Network Engineer

Network Engineer II

The District Attorney IT Program (DAIT) is recruiting a Network Engineer II to play a key role in the modernization, security, and support of DAIT's statewide network infrastructure. This is an opportunity to design, implement, secure, and maintain enterprise networking solutions that support District Attorney offices throughout Wisconsin. This position is primarily remote but requires onsite work in the State. Candidates must reside in Wisconsin and possess a valid driver's license.

Position Summary: The Network Engineer II serves as a senior technical resource responsible for the design, implementation, operation, security, and improvement of DAIT's network infrastructure. This position works across physical, virtual, and cloud networking technologies to ensure reliable, scalable, and secure connectivity to the District Attorney case management system (PROTECT) and its related services. The successful candidate will collaborate closely with teams responsible for infrastructure, security, systems administration, application development, and vendors to update and enhance network services, improve performance, automate processes, and maintain compliance with applicable security standards. Responsibilities include enterprise routing and switching, firewalls, VPN technologies, cloud networking, network monitoring, automation, documentation, troubleshooting, and participating in infrastructure modernization initiatives.

Required Qualifications:

• 11+ years of progressively responsible experience designing, implementing, securing, and supporting enterprise network infrastructure.
• Experience designing, deploying, securing, supporting, and monitoring on-premises and cloud-based networks.
• Strong experience with LAN/WAN technologies, including routing, switching, VLANs, QoS, NAT, static and dynamic routing, and VPNs.
• Experience configuring and supporting routers, switches, firewalls, VPN concentrators, and secure remote access solutions.
• Strong understanding of TCP/IP, DNS, DHCP, IP addressing, ACLs, routing protocols, network authentication, and data encryption.
• Experience monitoring network health, latency, throughput, capacity, and availability while analyzing trends to improve reliability and performance.
• Strong troubleshooting and root cause analysis skills involving complex network and infrastructure issues.
• Experience documenting enterprise network architecture, standards, configurations, and operational procedures.
• Experience working in environments that require regulatory compliance.
• Experience with vulnerability management, remediation, and network assessments.
• Experience collaborating with cross-functional technical teams using Agile or similar project methodologies.
• Excellent written, verbal, and customer service skills.

Preferred Qualifications:

• Experience with networking in cloud and hybrid infrastructures.
• Experience with role-based and policy-based access controls.
• Experience with network automation using scripting technologies.
• Experience planning and executing multi-site infrastructure upgrades.
• Experience developing Statements of Work (SOWs), project scopes, and collaborating with vendors.
• Experience presenting technical solutions to both technical and non-technical audiences.

Key Responsibilities:

• Design and Planning:
• Design, implement, maintain, and secure enterprise LAN, WAN, VPN, firewall, and cloud networks.
• Collaborate with infrastructure, systems, security, and application development teams to deliver highly available, secure, and scalable network services.
• Create and maintain network diagrams, security configurations, and operational documentation.
• Coordinate with vendors and internal stakeholders to develop projects, their scopes, timelines, and management.
• Execution and Installation:
• Plan and execute statewide network update initiatives, including hardware lifecycle replacements and infrastructure upgrades.
• Operations and Support:
• Configure, optimize, secure, and support routers, switches, firewalls, VPNs, network authentication services, and cloud networking solutions.
• Standardize and automate network administration through scripting and configuration management tools.
• Monitor network availability, utilization, latency, throughput, and security while identifying trends and recommending improvements.
• Maintain network vulnerability monitoring and remediate vulnerabilities according to security and operational requirements.
• Perform onsite installation, troubleshooting, optimization, and lifecycle replacement of network equipment throughout Wisconsin.
• Security:
• Analyze existing infrastructure and recommend enhancements that improve security, resiliency, scalability, and operational efficiency.
• Maintain network infrastructure compliance with security policies and applicable regulatory requirements through auditing, testing, and implementation of security controls.
• Other:
• Participate in planned after-hours maintenance activities and emergency support when required.
• Perform additional duties as assigned.