IT Network Engineer

Salary: $115,000 - 130,000 per year Requirements:

• We want someone with hands-on expertise configuring and troubleshooting firewalls, routing, switching, and VPNs in a complex multi-site environment.
• Fortinet experience is strongly preferred, especially with FortiGate and FortiManager, though equivalent depth on platforms such as Palo Alto, Cisco, or Check Point will also be considered.
• You should bring at least 3 years of multi-site network operations experience supporting routing, switching, and firewall policy across multiple locations.
• A solid foundation in network security is important, including firewall policy design, segmentation, and least-privilege access; PCI-DSS experience in retail is a plus.
• Familiarity with 802.1X and Network Access Control concepts is required, with NAC platform exposure such as FortiNAC, Cisco ISE, or Aruba ClearPass considered a strong advantage.
• Experience supporting secure connectivity between on-premises infrastructure and cloud environments is needed, with AWS knowledge preferred.
• Preferred additions include operational experience with FortiGate, FortiManager, FortiNAC, or FortiAnalyzer.
• Working knowledge of Microsoft Entra ID, conditional access, and hybrid identity is highly valued.
• AWS networking experience with VPCs, Transit Gateways, VPN connectivity, and routing is beneficial.
• Certifications such as Fortinet FCP or FCA, CCNP or equivalent, AWS networking or SysOps, and Microsoft identity credentials are preferred.
• Automation skills with Python, Ansible, or similar tools are a plus.
• Background in multi-site retail or grocery environments is advantageous.

• We will rely on you to help deploy FortiNAC across all 50+ locations, including device profiling, posture assessment, and 802.1X policy enforcement.
• You will support the rollout of Zero Trust networking through identity-based 802.1X authentication, dynamic VLAN steering, and micro-segmentation.
• You will audit, migrate, and standardize our distributed network environments into a centralized FortiManager-orchestrated design.
• You will maintain secure connectivity between our physical sites and AWS using VPN tunnels, SD-WAN, and Transit Gateway infrastructure.
• You will assist with FortiGate policy administration, rule-set maintenance, change control, and centralized logging through FortiAnalyzer.
• You will contribute to hybrid identity and Entra ID-adjacent work alongside the Systems Engineer when needed.
• You will take part in a shared on-call rotation, including overnight and weekend maintenance windows, to support store uptime.
• You will serve as a senior escalation point for complex routing, switching, firewall, VPN, and connectivity issues across our retail and corporate environments.
• You will monitor network health, respond to incidents, and drive issues from detection through resolution.

• AWS
• Ansible
• Aruba
• Cloud
• Cisco
• Firewall
• FortiGate
• Support
• Network
• Python
• Security
• VPN
• Windows
• Backbone
• Hardware
• IoT

More:

We are Good Food Holdings, the parent company behind Bristol Farms, Lazy Acres, Metropolitan Market, New Seasons Market, and New Leaf Community Markets, supporting more than 50 locations across Washington, Oregon, and California. New Seasons and New Leaf are Certified B Corporations that donate 10% of after-tax profits to local nonprofits, so the work you do helps keep community grocery stores operating for the neighborhoods they serve. This is a hands-on, onsite role based in Portland, Oregon, with up to 25% mostly local travel. You will join a lean, collaborative infrastructure team and work closely with a Senior Network Engineer and Systems Engineer. We offer a strong growth environment, case-by-case funded training and certifications, shared on-call coverage, and benefits including 401(k), matching, health, dental, vision, life insurance, paid time off, flexible scheduling, and an HSA.

last updated 33 week of 2026