Network Engineer II

Job Description

Job Description

POSITION OVERVIEW

The Network Engineer is responsible for the secure, reliable, and resilient operation of the Bank’s network infrastructure across headquarters, branches, data centers, disaster recovery locations, and cloud environments. This position designs, implements, monitors, and troubleshoots LAN, WAN, VPN, and SD-WAN services, with primary responsibility for the Bank’s network environment. The Network Engineer partners with cybersecurity, IT Operations, business stakeholders, carriers, vendors, and managed service providers (MSPs) while retaining technical ownership, change control, documentation, and regulatory accountability.

POSITION RESPONSIBILITIES

• Design, configure, implement, monitor, and support the Bank’s network environment, including LAN, WAN, VPN, SD-WAN, internet, data center networks, firewalls, switches, and other network-related devices and applications.
• Configure, maintain, and troubleshoot the Bank’s network infrastructure, including firewalls, routing, switching, VLANs, ACLs, QoS, NAT, VPN, high availability, security policies, and related network connectivity.
• Maintain secure network segmentation for users, servers, banking systems, voice, and network management traffic.
• Monitor and troubleshoot network availability, performance, security events, and configuration issues; respond to incidents and outages, restore services, and coordinate corrective actions as needed.
• Plan and execute network changes in accordance with the Bank’s change management requirements, including appropriate testing, approval, implementation, validation, and rollback procedures.
• Coordinate network vulnerability remediation, secure configuration baselines, patching, firmware upgrades, certificate renewals, and equipment end-of-life replacement.
• Work closely with the Bank’s MSPs to coordinate network support, projects, escalations, changes, troubleshooting, and service performance.
• Coordinate network vulnerability remediation, firmware upgrades, secure configuration standards, certificate renewals, and equipment lifecycle management.
• Collaborate with Information Security, IT Operations, Application Support, and project leads to deliver secure connectivity for banking applications, third-party integrations, cloud services, and business initiatives.
• Maintain documentation for the Bank’s network environment, including network diagrams, configurations, and circuit information, and provide supporting documentation for audits, risk assessments, regulatory examinations, and disaster recovery exercises as needed.
• Test network resilience, high availability, failover, backup connectivity, and disaster recovery capabilities; document results and remediate identified gaps.
• Provide Tier 1 and Tier 2 network-related support, technical guidance, and knowledge transfer to IT teammates; participate in after-hours support and scheduled maintenance as needed.
• Perform other duties and projects assigned by management and/or Head of IT.
• Comply fully with all Bank policies and procedures and applicable regulatory requirements. Must complete all required training.

SKILLS / QUALIFICATIONS

• Required: Hands-on production experience with Fortinet and Cisco network devices and security devices, including but not limited to FortiGate firewalls.
• Required: Demonstrated experience designing, implementing, operating, and troubleshooting Fortinet Secure SD-WAN in a multi-site environment.
• Experience collaborating with an MSP or managed network/security provider, including ticket ownership, escalations, change review, SLA management, and deliverable validation.
• Strong knowledge of enterprise routing, switching, wireless, WAN, VPN, TCP/IP, DNS, DHCP, VLANs, ACLs, NAT, QoS, BGP, OSPF, and IPsec.
• Strong network-security knowledge, including segmentation, least privilege, firewalls, IDS/IPS, secure remote access, MFA integration, certificate management, and vulnerability remediation.
• Experience with network monitoring, packet capture, flow analysis, syslog, SNMP, FortiAnalyzer, or comparable observability.
• Working knowledge of Cloud solutions, hybrid connectivity, and secure third-party connections.
• Experience with incident, problem, change, configuration, capacity, lifecycle, and vendor management processes in a controlled production environment.
• Ability to produce clear network diagrams, implementation plans, test plans, rollback plans, root-cause analyses, procedures, and audit evidence.
• Strong analytical, troubleshooting, prioritization, and project-execution skills with careful attention to security and operational risk.
• Strong communication and collaboration skills, including the ability to work effectively with business stakeholders, auditors, regulators, vendors, carriers, and MSP personnel.
• Ability to work independently with minimal supervision and to make sound decisions during high-impact incidents.
• Ability to work outside normal business hours, participate in any weekend support, and travel to the Bank’s branches, data centers, and disaster recovery locations as necessary.

EDUCATION / EXPERIENCE

• Bachelor’s degree in computer science, information technology, engineering, or a related field; equivalent combination of education, certifications, and relevant experience may be considered.
• 4+ years of enterprise network engineering experience supporting multi-site production environments; banking or other regulated financial-services experience is preferred.
• 3+ years of recent hands-on experience administering Fortinet/FortiGate and Cisco technologies, including firewall policy, VPN, logging, high availability, upgrades, and troubleshooting.
• Hands-on experience with Fortinet Secure SD-WAN design, deployment, migration, and ongoing operations is required.
• 2+ years of experience working with an MSP or managed network/security services provider is required.
• Fortinet NSE 3 or higher certification, CCNA, CCNP, or comparable network/security certifications are preferred.

We are an Equal Opportunity Employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, ancestry, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, age, marital status, veteran status, disability, medical condition, genetic information, protective hairstyles, reproductive health decision-making, lawful off-duty cannabis use, or any other characteristic protected by federal, state, or local laws.

We comply with all applicable employment laws, including the California Fair Employment and Housing Act. If you require a reasonable accommodation during the application or interview process, please contact us.