Senior Network & Systems Engineer

Senior Network & Systems EngineerThe Senior Network and Systems Engineer is responsible for the design, implementation, maintenance, security, and support of the Credit Union's core network and systems infrastructure. This includes escalation support for complex Tier 2–4 issues across networking, firewalls, cloud platforms, identity management, endpoint security, Microsoft 365, VoIP systems, and internet access, as well as coordination with vendors on application integration.The role supports system improvements, upgrades, hardware deployments, and new technology adoption in partnership with the CTO, while also providing recommendations to IS/IT leadership on process and technology enhancements. The Senior Network and Systems Engineer serves as a senior escalation point, leading resolution of complex technical issues and supporting overall infrastructure stability and performance.The physical demands described here are representative of those that must be met to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions, provided they do not create undue hardship or safety risk.While performing the duties of this job, the employee is regularly required to sit and use hands to finger, handle, or operate computer equipment and tools. The employee is frequently required to talk and hear. The employee is occasionally required to stand, walk, reach with hands and arms, and stoop, kneel, crouch, or crawl, particularly in technical spaces such as server rooms or wiring closets.The employee must occasionally lift and/or move up to 50 pounds. Specific vision abilities include close vision, color vision, peripheral vision, depth perception, and the ability to adjust focus.Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.The incumbent in this position must be able to accommodate reading documents or instruments, detailed work, problem solving, member and vendor contact, reasoning, math, language, presentations, verbal and written communication, analytical reasoning, stress, multiple concurrent tasks, and constant interruptions.QualificationsThese specifications are general guidelines based on the minimum experience normally considered essential to the satisfactory performance of this position. The requirements listed below are representative of the knowledge, skill and/or ability required to perform the position in a satisfactory manner. Individual abilities may result in some deviation from these guidelines.Bachelor's degree in Computer Science, Information Technology, or related field preferred, or equivalent combination of education, certifications, and relevant experience.Must hold one or more Microsoft/Azure certifications: Azure Administrator, Azure Security Engineer, Azure Network Engineer, or Cybersecurity Architect Expert.Must hold one or more networking certifications: CCNP, CCNA, Network+, CCIE, JNCIA, or equivalent.Preferred certifications include: CISSP, CCSP, CEH, GSEC, or equivalent.Equivalent hands-on experience may substitute for some certification requirements.5+ years of experience in systems administration, security, and network management, preferably in financial services.5+ years of experience managing enterprise networking infrastructure including firewalls (Palo Alto, FortiGate, preferably Cato), switches (Meraki, FortiSwitch), and technologies such as TCP/IP, DNS, DHCP, VLANs, BGP, OSPF, Wi-Fi, and VPNs.5+ years of experience administering Microsoft 365, hybrid AD DS/Azure AD, Intune/Autopilot, Active Directory, Azure, Exchange (on-prem and online), and Microsoft collaboration tools.5+ years of experience in IP addressing and Windows server/workstation administration, including router configuration.5+ years supporting enterprise infrastructure operations, end-user computing, and advanced troubleshooting.1+ year of experience supporting VoIP telephone systems.Experience with identity and access technologies: GPO to Intune migration, Entra ID SSO, SCIM provisioning, SAML 2.0, OAuth/OIDC, Conditional Access.Strong knowledge of LAN/WAN technologies: TCP, UDP, SNMP, IPv6, VLSM, CIDR, NAT (static, dynamic, PAT).Experience with secure remote access: IPsec VPN, SSL VPN, PKI, multi-factor authentication (LDAP, RADIUS, TACACS+, certificates, tokens, CAC cards).Working knowledge of security/compliance frameworks: NIST, ISO 27001, SOC 2; FFIEC preferred.Experience with endpoint security tools including antivirus/antimalware and EDR solutions.Experience with certificate management including SSL/TLS and PKI infrastructure.Experience with storage systems (NAS, SAN).Experience with infrastructure automation tools (Ansible, Terraform) and scripting (PowerShell, Python).Experience responding to security and network questionnaires and customer technical inquiries.Strong troubleshooting, problem-solving, and adaptability to new technologies.Excellent written and verbal communication skills, with ability to translate technical concepts for non-technical audiences and strong interpersonal skills.