Network Engineer

Senior IT Network EngineerJMA is restoring U.S. leadership in wireless technology at a critical time in the transition to 5G. It makes the world's most advanced software-based 5G platform, designed, coded, and manufactured in Syracuse, NY at the only U.S.-owned 5G factory in the country.Across its global tech centers, JMA makes 5G possible for organizations with the most critical connectivity demands in the world. JMA's technology is ushering in a new era of connectivity for leading mobile carriers, the most iconic stadiums, major universities, leading healthcare centers, the busiest transit centers, and the U.S. Military.5G is more than another G on your phone — it is a generational opportunity to change the way the world operates. Join the industry's fastest growing technology company to shape that future today.We are seeking a highly skilled Senior IT Network Engineer to serve as the technical owner of JMA's enterprise network. This is a senior individual contributor role with end-to-end accountability for the corporate LAN and wireless environment, the WAN and SD-WAN fabric connecting our U.S. and international sites, a multi-vendor next-generation firewall estate built on Cisco Meraki and Fortinet FortiGate, data center and storage networking, secure remote access, and the network security controls that produce evidence for our compliance program.The scope is broader than a traditional corporate network role. JMA operates a manufacturing floor, product test and 5G lab environments, a network operations center, and a growing portfolio of acquired entities that must be discovered, documented, and integrated. The successful candidate will be comfortable inheriting environments that are only partially documented, establishing standards where none exist, and driving remediation against compliance frameworks including CMMC, NIST 800-171, and SOC 2. This is an on-site position in Syracuse, NY.Position Responsibilities:Manage and maintain enterprise network infrastructure, including switches, routers, and firewalls.Manage and maintain enterprise network infrastructure, including switches, routers, and firewalls, to support secure and compliant operations.Configure and optimize routing protocols to ensure efficient, reliable, and secure network performance.Implement and manage secure networking solutions, including SD-WAN, IPsec tunnels, and segmentation, aligned with compliance requirements.Ensure adherence to industry standards, compliance frameworks (CMMC, NIST 800-171, SOC 2), and best practices in network security and design.Take ownership of network-related issues, troubleshoot problems, and provide timely resolution, applying a proactive approach to prevent recurrence.Familiarize yourself with the existing network environment and infrastructure, identifying areas for improvement to meet evolving compliance standards.Create, update, and maintain documentation for network systems, processes, and procedures, ensuring compliance evidence is clear and auditable.Collaborate with other IT team members to optimize network performance, security, and compliance.Proactively stay updated with industry trends, technologies, and compliance requirements to continually improve and future-proof our network infrastructure.Required Skills & Experience:7+ years of enterprise networking experience, including at least 3 years at a senior or lead level in a multi-site environment.Expert-level routing and switching, with a focus on secure and compliant network design across distributed sites.Proficiency in SD-WAN and IPsec tunnel configuration, and demonstrated experience implementing network segmentation aligned to compliance requirements.Strong understanding of compliance frameworks (CMMC, NIST 800-171, SOC 2) and industry standards in network security.Hands-on experience with Cisco Meraki (MX, MS, MR) in a multi-site dashboard environment.Hands-on experience with Fortinet FortiGate firewalls and FortiOS, including policy design, security profiles, IPsec and SD-WAN configuration, HA, and firmware lifecycle. Experience with FortiManager, FortiAnalyzer, or other Fortinet Security Fabric components is an advantage.Demonstrated ability to operate a multi-vendor firewall estate and to plan and execute migrations between NGFW platforms with minimal disruption. Knowledge of additional platforms (Palo Alto, Cisco Firepower, SonicWall, Aruba, Juniper) is a plus.Experience with data center and virtualization networking, including VMware host networking and iSCSI or storage area network connectivity.Enterprise wireless design and troubleshooting experience, including surveys, RF optimization, and secure authentication.Working knowledge of PKI and certificate management as it applies to VPN, 802.1X, and device trust.Proficiency with network monitoring, logging, and analysis tools, including packet capture and structured troubleshooting methodology.Proven ability to implement and manage security controls autonomously, with minimal handholding, in an environment where standards may need to be created rather than inherited.Strong organizational and documentation skills, with the ability to produce detailed documentation that serves as compliance evidence.Fluency in English, written and spoken, with excellent communication skills and the ability to explain technical risk to non-technical stakeholders.Problem-solving mindset with the ability to adapt to a dynamic IT environment and proactively address emerging compliance challenges.Willingness to travel occasionally to domestic and international JMA sites, and to work on-site in Syracuse, NY.Desired Skills & Experience:Relevant certifications such as Fortinet NSE 4 or above (or the current FCP and FCSS equivalents), CCNP Enterprise, CCIE, Meraki CMNA or ECMS, PCNSE, CISSP, or CMMC-related certifications (RP, CCP, CCA).Experience supporting manufacturing or OT networks, and familiarity with IEC 62443 or Purdue model concepts.Experience integrating acquired companies, including consolidating domains, addressing schemes, and network platforms.Network automation and scripting experience (Python, Ansible, Terraform, REST APIs including the Meraki Dashboard API).Microsoft Azure cloud networking experience, including virtual networks and subnetting, VNet peering, network security groups, Azure Firewall or a third-party NVA, VPN Gateway and ExpressRoute connectivity, private endpoints and DNS resolution, and the hybrid identity considerations that accompany a Microsoft 365 and Entra ID environment.Experience extending enterprise network and security policy into hosted, colocation, and IaaS environments, including tunnel design and routing between on-premises firewalls and third-party or provider-managed data centers.Experience in an organization actively pursuing CMMC certification, ISO 27001, or SOC 2 attestation.ITIL Foundation certification or equivalent practical experience with formal service management.$90,000 - $120,000 a year The US national annual base salary range for this is $90,000 - $120,000. The range includes base salary that is expected to be paid for this role. Actual base salary will be based on a variety of factors including, but not limited to, the scope and complexity of the role, the successful candidate's relevant experience, skills, and knowledge, peer and market data and geographic location.At JMA, our people are deeply committed to their work and we provide benefits to match. When you join JMA you have immediate access to everything you need. Whether you're looking for employee discounts, financial, legal and/or childcare resources and support, we have you covered. We believe in providing comprehensive health and wellness coverage along with monetary rewards towards health goals, in addition to numerous company-provided personal protection benefits at no additional cost to you.At JMA, we don't just accept differences — we embrace them. JMA is proud to be an equal opportunity workplace. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristic.