Principal Network Engineer

Senior Network EngineerThe Senior Network Engineer is responsible for the design, implementation, maintenance, and optimization of enterprise network infrastructure. This role provides advanced (Tier 3) technical support and leads the delivery of complex network solutions across LAN/WAN environments.Operating as a senior individual contributor, this role applies deep technical expertise to solve complex problems, improve system performance, and has an owner's mindset to the architecture, documentation, delivery, and continuous improvement of infrastructure initiatives. The role works independently within established standards and actively contributes to day-to-day activities and managed projects.The ideal candidate will have strong experience designing, implementing, and supporting enterprise network infrastructure, with expertise in Cisco routing and switching technologies, WatchGuard firewalls, AWS networking services, Infrastructure as Code, and utilizing Generative Developer tools. This role will be responsible for maintaining network reliability, security, and performance across both on-premises and cloud environments.Candidates who possess experience with certificate lifecycle management platforms, particularly Venafi, will be given additional consideration.Key ResponsibilitiesProvide Tier 3 support for enterprise LAN/WAN environments, including routers, switches, firewalls, and network security devicesDesign, implement, and maintain network infrastructure solutions aligned with established architectural standardsTroubleshoot complex network issues and drive timely resolution to ensure service stability and performanceExecute network changes, upgrades, and patching activities through formal change management processesOptimize network performance, reliability, and cost efficiency across infrastructure componentsContribute to the delivery of moderately to highly complex projects, including planning, implementation, and validationPartner with internal teams (e.g., security, infrastructure, application teams) to support integrated solutionsDesign and support AWS networking solutions, including:Amazon VPCsTransit GatewayDirect ConnectSite-to-Site VPNRoute Tables and Network ACLsSecurity GroupsLoad Balancing and Hybrid ConnectivityDocument network designs, configurations, procedures, and support models to ensure operational continuityProvide technical guidance and mentorship to junior team members and support knowledge sharing within the teamQualificationsRequired5+ years of experience in network engineering within enterprise environmentsCurrent AWS Certified Advanced Networking – Specialty certificationStrong hands-on experience with:Cisco routing and switching (IOS, Nexus, enterprise hardware platforms)Network protocols (e.g., BGP, MPLS, EIGRP)Administering and troubleshooting WatchGuard firewall solutions, VPNs, and network security technologiesAdvanced proficiency in Infrastructure as Code (IaC) using Terraform or AWS CloudFormation, paired with experience utilizing Generative AI developer tools (e.g., Amazon Q, Amazon Bedrock, or AI coding assistants) to accelerate code generation, automate network compliance validation, and scale CI/CD network deployment pipelinesDeep expertise designing and optimizing high-performance AWS cloud network architectures tailored for AI/ML workloads.Demonstrated ability to configure and scale data-transfer pipelines to Amazon S3 and compute clusters, managing high-bandwidth, ultra-low-latency traffic patterns.Knowledge of advanced networking protocols and mechanisms for AI data clusters (e.g., congestion control protocols, minimizing packet loss, and maximizing throughput) to support seamless Large Language Model (LLM) training and inference deploymentsExperience supporting and maintaining large-scale LAN/WAN environmentsStrong troubleshooting, diagnostic, and problem-solving capabilitiesKnowledge of Zero Trust and modern network security architecturesExperience with change management and operational support processesStrong written and verbal communication skillsBachelor's degree or equivalent experiencePreferredCisco or security certifications (e.g., CCNP, CCIE, CCSE)Experience with network security tools (IDS/IPS, SIEM, proxies, etc.)Experience with Venafi certificate lifecycle management and PKI administration.Exposure to virtualization environments (e.g., VMware)Salary Range: €28,700 - €37,000At our company, we are committed to pay transparency and equity. Your actual base salary will be determined based on your unique skills, qualifications, experience, and education. In addition to your base salary, this position is eligible for a discretionary annual incentive award based on your individual performance as well as the overall performance of the business. We are dedicated to creating a work environment where everyone is rewarded for their contributions.Not ready to apply yet but want to stay in touch? Join our talent community to stay connected until the time is right for you!We are committed to fostering an inclusive environment where all employees feel they belong, are supported and empowered to thrive. We are dedicated to building teams with varied experiences, backgrounds, perspectives and ideas that benefit our colleagues, clients, and the communities where we operate. We encourage applications from qualified individuals from all backgrounds.Life is brighter when you work at Sun LifeAt Sun Life, we prioritize your well-being with comprehensive benefits, including generous vacation and sick time, market-leading paid family, parental and adoption leave, medical coverage, company paid life and AD&D insurance, disability programs and a partially paid sabbatical program. Plan for your future with our 401(k) employer match, stock purchase options and an employer-funded retirement account. Enjoy a flexible, inclusive and collaborative work environment that supports career growth. We're proud to be recognized in our communities as a top employer. Proudly Great Place to Work® Certified in Canada and the U.S., we've also been recognized as a "Top 10" employer by the Boston Globe's "Top Places to Work" for two years in a row. Visit our website to learn more about our benefits and recognition within our communities.We will make reasonable accommodation to the known physical or mental limitations of otherwise-qualified individuals with disabilities or special disabled veterans, unless the accommodation would impose an undue hardship on the operation of our business. Please email View email address on click.appcast.io to request an accommodation.For applicants residing in California, please read our employee California Privacy Policy and Notice.We do not require or administer lie detector tests as a condition of employment or continued employment.Sun Life will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws, including applicable fair chance ordinances.All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.Job Category: IT - Technology ServicesPosting End Date: 29/07/2026