Network Administrator

Mid-Level Cisco Wan/Network AdministratorEverforth Apex is seeking a Mid-Level Cisco WAN/Network Administrator (with room for senior-level stretch responsibilities) to support enterprise network services across organizational facilities. This role combines WAN engineering, SD-WAN operations, secure access, and cloud-managed networking, with significant hands-on field responsibilities—including emergency site visits, device installations/configurations, inventory management, documentation, and change-control execution. Candidates should be able to perform network administrator duties with minimal oversight required and perform some network engineering duties with guidance from senior staff. This role reports to the Network Manager but will frequently take directions from Network Engineers.The environment includes Cisco routing/switching (IOS/NX-OS), Cisco SD-WAN(vManage/vSmart/vEdge), Meraki, Cisco Secure Firewall, Cisco ISE, Duo MFA, and Cloudflare Zero Trust. Visibility and monitoring leverage ThousandEyes, SolarWinds/PRTG, and Splunk.ResponsibilitiesNetwork Operations & Wan EngineeringImplement and maintain WAN/LAN infrastructure across core and distributed sites using Cisco IOS and NX-OS platforms.Configure and optimize L2/L3 features including VLANs, trunks, STP, EtherChannel, QoS, OSPF, BGP, and EIGRP.Manage and troubleshoot Cisco SD-WAN (vManage/vSmart/vEdge) including templates, policies, device onboarding, software upgrades, and HA cluster operations.Secure Access & Zero-Trust TechnologiesMaintain and administer Cisco ISE (802.1X NAC, profiling, guest access), Duo MFA, and Cloudflare Zero Trust (ZTNA/SWG) configurations.Operate Cisco Secure Firewalls (ASA/FTD), including rule creation, NAT, VPN (IPsec) policies, and change-controlled deployments.Monitoring, Telemetry & VisibilityUse ThousandEyes, SolarWinds/PRTG, and Splunk to proactively detect issues, analyze performance, and produce incident reports + root-cause analysis.Maintain dashboard alerts, baselines, and thresholds for consistent network observability.Vulnerability Management & Security HygienePerform vulnerability scans (Qualys/Tenable), validate findings, and track remediation with security teams.Work to remediate identified vulnerabilities once disclosed by the vendor or identified by security operations personnel.Document closure, risk acceptance, or change-management paths for identified vulnerabilities.Field Service, Site Visits & Physical Network WorkTravel to statewide court locations for:Emergency network repairCircuit turn-ups/demarc testingHardware installation (routers, switches, APs, firewalls)Onsite configuration and carrier/vendor coordinationInventory, Documentation & Change ManagementMaintain accurate inventory of network devices, serial numbers, license assignments, locations, and lifecycle status.Produce and update network diagrams, runbooks, SOPs, and configuration repositories.Execute changes through formal change-management processes including scheduling, rollback planning, and after-hours maintenance windows.Maintain detailed incident, change, and troubleshooting documentation.Cross-Team CollaborationWork with cloud, security, Microsoft infrastructure (AD, GPO, PKI), and application teams to support enterprise initiatives.Provide occasional support for AD, GPO, ADFS, PKI, and Windows Certificate Services where network integration is required.Work Environment & Operational ExpectationsTravel to statewide facilities for emergency network repairs, hardware installation, onsite diagnostics, ISP/carrier coordination, and project-based deployments.Work inside wiring closets, secure data rooms, and other restricted physical environments as required by court facility infrastructure.Participate in an on-call rotation to support critical incidents, outages, and after-hours maintenance windows essential to judicial system uptime.Perform physical tasks such as racking/stacking equipment, cabling, labeling, and environmental checks.Follow all security, access-control, and background-screening requirements when entering sensitive facilities.QualificationsMinimum QualificationsApproximately 5 years of network/WAN administration experience in multi-site enterprise environments.Strong Cisco hands-on experience (IOS, NX-OS).Core L2/L3 protocol proficiency: VLANs, trunks, STP, EtherChannel, QoS, OSPF, BGP, EIGRP.Daily-operations experience with Cisco SD-WAN (vManage/vSmart/vEdge).Experience with cloud-managed networking (preferably Meraki).Secure access stack familiarity: Cisco ISE, Duo MFA, Cloudflare Zero Trust.Monitoring tools: ThousandEyes, SolarWinds/PRTG, Splunk.Scripting ability (PowerShell, Python, or Bash).Excellent troubleshooting & documentation skills.Ability to travel throughout Virginia for site visits and support after-hours operations.CCNA Certification.Preferred QualificationsBachelor's degree in computer science, IT, Cybersecurity, or a related field.8+ years of Network/Wan administration experience in multi-site enterprise environments.Advanced experience with Cisco SD-WAN templates/policies, Cisco ISE policy design, Meraki full-stack, Cloudflare Zero Trust, Splunk analysis.Familiarity with Cisco ACI or VXLAN (datacenter networking).Experience with Cisco Intersight lifecycle management.Understanding of Zero-Trust architecture and NAC best practices.Familiarity with public-sector frameworks including NIST NICE Work Role 441.CCNP (Achieved or in progress).