Network Engineer

Summary GENERAL SUMMARY: Responsible for the design, deployment, and support of enterprise network infrastructure.Involvesadvanced configuration and troubleshooting of Layer 2 and Layer 3 networks, including routing, switching, firewalls, and SD-WAN technologies.Contributesto architectural decisions, mentors junior engineers, and leads small to medium-sized infrastructure projects across LAN, WAN, wireless, VPN, and cloud-integrated environments. Workingclosely with senior engineering staff, vendors, and cross-functional IT teams,ensures high availability, performance, and security of network services while driving operational improvements and adherence to industry best practices. PRINCIPAL JOB FUNCTIONS: Commits to the mission, vision, beliefs and consistently demonstrates our core values. Leads the deployment, configuration, and optimization of Layer 2 and Layer 3 network infrastructure, including switches, routers, wireless controllers, and firewalls. Performs advanced troubleshooting of network incidents and performance issues across LAN, WAN, VPN, and wireless environments, escalating to senior staff when necessary. Implements andmaintainsnetwork segmentation, VLAN strategies, and routing protocols such as OSPF and BGP. Leads routine network maintenance and lifecycle management, including firmware upgrades, device replacements, and structured cabling improvements. Designs, implements, andmaintainssecure site-to-site and remote-access VPN connections with third-party vendors and partners. Configures and manages SD-WAN infrastructure (e.g., Palo Alto ION), optimizing network traffic and failover policies. Utilizesadvanced monitoring and diagnostic tools (e.g., SolarWinds, Wireshark, Palo Alto Panorama) to proactivelyidentifyand resolve network issues. Maintainsdetailed andaccuratenetwork documentation including topology diagrams, configuration standards, and change control records. Assists in the design and execution of enterprise network projects and infrastructure upgrades, collaborating across IT disciplines and with external vendors. Contributes to the development and enforcement of network security practices, includingfirewallpolicies, access controls, and segmentation strategies. Provides Tier 2 and Tier 3 network support, serving as an escalation point for Network staff and mentoring junior team members. Participatesin network architecture discussions and capacity planning to support organizational growth and technology initiatives. Contributes to the evaluation and testing of emerging networking technologies and makes recommendations for adoption whereappropriate. Participatesin the on-call rotation for after-hoursnetwork support and planned maintenance windows. Enters restricted access areas without supervision to perform advanced network-related tasks. Provide end-to-end network support for Community Connect partners, including design validation, secure connectivity (SD-WAN/VPN), troubleshooting, and ongoing optimization of network paths to ensure reliable and secure access to hosted applications such as EPIC and other Bryan owned services and solutions. Maintains professional growth and development through seminars, workshops, and professional affiliations to keep abreast of latest trends in field of expertise. Participates in meetings, committees and department projects as assigned. Performs other related projects and duties as assigned. (Essential Job functions are marked with an asterisk “*). REQUIRED KNOWLEDGE, SKILLS AND ABILITIES: Knowledge of networking protocols and concepts, including TCP/IP, BGP, OSPF, VRRP, EIGRP, and MPLS. Knowledge of Layer 2 and Layer 3 technologies, including VLAN design,trunking, spanning-tree protocol, static and dynamic routing, and inter-VLAN routing. Knowledge ofenterprise-grade networking equipment from vendors such as Extreme, Aruba, and Palo Alto. Knowledge of SD-WAN architecture and implementation, particularly Palo Alto ION deployment and policy configuration. Knowledge of network security principles, including segmentation,firewallzoning, zero-trust access, and vulnerability mitigation strategies. Knowledge of authentication, authorization, and accounting (AAA), 802.1X, and network access control systems. Skill inconfiguring andmaintainingenterprise firewalls, NAT policies, and access control rules—preferably in Palo Alto environments using Panorama. Skill inverbal and written communication to interface with technical staff, management, vendors, and non-technical stakeholders. Skillin using advanced network diagnostic and monitoring tools (e.g., Wireshark, SolarWinds, NetFlow analyzers) to resolve complex issues and ensure high availability. Abilityto design, implement, and troubleshoot secure VPN solutions (site-to-site and remote-access) in multi-vendor environments. Ability to design andmaintaincomprehensive network documentation, including topology diagrams, IP schemas, and standard operating procedures. Ability to manage and execute infrastructure projects from planning to implementation, including vendor coordination, budgeting input, and milestone tracking. Ability to mentor junior staff, share technical knowledge, and leadtroubleshootingor implementation efforts. Ability to work independently on complex tasks and make sound technical decisions with minimal oversight. Ability to maintain confidentiality relevant to sensitive information. Ability to maintain regular and punctual attendance. EDUCATION AND EXPERIENCE: Associate degree in Computer Science, Information Technology, Networking, ora relatedfieldrequired. Bachelor’sdegree preferred.Minimum ofthree(3) yearsof progressively responsible experience supporting, configuring, and troubleshooting enterprise network infrastructure in a multi-site or complex environmentrequired.In lieu of Associates degree,an additional two (2)years ofprogressively responsible experiencein these same areasrequired. Experience with one or more enterprise networking platforms (e.g.,Extreme, Cisco, Aruba, Palo Alto) in production environmentsrequired.Experience leading technical tasks or projects, mentoring junior staff, or contributing to network architecture discussions preferred. OTHER CREDENTIALS / CERTIFICATIONS: Cisco Certified Network Associate (CCNA) Cisco Certified Network Professional (CCNP Enterprise) CompTIA Security+ Palo Alto Networks Certified Network Security Administrator (PCNSA) Extreme Networks Certified Specialist (ECS) Aruba Certified Professional (ACP) PHYSICAL REQUIREMENTS: (Physical Requirements are based on federal criteria and assigned by Human Resources upon review of the Principal Job Functions.) (DOT) -- Characterized as medium work requiring exertion of 20 to 50 pounds of force occasionally, and / or 10 to 25 pounds of forcefrequently, and / or greater than negligible up to 10 pounds of force constantly to move objects. Involves sitting most of thetime butmay involve walking or standing for brief periods as well as working above your head while on a ladder. #J-18808-Ljbffr