Network Infrastructure Engineer

Network Infrastructure EngineerBusiness Office - Oklahoma City, OK 73102OverviewPosition Type Full Time Category Information TechnologyDescriptionThe Oklahoma City Thunder is seeking a Network Infrastructure Engineer to maintain and improve the reliability, security, and performance of network infrastructure across Thunder facilities. In this role, you will design, administer, monitor, and troubleshoot wired and wireless networks, firewalls, WAN and internet connectivity, secure remote access, and Zero Trust Network Access (ZTNA). You will also support network projects, resiliency initiatives, and operational readiness for corporate and basketball operations, designated Thunder and Blue home games, special events, and critical incidents.In this role you will:Network Engineering & ConnectivityOwn the operational health, performance, security, and availability of wired and wireless networks across all locationsDesign, configure, administer, and troubleshoot firewalls, switches, wireless infrastructure, VPNs, Software-Defined Wide Area Network (SD-WAN), internet connectivity, and related network servicesManage firewall policies, NAT, network objects, security profiles, VLANs, IP addressing, routing, DHCP and DNS dependencies, network segmentation, and site-to-site connectivityDiagnose complex Layer 2 through Layer 7 connectivity and performance issues, perform root-cause analysis, and implement solutions to help prevent recurrenceMonitor network availability, performance, capacity, and security trends and recommend improvements to architecture, standardization, automation, resiliency, and lifecycle planningPlan and implement approved network changes, projects, firmware upgrades, hardware replacements, and infrastructure improvements with appropriate testing, communication, documentation, and rollback planningMaintain network standards, configuration backups, baseline configurations, diagrams, rack elevations, circuit and IP address records, equipment inventories, operating procedures, and recovery documentationZero Trust & Network SecuritySupport the design, implementation, and continued expansion of the organization's Zero Trust Network Access (ZTNA) strategyAdminister ZTNA application access, identity- and device-based policies, segmentation, device posture requirements, and related security controlsMonitor authentication, device posture, policy effectiveness, availability, and user connectivity and troubleshoot recurring access issuesPartner with identity, endpoint, application, and support teams to transition appropriate services from network-level access to application-specific Zero Trust accessReview firewall, VPN, ZTNA, segmentation, and privileged administrative access for continued business need and alignment with security standardsIdentify opportunities to reduce broad network access and reliance on traditional remote-access VPN technologiesEscalate significant cybersecurity risks and architectural decisions to IT leadershipNetwork Operations & Event SupportPerform infrastructure readiness checks and provide real-time network support for designated Thunder and Blue home games and special eventsCoordinate WAN and internet circuits, network cabling, carrier services, vendor work, infrastructure installations, outages, escalations, and service changesParticipate in resiliency and recovery testing involving firewalls, WAN and internet connectivity, VPN and ZTNA, network services, monitoring, and disaster-recovery proceduresServe as an escalation resource for complex network and connectivity issues and provide troubleshooting guidance to other IT personnelPerform preventive maintenance, network security reviews, capacity analysis, documentation improvements, and approved infrastructure projectsTechnology EnvironmentThe technology environment includes Fortinet firewalls and ZTNA, enterprise switching and wireless infrastructure, SD-WAN, VPNs, and network monitoring platforms. Experience with FortiGate, FortiManager, and FortiClient EMS is helpful but not required.What you'll bring to the role:Minimum three years of experience supporting business network infrastructureAssociate or bachelor's degree in information technology, computer science, or a related field, or an equivalent combination of education, training, and experience preferredRelevant certification in networking, cybersecurity, firewalls, switching, wireless, or related network technologies preferredExperience administering firewalls, switches, wireless networks, VPNs, and related monitoring toolsWorking knowledge of TCP/IP, subnetting, VLANs, NAT, DHCP, DNS, routing, switching, and network segmentationDemonstrated experience troubleshooting Layer 2 through Layer 7 wired, wireless, firewall, VPN, and internet connectivity issuesExperience independently managing network infrastructure projects from requirements and design through implementation, documentation, and operational handoffProficiency in maintaining accurate diagrams, inventories, operating procedures, configuration records, and technical change documentationExperience coordinating technical work with internal departments, carriers, service providers, and vendorsClear written and verbal communication during outages, live events, and other time-sensitive situationsExperience handling network configurations, authentication records, security logs, and other sensitive technical information confidentiallyExperience supporting multiple physical locations or event-driven, venue, hospitality, entertainment, or other availability-sensitive operations preferredExperience with high-availability firewalls, SD-WAN, dynamic routing, site-to-site connectivity, high-density wireless networks, ZTNA, network access control, identity-based access, device posture, or secure application access preferredAdditional details:This is a full-time exempt position reporting to the Director, Information Technology. The schedule requires flexibility, including availability for designated events, game nights, and scheduled maintenance during evenings, weekends, and holidays. The primary work location is the Thunder Corporate Office at Paycom Center in downtown Oklahoma City. Some responsibilities require travel throughout the Oklahoma City metro area. A valid driver's license, proof of insurance, and reliable transportation are required. Physical requirements include the ability to lift up to 50 pounds and to bend, crouch, climb ladders or stairs, and work in network rooms, equipment racks, arena spaces, and other designated technology areas as needed.We offer a positive office environment and a robust benefits package, including excellent medical, dental, and vision coverage; a 401(k) with matching funds; paid downtown parking; tuition reimbursement; employee ticket options; a family gym membership subsidy; parental leave; a team shop discount; and much more!The Thunder recognizes that teams with a variety of backgrounds, perspectives and skills make a stronger company. As an Equal Opportunity Employer, the Thunder organization considers applicants fairly on the basis of qualifications, experience and business needs and provides equal opportunity regardless of race, color, age, sex, ancestry, ethnicity, national origin, religion, veteran status, marital status, pregnancy, disability, gender identity, sexual orientation, or any other legally protected status. Applicants are considered regardless of past legal system involvement, based upon the needs of the role, nature of and recency of legal history. The Thunder is committed to a welcoming and inclusive environment for all employees through its RAVE culture – Respect and Value Everyone.