Network Administrator

iFIT’s vision is to create the world’s most holistic health and fitness platform, integrating all elements of health—physical fitness, mental health, nutrition, and active recovery—into a seamless interactive experience. We develop proprietary software that learns and adjusts to the habits of each person as it delivers immersive content that guides them on their own individual fitness journey. We are currently seeking an ambitious pace‑setter to join our team as a Network Administrator remotely in the US. iFIT is looking for a technically skilled and forward‑thinking Network Administrator to take ownership of our enterprise network infrastructure. In this role, you will focus on automation, security, and single pane of glass administration, implementing scalable and secure network solutions while collaborating with IT leadership to optimize operations across multi‑cloud and on‑premises environments. Compensation $80,000—$100,000 Role Commitments Centralize DNS administration and governance across Corp IT and Product environments. Expand centralized management of remote access and out‑of‑band infrastructure. Refresh and standardize connectivity infrastructure at headquarters and branch locations. Implement and operationalize resilient backup connectivity solutions. Improve network operational maturity through stronger documentation, visibility, and support readiness. Essential Duties and Responsibilities Configure, maintain, and optimize Cisco Catalyst switches, Palo Alto firewalls, and Mist systems. Deploy and manage centralized network management platforms, including Cisco Meraki, Panorama, and Mist Cloud, to simplify network visibility and control. Develop and enforce secure network configurations, including VLANs, routing, and high-performance switching. Design, implement, and maintain hybrid cloud connectivity across AWS, Azure, and Alicloud. Leverage automation tools like Terraform and Ansible to build and manage cloud network configurations. Implement secure cross-cloud connectivity solutions such as Direct Connect, ExpressRoute, and Alicloud VPN Gateway. Lead the implementation of Zero Trust security principles, including identity-based policies and network segmentation. Configure and manage security tools like Azure AD Conditional Access, AWS IAM, and Alicloud RAM to enhance identity and access management. Regularly review and strengthen compliance with security standards across on‑premises and cloud environments. Build automated network management workflows using Ansible and Python. Design and monitor real-time dashboards using tools like Grafana and Palo Alto Cortex to proactively identify performance and security issues. Create playbooks and scripts for network optimization and incident response. Conduct regular audits of network security configurations to ensure compliance with industry standards including NIST and ISO27001. Implement and manage advanced firewall features like application-based filtering, SSL decryption, and SD‑WAN policies. Analyze logs and network traffic to detect and mitigate potential threats using centralized tools. Work closely with cross‑functional teams to align network infrastructure with business objectives. Provide advanced support for escalated network issues, ensuring swift resolution. Train and mentor junior team members on advanced networking, automation, and security practices. Education & Experience Education And Basic Qualifications 5+ years of experience in advanced network administration or engineering. Expert‑level proficiency with Cisco Catalyst switches, Palo Alto firewalls, and Panorama. Hands‑on experience implementing and managing Grafana dashboards, Ansible playbooks, and Terraform scripts for network automation and monitoring. Strong knowledge of hybrid cloud networking, including VPCs, VNets, and cross‑cloud connectivity. Demonstrated expertise in Zero Trust architecture, including network segmentation and identity‑based security policies. Deep understanding of network security best practices and routing protocols such as OSPF and BGP. Authorized to work in the United States without sponsorship. Preferred Qualifications Cisco CCNP Enterprise or Security certification, or equivalent. Palo Alto PCNSE (Palo Alto Networks Certified Network Security Engineer) certification. AWS Certified Advanced Networking – Specialty or AWS Certified Solutions Architect – Associate certification. Microsoft Certified: Azure Network Engineer Associate or Azure Solutions Architect Expert certification. Alibaba Cloud Certified Professional (ACP) – Networking or Security Specialty certification. Experience with Mist Cloud and next‑gen Wi‑Fi solutions. Advanced knowledge of SD‑WAN solutions and multi‑cloud networking strategies. Familiarity with micro‑segmentation technologies and NAC solutions. Proven experience deploying centralized management platforms like Meraki, Panorama, or Grafana for a unified view of the network. Strong scripting skills in Python for automation and integration tasks. Disclaimer Compensation may vary based on the job level, your geographic work location, position incentive plan, and exemption status. Although we currently may consider hiring in the states listed below, not all positions are available in all locations, and work in a particular state is not guaranteed. Current list of states where iFIT may consider hiring: AK, AL, AR, AZ, CA, CO, CT, FL, GA, ID, IL, IN, KS, KY, LA, MA, MD, MI, MN, MO, MS, NC, NH, NJ, NV, NY, OH, OK, OR, PA, RI, SC, SD, TN, TX, UT, VA, WA, WI, WY. Subject to applicable state laws, your employment at iFIT is “at‑will.” At‑will employment means that you and the company each have the right to terminate the employment relationship at any time for any cause or for no cause at all. Pay Range: $80,000USD – $100,000USD iFIT does not discriminate in employment opportunities or practices on the basis of race, color, religion, sex, national origin, age, ancestry, mental or physical disability, sexual orientation, gender identity, medical condition, genetic information, marital status, veteran status or any other characteristic protected by law. #J-18808-Ljbffr