Senior Network Engineer

Description IT Network Engineer Help run the network backbone of the West Coast's most beloved community grocers. Onsite — Portland, OR preferred · Full-Time · Up to 25% Travel (mostly local) About the Role A local parent company behind five of the West Coast's most beloved grocery brands across 50+ locations in WA, OR, and CA. A couple of these Corporations give 10% of after-tax profits to local non-profits. The network you help run here keeps community grocers serving real neighborhoods up and down the coast. We're hiring an IT Network Engineer to work alongside our Senior Network Engineer and Systems Engineer on a lean infrastructure team. This is a hands-on individual contributor role — roughly 70% project engineering and 30% operations support. Networking is the core of the job, but you'll also get meaningful exposure to hybrid identity (Microsoft Entra ID), cloud connectivity (AWS), and enterprise systems work as part of a collaborative team that doesn't operate in silos. On the project side, you'll be a key executor on our most consequential network initiatives: the enterprise FortiNAC rollout across all sites, a shift toward a Zero Trust network model built on 802.1X and micro-segmentation, and consolidating our multi-banner network environments into a centralized FortiManager-orchestrated architecture. Why You'll Want This Role

• Hands-on project work from day one — A structured ramp gets you driving real network engineering projects within six months, not grinding support tickets indefinitely.
• Experienced team to grow with — You'll work directly alongside a Senior Network Engineer — someone who has already designed what you're helping to build and is invested in your development.
• Genuine breadth — Networking is your home base, but you'll also contribute to hybrid identity and cloud connectivity work — making you a more complete engineer over time.
• Work that matters — New Seasons and New Leaf give 10% of profits to local non-profits. Your work helps keep those stores running for the communities they serve.
• We invest in your growth — Training and certifications funded case by case, including Fortinet professional credentials.
• A team that has your back — Lean and collaborative, shared on-call that's scheduled — not dumped on one person.

What You'll Do Network Engineering (70%)

• FortiNAC Rollout — Work alongside the Senior Network Engineer to deploy FortiNAC across all 50+ locations — device profiling, posture assessment, and 802.1X policy enforcement.
• Zero Trust Implementation — Help build out identity-based 802.1X authentication, dynamic VLAN steering, and micro-segmentation across corporate assets, retail IoT, and store hardware.
• Network Consolidation — Audit, migrate, and standardize our distributed multi-banner environments into a centralized FortiManager-orchestrated architecture.
• Hybrid Cloud Connectivity — Maintain secure network pathways — VPN tunnels, SD-WAN, Transit Gateways - connecting 50+ physical locations to our AWS environment.
• Firewall & Policy Management — Support FortiGate policy management, rule-set hygiene, and change control. Maintain FortiAnalyzer for centralized logging and compliance visibility.
• Cross-Team Contribution — Pitch in on hybrid identity and Entra ID-adjacent work alongside the Systems Engineer when the team needs an extra set of skilled hands.

Network Operations (30%)

• On-Call & After-Hours Maintenance — Participate in a shared on-call rotation with overnight and weekend maintenance windows to protect store uptime.
• Tier 3 Escalation — Senior escalation point for complex routing, switching, firewall, VPN, and connectivity issues across the retail and corporate estate.
• Monitoring & Incident Response — Maintain network visibility through FortiAnalyzer and monitoring tooling. Own network incident response from detection through resolution.

What You'll Bring Required

• Enterprise networking depth — Hands-on experience configuring and troubleshooting firewalls, routing, switching, and VPN across a complex multi-site environment. Fortinet (FortiGate, FortiManager) is strongly preferred; equivalent depth in Palo Alto, Cisco, Check Point, or similar enterprise platforms will be considered.
• 3+ years of multi-site network operations — Supporting routing, switching, and firewall policy across a distributed footprint of multiple locations.
• Network security fundamentals — Firewall policy design, segmentation, and least-privilege access. PCI-DSS experience in a retail environment is a plus.
• Zero Trust / NAC exposure — Familiarity with 802.1X and Network Access Control concepts. Hands-on experience with FortiNAC, Cisco ISE, Aruba ClearPass, or any NAC platform is a meaningful differentiator.
• Hybrid cloud connectivity — Experience supporting secure connectivity between physical infrastructure and cloud environments, AWS preferred.

Preferred

• Fortinet specifically — FortiGate, FortiManager, FortiNAC, or FortiAnalyzer operational experience.
• Microsoft Entra ID — Working familiarity with Entra ID, conditional access, and hybrid identity as they intersect with network authentication.
• AWS networking — VPCs, Transit Gateways, VPN connectivity, and routing in an AWS environment connected to physical infrastructure.
• Certifications — Fortinet FCP or FCA · CCNP or equivalent · AWS networking or SysOps · Microsoft identity certifications.
• Automation — Python, Ansible, or similar for network configuration and compliance tasks.
• Retail / PCI background — Multi-site retail or grocery environment experience.

Don't tick every box? If the networking depth is there and you're curious about the rest, apply anyway — we hire for demonstrated capability, not a perfect résumé. The details: Full-time and onsite — Portland, OR preferred, with Seattle or LA possible for the right candidate. Up to 25% travel, mostly local, plus occasional after-hours maintenance windows. Training and certifications considered case by case, including Fortinet professional credentials. Skills Network engineering, network infrastructure, network operations, fortinet, fortinet firewalls, Firewall, zero trust, NAC, Entra ID, Microsoft Entra ID, Active Directory, AWS networking, retail, PCI, pci compliance, automation Top Skills Details Network engineering,network infrastructure,network operations,fortinet,fortinet firewalls,Firewall Additional Skills & Qualifications The split is roughly 70% project engineering and 30% infrastructure support. On the project side, you'll be a key executor on our most consequential network initiatives, including the enterprise FortiNAC rollout, our shift toward Zero Trust, and consolidating our distributed multi-banner environments into a centralized FortiManager-orchestrated architecture. You'll also carry enough breadth to pitch in across the team - helping with hybrid identity work in Microsoft Entra ID, supporting AWS hybrid connectivity, and contributing wherever the team needs an extra set of skilled hands. We're honest that you'll be working through real technical debt. This isn't a finished environment - it's one actively being built toward enterprise maturity, and this role is a core part of making that happen. Experience Level Expert Level Job Type & Location This is a Permanent position based out of Portland, OR. Pay and Benefits The pay range for this position is $110000.00 - $130000.00/yr. Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors. 40% off groceries! + more (please see Notes & Attachment for Benefits Guide) Workplace Type This is a fully onsite position in Portland,OR. Application Deadline This position is anticipated to close on Oct 2, 2026. About TEKsystems We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company. The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law. About TEKsystems and TEKsystems Global Services We’re a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. We’re a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. We’re strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. We’re building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com. The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law. San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records. Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools. TEKsystems