Network Engineer

• Design, implement and maintain LAN, WAN, SD-WAN and wireless networks across sites, stations, data centers and cloud (Azure and AWS).
• Configure and troubleshoot routing and switching (BGP, OSPF, EIGRP, VLANs, STP).
• As part of a combined network and security team, manage firewalls, VPN, segmentation, NAC and zero-trust access, and feed device logs into our shared SIEM to support investigations.
• Support privileged access management, keeping admin access to network infrastructure controlled, logged and reviewed.
• Own core network services: DNS, DHCP, IPAM, load balancing and NTP.
• Support and troubleshoot point-of-sale systems, including payment terminals and their connections to processors.
• Work with the systems team on security camera infrastructure, including VLANs, PoE, bandwidth and recording connectivity.
• Monitor capacity and performance, plan upgrades and refresh cycles, and provide budget input.
• Automate configuration and compliance checks with Python, Ansible and infrastructure-as-code tools.
• Serve as an escalation point for incidents, reproducing issues in a lab and gathering your own evidence (packet captures, logs, monitoring data) to find root cause, including on the vendor or carrier side.
• Lead small to mid-size projects from requirements through cutover, coordinating vendors, carriers and internal teams.
• Maintain diagrams, standards, runbooks and change records, and write troubleshooting guides for help desk, station staff, vendors and engineers.
• Track licenses, support contracts and subscriptions (e.g., FortiCare, Cisco SmartNet, Meraki, Zscaler, carrier plans), flag renewals and right-size usage.
• Evaluate new vendors and products through requirements gathering, proof-of-concept testing and cost comparison, and recommend options to leadership.

Installations and field work

• Assist with or lead equipment installs at sites and stations, from firewalls, switches and access points to cellular and Starlink antennas.
• Plan each install, including site survey, dish mounting and line-of-sight, power, cabling and rack layout.
• Coordinate contractors, cabling vendors, carriers and station staff on scheduling and access.
• Test throughput, latency and failover before sign-off, document the as-built setup, and keep spares and inventory current.
• Lift equipment up to 50 lb and work at height on ladders and lifts.

• 4-6 years of hands-on network engineering in production environments, including designing or upgrading enterprise networks. This is not an entry-level role.
• Bachelor’s degree in Computer Science, Information Technology or a related field, or equivalent experience.
• Solid knowledge of TCP/IP, subnetting, routing protocols (BGP, OSPF) and Layer 2 switching.
• Working knowledge of Azure and AWS networking (VNets/VPCs, VPN gateways, peering and routing).
• Scripting or automation experience (Python, Ansible or similar).
• Experience with monitoring tools, especially open source (e.g., Zabbix, Prometheus and Grafana, Nagios/Icinga, Wireshark); PRTG or LogicMonitor a plus.
• Comfortable with the Linux command line and with the virtual machines (VMware, Hyper-V, Azure or AWS) that host monitoring tools and SASE connectors.
• Knowledge of SSO protocols (SAML, OIDC/OAuth, RADIUS) and identity providers such as Okta and Microsoft Entra ID, including integrating them with VPN, SASE and network device admin access.

Platform experience

• Fortinet: FortiGate administration, including HA, security policies, VPN and SD-WAN, managed through FortiManager/FortiAnalyzer. NSE 4 preferred.
• Cisco: IOS/IOS-XE CLI skills on Catalyst switching and routing. CCNA required; CCNP a plus.
• Meraki: Multi-site management in the Meraki Dashboard across MX, MS and MR, including Auto VPN and templates.
• SASE / Zero Trust: Zscaler (ZIA/ZPA) and Island Enterprise Browser private access, including deploying and maintaining their Linux-based app connectors.
• Satellite and cellular: Starlink and cellular carriers (Verizon, AT&T, T-Mobile), including LTE/5G routers (e.g., Cradlepoint/Ericsson, Digi, Peplink) as primary or failover WAN links.

Who you are

• Self-starter: Exceptional at working independently, often as the only network person on a problem, and you own it from start to finish.
• Team player and communicator: You get along with everyone from help desk to leadership, have a confident office presence, and explain technical issues clearly to any audience.
• Flexible and hands-on: You happily pitch in beyond your core responsibilities when the team needs it.
• Trust but verify: You confirm problems yourself and holding vendors accountable, firmly and professionally, until issues are resolved., * Cloud networking certification (AWS Advanced Networking Specialty or Azure Network Engineer Associate).
• Infrastructure-as-code and CI/CD for network changes (Terraform, Git).
• Enterprise wireless design and RF planning.
• Familiarity with compliance frameworks such as PCI DSS, SOC 2 or NIST.
• ITIL or formal change-management experience.