key executor on our most consequential network initiatives: the enterprise FortiNAC rollout across all sites, a shift toward a Zero Trust network model built on 802.1X and micro-segmentation, and consolidating our multi-banner network environments into a centralized FortiManager-orchestrated architecture. Why You'll Want This Role * Hands-on project work from day one - A structured ramp gets you driving real network engineering projects within six months, not grinding support tickets indefinitely. * Experienced team to grow with - You'll work directly alongside a Senior Network Engineer - someone who has already designed what you're helping to build and is invested in your development. * Genuine breadth - Networking is your home base, but you'll also contribute to hybrid identity and cloud connectivity work - making you a more complete engineer over time. * Work that matters - New Seasons and New Leaf give 10% of profits to local non-profits. Your work helps keep those stores running for the communities they serve. * We invest in your growth - Training and certifications funded case by case, including Fortinet professional credentials. * A team that has your back - Lean and collaborative, shared on-call that's scheduled - not dumped on one person. What You'll Do Network Engineering (70%) * FortiNAC Rollout - Work alongside the Senior Network Engineer to deploy FortiNAC across all 50+ locations - device profiling, posture assessment, and 802.1X policy enforcement. * Zero Trust Implementation - Help build out identity-based 802.1X authentication, dynamic VLAN steering, and micro-segmentation across corporate assets, retail IoT, and store hardware. * Network Consolidation - Audit, migrate, and standardize our distributed multi-banner environments into a centralized FortiManager-orchestrated architecture. * Hybrid Cloud Connectivity - Maintain secure network pathways - VPN tunnels, SD-WAN, Transit Gateways - connecting 50+ physical locations to our AWS environment. * Firewall & Policy Management - Support FortiGate policy management, rule-set hygiene, and change control. Maintain FortiAnalyzer for centralized logging and compliance visibility. * Cross-Team Contribution - Pitch in on hybrid identity and Entra ID-adjacent work alongside the Systems Engineer when the team needs an extra set of skilled hands. Network Operations (30%) * On-Call & After-Hours Maintenance - Participate in a shared on-call rotation with overnight and weekend maintenance windows to protect store uptime. * Tier 3 Escalation - Senior escalation point for complex routing, switching, firewall, VPN, and connectivity issues across the retail and corporate estate. * Monitoring & Incident Response - Maintain network visibility through FortiAnalyzer and monitoring tooling. Own network incident response from detection through resolution. ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) - [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch) - [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform) - [Embracing the Hybrid Cloud: Unlocking Success with Ansible](https://www.wearedevelopers.com/videos/932-embracing-the-hybrid-cloud-unlocking-success-with-ansible) - [Your Infrastructure Is Not a Playground: AI Agents for Infra Done Right](https://www.wearedevelopers.com/videos/2084-your-infrastructure-is-not-a-playground-ai-agents-for-infra-done-right) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)