Network Engineer

Under the guidance of the Director, Information Technology the Network Engineer is responsible for the design, implementation, and ongoing support of the organization's network and connectivity services, including LAN/WAN, wireless, internet connectivity, firewalls, VPN/remote access, and core network services such as DNS and DHCP. The Network Engineer monitors performance and availability, troubleshoots complex connectivity and infrastructure issues, documents standards and configurations, and partners with vendors and internal teams to support strategic goals and initiatives., * Design, implement, and maintain enterprise network infrastructure, including LAN/WAN, wireless, and remote access connectivity.

• Install, configure, and support network equipment and services including switches, routers, firewalls, and wireless access points.
• Configure and maintain routing, switching, network segmentation (VLANs), and Quality of Service (QoS) to optimize performance and reliability.
• Implement and maintain secure remote access and site-to-site connectivity (VPN), including authentication integration where required.
• Administer and troubleshoot core network services including Domain Name System (DNS), Dynamic Host Configuration Protocol (DHCP), and IP address management.
• Monitor network performance and availability using appropriate tools; analyze logs/metrics, respond to alerts, and perform root cause analysis.
• Troubleshoot and resolve network incidents and outages, including packet loss, latency, wireless coverage issues, and service-provider connectivity problems.
• Respond to network emergencies including outages, degraded performance, and security events; triage, communicate status, and drive resolution.
• Develop and maintain network architecture, standards, and configuration baselines, including diagrams and interface/service documentation.
• Research, recommend, and implement sustainable network hardware, software, and service-provider solutions.
• Manage network-related projects from inception to completion, including upgrades, migrations, new site connectivity, and service cutovers.
• Plan and execute network maintenance, changes, and upgrades following change control practices; perform post-change validation.
• Partner with the Cloud Engineer, architect, implement, and maintain on-premises server and virtualization platforms (e.g., VMware/Hyper-V) to meet performance, availability, and security requirements.
• Monitor and optimize server/virtualization performance and capacity (compute, memory, storage, and network), and coordinate with storage/platform owners on issues impacting availability.
• Support lifecycle management for server operating systems and hosted services, including provisioning, hardening, patching coordination, performance tuning, and troubleshooting.
• Contribute to backup, recovery, and disaster recovery readiness for server/virtual environments by validating jobs, performing recovery tests, and maintaining runbooks in partnership with the Cloud Engineer.
• Coordinate with internet service providers (ISPs) and other vendors to diagnose issues, manage circuits, and schedule installs or repairs.
• Support wireless infrastructure including SSID configuration, guest access, and segmentation to align with security requirements.
• Implement and manage network security controls including firewalls, rule sets, segmentation, and secure management access.
• Conduct security testing and monitoring.
• Develop Automations as needed with PowerShell, Python, or Power Automate.
• Maintain network documentation of configurations, diagrams, circuits, and procedures, and ensure asset records are accurate and current.
• Maintain documentation of processes, assets, and procedures developing flowcharts, layouts, diagrams, etc.
• Apply DIA values to interactions to support a culture of belonging among internal and external stakeholders.\
• Perform other duties as assigned.

Bachelor's degree in information systems or technology, computer science, or related field required. Seven (7) years of experience in network engineering/administration or a similar position with demonstrated growth in responsibilities supporting enterprise networks required. Relevant certifications (examples: Cisco CCNA/CCNP, CompTIA Network+, Microsoft Azure networking) preferred. Additional years of experience may be substituted for the degree requirement., * Demonstrated collaboration skills to work across departments and divisions internally and with diverse stakeholders externally.

• Must possess a demonstrated understanding of ethical business conduct and professional practices including maintenance and protection of confidential and sensitive information.
• Ability to identify challenges and opportunities, engage others in their resolution, and recommend appropriate course of action.
• Demonstrated organizational skills to plan, manage, prioritize, and complete multiple on-going projects to meet deadlines and goals.
• Ability to provide information, ideas, and instructions clearly, effectively, and professionally through talking or writing.
• Demonstrated ability to provide strong customer service.
• Demonstrated ability to share complex information, ideas, and instructions clearly, effectively, and professionally to diverse audiences through talking or writing.
• Demonstrated expert-level networking fundamentals and troubleshooting skills (TCP/IP, routing, switching, DNS, DHCP).
• Demonstrated experience with cloud networking concepts and services (e.g., Azure virtual networking, VPN/express connectivity as applicable).
• Expert-level understanding of server and virtualization concepts, including VM sizing, high availability, clustering, snapshots, and host/storage performance considerations.
• Hands-on experience administering Windows Server and/or Linux in virtualized environments, and working knowledge of virtualization platforms (e.g., VMware vSphere and/or Microsoft Hyper-V).
• Working knowledge of enterprise backup/recovery, disaster recovery planning, and storage concepts (e.g., SAN/NAS, replication) as they relate to virtualized workloads.
• Demonstrated networking proficiency (protocols, methods, design).
• Experience configuring and supporting firewalls and secure network access (VPN, segmentation, rule management).
• Working knowledge of security best-practices.
• Working knowledge of backup concepts, facilitation, and products, e.g., Veeam.
• Experience with containerization or Infrastructure as Code (IaC).
• Experience with network monitoring and management tools and/or wireless management platforms.
• Knowledge of Application Programming Interface (API) and integration familiarity or practice preferred.
• Proficiency with shell usage across Linux, MacOS, or using PowerShell preferred.
• Proficiency creating and maintaining network documentation (diagrams, runbooks, standards) and participating in change control processes.
• Must have proficiency in the use of remote work technology such as scheduling with, connecting to, and using digital collaboration platforms such as Microsoft Teams.
• Must be able to establish and maintain professional, productive, and courteous interactions that promote positive teamwork. This encompasses going beyond giving and receiving instructions and includes but is not limited to (a) performing work activities requiring interacting or speaking with others; and (b) responding appropriately to constructive feedback or suggestions for improvement from a supervisor.

PHYSICAL DEMANDS

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Upon receiving notice, reasonable accommodation may be made, if possible, to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee must be able to bend, reach, balance, and stoop for prolonged periods and navigate tight spaces, and perform repetitive motions. Must be able to lift/push/pull/ 50lbs. The employee is regularly required to communicate and exchange accurate information using various methods including in-person, telephone, and email.

This job description describes the general nature of the duties and requirements of this job. It is not intended to be an exhaustive list or to limit the supervisor's ability to modify work assignments as appropriate.