Network Engineer - II

Mid-level network specialist owning firewall administration, network projects, and escalated network incidents across RCS contract clients. This is a field-based role - the Network Engineer Level 2 works independently at client sites the majority of the week, serves as the escalation point for Network Engineer Level 1, and executes changes affecting client security posture under Senior Engineer oversight., Network (Primary):

• Administer client firewalls (Fortinet/Sophos): policy design, IPS/IDS tuning, SSL/IPSec VPN configuration, and content filtering
• Design and implement VLAN segmentation, switching changes, and wireless deployments per approved change requests
• Lead escalated network incident response on-site and remotely - isolate root cause, restore service, and document root-cause analysis in the ticketing system
• Respond to emergency deployments to client sites for outages and urgent incidents as dispatched
• Plan and execute firmware/OS upgrade cycles for client network equipment, including rollback plans and maintenance-window scheduling
• Review client firewall rule-sets for least-privilege compliance; flag risks affecting regulated clients (HIPAA, PCI DSS) to Senior Engineers and Client Technical Managers
• Perform on-site installations and replacements of firewalls, switches, and access points
• Serve as technical escalation point for Network Engineer Level 1; review escalations and provide direction
• Maintain and improve network documentation: topology diagrams, IP schemas, configuration backups, and change records

Office Days (Secondary):

1. Support the service desk queue with network-related tickets when in the office and available
2. Document all work (field and desk) in the ticketing system same-day, with client sign-off where applicable

Travel, and Mileage

• Mileage reimbursement: RCS reimburses personal vehicle use at the current IRS standard business mileage rate for travel from the office to client sites
• Travel between the office and client sites (or between client sites) during the workday is paid time and fully reimbursed

Required:

• 3-5 years networking experience; MSP or multi-client environment preferred
• Hands-on firewall administration experience (Fortinet and/or Sophos)
• Solid command of routing, switching, VLANs, NAT, VPN (SSL/IPSec), and wireless fundamentals
• Strong written and verbal communication; able to work independently and represent RCS professionally at client sites daily
• CompTIA Network+ - required at time of hire (or already attained upon internal promotion)
• Valid California driver’s license and reliable personal vehicle with insurance
• Successful completion of state and national background check (condition of employment)

Preferred - vendor certifications a plus:

• Firewall certification a plus
• CompTIA Security+ a plus
• Familiarity with a PSA/ticketing platform and RMM tooling

Physical Requirements

• Ability to lift up to 50 pounds (network equipment, racks, spools)
• Install and cable equipment in racks, ceilings, wiring closets, and confined spaces
• Prolonged periods of computer use
• Daily travel to client sites (reliable transportation required)

• Monday-Friday, 8:00 AM-5:00 PM; field-based at client sites most days, with 1-2 office days per week
• Weekend NOC rotation approximately every 6-8 weekends, per RCS on-call policy
• Scheduled after-hours shifts for maintenance windows (firmware upgrades, cutovers, migrations), compensated per non-exempt pay policy
• Emergency deployment to client sites when needed, including outside standard hours, compensated per non-exempt pay policy