Senior Network Engineer

Senior Network EngineerUnder the supervision of the IT Manager, the Senior Network Engineer is responsible for the design, implementation, configuration, and optimization of our enterprise network infrastructure across data centers, branch sites, and cloud environments. Ideal candidates will have deep experience with nextgen firewalls, routers, switches, Wireless Access Points, plus a strong command of WAN routing protocols, SD-WAN, IDS/IPS, VPNs, and Firewall ACLs.Essential FunctionsArchitecture & Design: Build resilient network architectures (campus, WAN/SD-WAN, data centers), segmentation, policy-based routing, and high-availability frameworks.Implementation & Ops: Configure/manage firewalls, routers, switches and wireless access points; handle BGP/OSPF/EIGRP routing, IPsec/SSL VPNs, DNS/DHCP/NAT/QoS.Telephony: Proven experience with enterprise telephony systems and VoIP technologies, including SIP signaling, RTP media streams, and troubleshooting voice protocols. Strong knowledge of CCaaS (Contact Center as a Service) and UCaaS (Unified Communications as a Service) platforms for voice, video, and collaboration. Expertise in QoS configuration for voice traffic, Session Border Controllers (SBCs), and VoIP security best practices to ensure reliable and secure communications across complex network environments.Troubleshooting & Monitoring: Diagnose L2/L3, VPN, SD-WAN, wireless, and performance issues; lead incident response and post-mortems.Automation & Documentation: Use Python/Ansible/Git for config automation; maintain diagrams, runbooks, inventories, and change records.Security & Compliance: Manage ACLs, IPS/IDS, firewalls, NAT, zero-trust segmentation; enforce secure defaults and logging. Participate as the Network Subject Matter Expert in annual third partyLeadership: Lead multi-site tech projects and mentor junior staff.RequirementsExcellent communication and stakeholder engagement skills.Excellent organizational skills and attention to detail.Strong knowledge of networking protocols and services, including TCP/IP, VLANs, STP, routing, NAT, QoS, DHCP, and DNS.Ability to configure and optimize dynamic routing protocols such as BGP, OSPF, and EIGRP.Understanding of Zero Trust security models, SASE frameworks, RF optimization techniques, and wireless network design principles.Advanced troubleshooting and packet analysis skills using tools like Wireshark.Proficiency in scripting, change management, automation, and monitoring tools using Python, Ansible, and PowerShell.Education and ExperienceBachelor's degree in Computer Science, Information Technology, or a related field (or equivalent experience).7+ years of experience in network engineering in a complex enterprise environment.Industry-recognized certifications such as CCNP Enterprise/Security, NSE-4+, ACE-A/ACE-L, VCTA-NV/VCP-NV, CMNA, CISSP, or Security+ (preferred).Proficiency with Cisco Firepower, FortiGate, Arista EOS, VeloCloud SD-WAN, HPE Instant On, Meraki MR/MX/MS platforms.Extensive experience with network protocols and services, including TCP/IP, VLANs, STP, routing, NAT, QoS, DHCP, and DNS.Extensive experience configuring and optimizing dynamic routing protocols, including BGP, OSPF, and EIGRP where applicable.Extensive VPN, ZTNA, and Firewall ACL experience.Experience managing and configuring NextGen firewalls, NetFlow, Deep Packet Inspection (DPI), Intrusion Prevention/Detection Systems (IPS/IDS), and Access Control Lists (ACLs).Experience in cloud networking (AWS/Azure/GCP).Physical Requirements and Work EnvironmentProlonged periods of sitting at a desk and working on a computer – 7 to 8 hours per day.Light lifting, carrying, pushing and/or pulling objects up to 25 lbs.Intermittent walking, bending, twisting and stooping when racking hardware or performing cable management.General office environment: works generally at a desk in a well-lighted, air-conditioned cubicle/office, with moderate noise levels.Constant keyboarding, fine hand manipulation, overhead reaching for cabling.Data center access, occasional exposure to raised floors, server noise, and limited hot/cold zones.Occasional travel to branches or data centers, up to 10%.Work LocationThis is an on-site position at our Corporate Headquarters in Yuba City, CA. Remote work is not available for this role.Compensation RangeThe company anticipates offering an annual salary range between $120,000 to $138,000 for this position at the time of hire. This range includes base salary and does not include possible overtime for non-exempt employees or any applicable performance-based incentives or commissions.Annual Merit IncreaseEmployees are eligible for a discretionary yearly merit-based salary adjustment, based on individual performance and company results.Comprehensive Benefits PackageWe provide a robust benefits package designed to support your health, financial security, and work-life balance including:Medical, Dental & Vision Insurance optionsVoluntary Lines including hospital indemnity, accident, and critical illness policiesCompany Paid HRA (with enrollment in certain health plans)Company Paid Basic Term Life InsuranceCompany Paid Long-Term Disability Insurance for Full-Time EmployeesCompany Paid Telehealth Services Membership (Teladoc)Company Paid Employee Assistance Program (EAP)401(k) Retirement PlanFlexible Spending AccountsPaid Time OffTravel Expense ReimbursementThe preceding list of duties does not include all tasks and responsibilities that may be required with this position. Additional tasks may be assigned, as departmental and operational needs require.