Expert Engineer, Secure LAN Infrastructure

Since 1869, we've connected people through food they love. We’re proud to be stewards of amazing brands that people trust. Our portfolio includes the iconic Campbell’s brand, as well as Cape Cod, Chunky, Goldfish, Kettle Brand, Lance, Late July, Pacific Foods, Pepperidge Farm, Prego, Pace, Rao’s Homemade, Snack Factory, Snyder’s of Hanover. Swanson, and V8. Here, you will make a difference every day. You will be supported to build a rewarding career with opportunities to grow, innovate and inspire. Make history with us. Why Campbell’s… Benefits begin on day one and include medical, dental, short and long-term disability, AD&D, and life insurance (for individual, families, and domestic partners). Employees are eligible for our matching 401(k) plan and can enroll on the first day of employment with immediate vesting. Campbell’s offers unlimited sick time along with paid time off and holiday pay. If in WHQ – free access to the fitness center. Access to on-site day care (operated by Bright Horizons) and company store. Giving back to the communities where our employees work and live is very important to Campbell’s. Our “Campbell’s Cares” program matches employee donations and/or volunteer activity up to $1,500 annually. Campbell’s has a variety of Employee Resource Groups (ERGs) to support employees. How you will make history here.. The Expert Engineer, Secure LAN, Infrastructure is responsible for providing hands-on technical leadership and execution across enterprise wired and wireless networks, firewall and network authentication platforms. This role ensures secure, resilient, and high-performing access for corporate offices, manufacturing sites, warehouses, and remote locations. Reporting to the Sr Manager, Network and Security Engineering, this role partners closely with Network Services delivery teams, Cybersecurity, Hybrid Cloud, Workplace Experience, and Manufacturing IT. This role will retain technical ownership, standards authority, and final escalation accountability for LAN, WiFi, Firewall and related authentication, while governing MSP-delivered operations, monitoring, and incident response to ensure consistent service quality. This is a remote role but must be able to work East Coast Hours ________________________________________ Key Responsibilities · Serve as the technical lead for enterprise Secure LAN and Wi-Fi platforms, including design, configuration, optimization, and lifecycle management. · Define and maintain wireless standards for coverage, capacity, performance, resiliency, and security across all locations. · Lead technical execution for wireless deployments, upgrades, and redesigns across corporate offices, manufacturing plants, warehouses, and specialized environments. · Provide technical leadership for network authentication and access platforms supporting wired and wireless connectivity, including 802.1X, certificate-based authentication, device authentication, and identity-integrated access models. · Define and maintain enterprise network access control standards, including authentication methods, authorization models, device profiling, guest access, and policy enforcement patterns. · Lead the design and operational governance of identity-driven access control models supporting secure user, device, guest, and operational network access. · Define and enforce firewall security standards, segmentation models, and traffic control patterns aligned with cybersecurity policies and risk requirements. · Partner with Cybersecurity and Identity teams to ensure authentication, segmentation, and enforcement services align with Zero Trust principles and enterprise security standards. · Support secure access models across enterprise, manufacturing, warehouse, and site-based network environments. · Provide technical leadership for resilient LAN and WAN designs supporting high availability, operational continuity, and scalable connectivity. · Govern MSP-delivered operations, monitoring, and incident response for in-scope services and technologies. · Act as the senior escalation point for complex or systemic access, connectivity, routing, switching, wireless, authentication, and security incidents. · Lead root-cause analysis and corrective action planning for major outages and recurring network incidents. · Participate in design reviews and infrastructure solutioning efforts across network, cybersecurity, cloud, and infrastructure initiatives. · Define and maintain engineering standards, configuration baselines, network design patterns, documentation, and runbooks. · Identify opportunities to improve reliability, resiliency, security posture, operational discipline, automation, and cost efficiency. ________________________________________ What you bring to the table... (Must have) Bachelor’s degree in Information Technology, Engineering, or related field, 8+ years of experience engineering enterprise Wi-Fi, authentication, LAN, WAN, or network connectivity platforms. Strong hands-on experience with enterprise LAN technologies, switching, wireless, and network access control. Strong hands-on experience designing and managing enterprise IPv4 routing across LAN and WAN environments. Deep understanding of BGP and OSPF routing protocols and enterprise-scale operations. Strong expertise in Layer 2 segmentation including VLANs, spanning tree, and resilient switching architectures. Experience with policy-based access control, including role-based access, device profiling, and segmentation. Experience integrating NAC with directory services, PKI, endpoint management, and security tooling. Hands-on experience with enterprise networking platforms from vendors such as Cisco, HPE Aruba, Juniper, Fortinet, or equivalent. Ability to operate in multi-vendor environments with depth in at least one leading platform. Experience supporting high-availability environments with strict maintenance and change control requirements. Experience supporting industrial or site-based environments with network segmentation and zoning. Understanding Purdue Model and industrial segmentation principles. Strong troubleshooting and incident resolution capabilities. Ability to lead technically without direct people management. Demonstrated ability to produce and maintain high-quality technical documentation, including architectural and engineering diagrams, design standards, process documentation, runbooks, configuration baselines, and revision-controlled standards documents that support operational consistency, knowledge transfer, and long-term maintainability. ________________________________________ Nice to have... (Preferred) Experience operating in MSP-delivered network models. Experience supporting hybrid cloud and site-to-site connectivity scenarios. Familiarity with Zero Trust networking and identity-integrated access controls. Experience supporting SD-WAN or modern enterprise connectivity architectures. Experience designing large-scale routing domains and hybrid network architectures. Experience with modern network fabric designs such as spine-leaf and VXLAN. Experience with industrial or OT network segmentation and security models. Familiarity with IEC 62443 or similar industrial security frameworks. Relevant networking, wireless, security, or cloud certifications. Deep hands-on expertise with firewall platforms and network segmentation models. Hands-on experience with enterprise NAC platforms supporting 802.1X, MAB, certificates, and identity-based access. Experience or strong familiarity with network automation and programmable infrastructure practices, including API-driven workflows, automation platforms, AIOps, agentic AI concepts, and Network as Code approaches used to reduce manual operations, improve repeatability, and enable more consistent network service delivery. Familiarity with the emerging use of AI-enabled tools in network engineering and operations, including use cases such as documentation assistance, troubleshooting support, operational analysis, knowledge management, and productivity enhancement through platforms such as Microsoft Copilot or similar enterprise AI tools. ______________________________________ Key Skills Enterprise wired and Wi-Fi engineering LAN/WAN architecture and design IPv4 routing (BGP, OSPF) Layer 2 switching and segmentation Network authentication and access control Identity-based segmentation Firewall engineering and policy management Industrial networking fundamentals Multi-vendor networking platforms MSP governance and escalation Network troubleshooting and root-cause analysis Network automation, AIOps, and AI-enabled operational workflows Technical documentation, architecture diagrams, engineering standards, and process governance _______________________________________ Compensation and Benefits: The target base salary range for this full-time, salaried position is between $153,900-$211,600 Individual base pay depends on work location and additional factors such as experience, job-related skills, and relevant education or training. Total pay may include other forms of compensation. In addition, we offer competitive health, dental, 401k and wellness benefits beginning on the first day of employment. Please ask your Talent Acquisition Partner for more information about our total rewards package. The Company is committed to providing equal opportunity for employees and qualified applicants in all aspects of the employment relationship, including consideration for employment, without regard to race, color, sex, sexual orientation, gender identity, national origin, citizenship, marital status, protected veteran status, disability, age, religion, or any other classification protected by law. We’re proud to be a purpose-driven company, connecting people through food they love. Are you our missing ingredient? Learn more about our company or apply today!