Senior Network Engineer

Senior Network EngineerNew York, New YorkAt Wilson Elser, we are redefining what it means to work at a national law firm. With more than 1,400 attorneys across 46 offices nationwide, we are recognized among the top 100 law firms by The American Lawyer and ranked #36 in the National Law Journal's survey of the nation's largest law firms.Our continued success is built on a culture of collaboration, innovation, client service, and mutual respect. We are committed to fostering an environment where employees are empowered to grow their careers, contribute meaningfully, and thrive professionally.The PositionWe're looking for a Senior Network Engineer to own and evolve our enterprise network across multi-site and cloud environments. You'll be a key technical voice shaping infrastructure strategy, driving security posture through zero-trust principles, and ensuring high availability for business-critical systems — all while working remotely on a collaborative, senior-level team.Key ResponsibilitiesDesign & ArchitectureArchitect scalable, resilient network solutions including routing/switching, SD-WAN, firewalls, VPN, QoS, and zero-trust segmentation.Define requirements, evaluate technologies, and lead infrastructure changes from design through implementation.Develop and maintain business continuity and disaster recovery plans for all network components.Operations & MaintenancePerform proactive maintenance — patching, upgrades, tuning, and health monitoring across the networking estate.Manage vulnerability findings and vendor security advisories for network equipment and systems.Maintain accurate network documentation, configuration baselines, and topology diagrams.Own and resolve network-related incidents and service requests, driving issues to resolution.Collaboration & StrategyPartner with security, infrastructure, and application teams to support firm-wide initiatives.Evaluate emerging technologies and translate their impact into actionable recommendations.Serve as a technical mentor and backup resource across the Network Engineering team.Communicate clearly with technical and non-technical stakeholders at all levels.Qualifications10+ years of hands-on network engineering experience across multi-site enterprise environmentsBachelor's degree in Computer Science, Information Technology, or a related field — or equivalent professional experience.Palo Alto Firewalls - Production deployment, policy management, and troubleshooting of Palo Alto NGFW (Panorama experience a strong plus).Cisco ACI - Hands-on experience with Nexus 9300/9000 series in ACI mode — fabric design, EPG/contract configuration, and troubleshooting.Proven ability to architect, implement, and troubleshoot complex, multi-vendor network infrastructure.Strong documentation habits — you leave networks better documented than you found them.Ability to translate ambiguous business requirements into clear, implementable technical designs.Excellent communication skills — comfortable presenting to both engineers and executives.Strong project management instincts with the ability to juggle multiple workstreams independently.A collaborative, team-first mentality balanced with the ability to drive work autonomously.Deep expertise in enterprise routing protocols (OSPF, BGP) and switching (VLANs, port channels, spanning tree, QoS) across multi-site environments.Cisco certification at the professional or expert level (CCNP, CCDP, or CCIE) strongly preferred.Experience in professional services, financial services, or legal industry environments.Familiarity with network automation tooling (Ansible, Python/Netmiko, Terraform for network infra).Experience with public cloud networking (AWS, Azure) and hybrid connectivity patterns.Exposure to Panorama for centralized Palo Alto management at scale.SD-WAN (Silver Peak / HPE Aruba EdgeConnect) — deployment, policy, and optimizationDMVPN, IPSec VPN, and secure remote access architecturesLoad balancing (Citrix NetScaler / ADC) — configuration, SSL offload, and health monitoringWireless networking via Cisco Meraki — deployment, RF planning, and troubleshootingNetwork tapping and packet capture solutions for visibility and forensicsZscaler (ZIA/ZPA) — implementation, policy configuration, and troubleshootingACL development and firewall policy lifecycle managementZero-trust network segmentation principles and implementationWAF configuration and proxy infrastructureCisco Call Manager (CUCM) and Unity Connection — administration and troubleshootingNetwork monitoring and management platforms (SolarWinds, PRTG, or equivalent)Wilson Elser offers a competitive salary and benefits package designed to support our attorneys both professionally and personally. A variety of factors are considered in making compensation decisions, including but not limited to experience, education, licensure and/or certifications, geographic location, market demands, other business and organizational needs, and other factors permitted by law. Final salary wages offered may be outside of this range based on other reasons and individual circumstances. This position is considered full-time and therefore qualifies for benefits including 401(k) retirement savings plan, medical, dental, vision, disability, and life insurance. Details of participation in these benefit plans will be provided if an employee receives an offer of employment.Salary Range:$135,000 - $150,000 USDWhy Should You Apply?Benefits: Outstanding benefits package, including 401k match and generous PTO planCareer Growth: Ample opportunities for professional development and advancementEmployee Perks: Access to corporate discount plans and other benefits