Network Engineer

Kforce has a client in Olathe, KS that is looking for a Network Engineer for a fully onsite, direct hire opportunity. Responsibilities:

• Design, configure, deploy, and maintain network infrastructure across multiple sites, including LAN, WAN, SD-WAN, and wireless environments, exercising independent judgment on topology, hardware selection, and configuration standards
• Administer and maintain Palo Alto next-generation firewalls, including security policy design, rule base management, threat prevention profiles, NAT configurations, and firmware lifecycle management across all sites
• Configure and manage Cisco routers and switches, including routing protocol configuration (BGP, OSPF, EIGRP), VLAN segmentation, STP, QoS, and access control, ensuring consistent and reliable connectivity across the enterprise
• Administer Cisco Meraki wireless infrastructure, including access point deployment, RF planning, SSID configuration, client policy enforcement, and ongoing performance monitoring and optimization across distributed sites
• Own circuit procurement, contract management, and vendor relationships for all WAN connectivity, including MPLS, broadband, dedicated fiber, and cellular backup circuits - managing SLAs, renewals, and escalations with carriers
• Maintain and optimize network uptime across all sites, proactively monitoring infrastructure health, identifying degradation trends, and independently determining and implementing corrective actions before failures impact operations
• Design, implement, and enforce network security controls, including firewall policy governance, network segmentation, intrusion prevention, VPN architecture (site-to-site and remote access), and zero-trust access principles
• Working with the Information Security team, support PCI
• DSS network compliance requirements, including scoped network segmentation design, firewall rule review, quarterly network scans, and documentation to support audit and assessment activities
• 5+ years of progressive, hands-on network engineering experience supporting multi-site enterprise environments, including demonstrated ownership of network infrastructure design and operational decisions
• Direct, hands-on experience administering Palo Alto Networks next-generation firewalls, including security policy management, Panorama (preferred), and threat prevention configuration
• Proven experience configuring and supporting Cisco routers and switches in a multi-site enterprise environment, including routing protocols (BGP, OSPF), VLANs, and access layer design
• Hands-on experience with Cisco Meraki wireless platform, including AP deployment, dashboard administration, and multi-site wireless management
• Experience with circuit contract ownership and carrier management, including WAN circuit procurement, SLA management, and vendor escalation
• Experience with DNS administration and Active Directory integration, including DHCP management and multi-site name resolution
• Solid understanding of network security principles, including firewall policy governance, network segmentation, VPN architecture, and defense-in-depth design
• Working knowledge of PCI DSS network requirements, including scoped segmentation, firewall rule review, and audit support
• Strong analytical and troubleshooting skills, with the ability to independently diagnose and resolve complex, multi-layer network issues across geographically distributed sites
• Excellent communication and customer-service skills, with the ability to translate technical network concepts for non-technical site stakeholders and to take clear ownership of issue resolution