Network Engineer

The Network Engineer is the single owner of network and physical infrastructure across our corporate sites, hosted environments, and MSP client networks. This role exists to consolidate network responsibilities that are currently spread across several teams, and to drive planned network projects to completion alongside day-to-day operational demand. This role reports to the Director of IT and coordinates with the IT Engineering Team Lead on shared standards and escalations., * Own firewall management across corporate and MSP environments, including policy administration, site-to-site VPN, and traffic filtering.

• Own switching, VLAN design, and network patching.
• Own DNS, DHCP, and NPS services.
• Administer network platforms including Palo Alto, LibreNMS, UniFi Network, and UniFi Protect.
• Monitor network health and capacity, and respond to network incidents.
• Serve as the escalation point for network troubleshooting from IT Engineering and IT Services.
• Lead the network segmentation program, including migration of firewalls, switches, access points, video infrastructure, virtualization hosts, and backup appliances to a dedicated management network.
• Design and review network architecture for MSP client environments.
• Evaluate, test, and approve new network hardware.
• Maintain network documentation including topology, addressing, and configuration standards.
• Administer Datto BCDR and Datto SaaS backup platforms.
• Administer physical security and access control systems, including Brivo Access, TTLock, and SimpliSafe.
• Manage DNS registrar and certificate administration for network services, and support email authentication posture.
• Renew and deploy certificates on network devices.

Network Architecture/Engineering, Network Architecture/Engineering, Information Technology & Information Systems, Team Lead/Manager, Firewalls, Policy Development, VPN (Virtual Private Network), Software Patches, VLAN (Virtual Local Area Network), Network Design, * 5 years of hands-on network engineering experience.

• Hands-on experience with Palo Alto or comparable next-generation firewalls, including policy and VPN configuration.
• Strong working knowledge of enterprise switching, VLANs, routing, and network monitoring.
• Experience supporting multi-site environments; managed services or multi-tenant experience preferred., * Able to document and communicate network design decisions to both technical and non-technical audiences., * Certifications such as PCNSA, PCNSE, CCNA, CCNP, or Network+ preferred.
• A Bachelor’s Degree in Computer Science or related field preferred (or relevant experience).