Senior Network Engineer

Job DescriptionJob Description:We are seeking a Senior Network Engineer to support, design, and maintain our enterprise network infrastructure. This role owns day-to-day network operations while also driving architecture and configuration work for new deployments and upgrades. The ideal candidate has deep hands-on expertise with Layer 2/Layer 3 switching, enterprise firewalls, and VPN technologies, and can troubleshoot complex issues across multi-vendor environments with minimal supervision. Security experience is a strong plus.Responsibilities include: Network Operations & SupportServe as an escalation point for complex network incidents, performing root cause analysis and driving issues to resolution within SLAMonitor network health, capacity, and performance; proactively identify and remediate bottlenecks before they impact usersTroubleshoot connectivity issues across VLANs, routing, switching, DNS, DHCP, TCP/IP, and WAN/ISP linksUse packet capture and network monitoring tools to diagnose latency, packet loss, and application performance problemsManage firmware upgrades, patching, and configuration backups following established change management proceduresParticipate in an on-call rotation and support scheduled maintenance windowsNetwork Design & ArchitectureDesign scalable, resilient LAN, WAN, and remote-access solutions that support business growthDevelop network diagrams, IP addressing schemes, VLAN plans, and routing designsEvaluate and recommend hardware, software, and circuits; participate in vendor selection and technical evaluationsLead network components of infrastructure projects — site build-outs, migrations, refreshes, and cloud connectivityDefine and maintain network standards, baseline configurations, and technical documentationConfiguration & ImplementationConfigure and maintain Layer 2/Layer 3 switches, including VLANs, trunking, spanning tree, port security, link aggregation, and inter-VLAN routingConfigure and maintain routing protocols (OSPF, BGP, EIGRP, static routing) across the enterprise WANAdminister enterprise firewalls: security policies, NAT, application control, and access control rulesBuild and maintain site-to-site IPsec VPN tunnels between offices, data centers, and third-party partners, including troubleshooting Phase 1/Phase 2 negotiation, rekeying, and tunnel stability issuesDeploy and support remote-access VPN (SSL/IPsec) for end users, including authentication integration and client troubleshootingImplement network segmentation and access control between environmentsCollaboration & DocumentationMaintain accurate network documentation, runbooks, and as-built diagramsProvide technical mentorship to junior engineers and help-desk staffWork with systems, application, and security teams on cross-functional initiativesCommunicate clearly with non-technical stakeholders during outages and project planningJob RequirementsRequirements: 7+ years of hands-on enterprise network engineering experience (or 5+ with a relevant degree) Expert-level knowledge of Layer 2/Layer 3 switching and routing in production environments Strong hands-on experience administering enterprise firewalls (e.g., Palo Alto, Fortinet, Cisco ASA/Firepower, Check Point) Proven experience designing, deploying, and troubleshooting site-to-site and remote-access VPNs Solid grasp of TCP/IP, subnetting, DNS, DHCP, NAT, QoS, and network security fundamentals Demonstrated ability to troubleshoot complex, cross-domain issues under pressure Experience working within formal change management and documentation practices Strong written and verbal communication skillsAdditional Skills Preferred (but not required): Security experience: firewall log analysis, incident response support, IDS/IPS, network segmentation, or vulnerability remediation Industry certifications: CCNP, CCIE, PCNSE, NSE 4+, JNCIP, CompTIA Security+, or equivalent Experience with NAC, 802.1X, RADIUS/TACACS+, or Zero Trust access models Cloud networking experience (AWS, Azure, or GCP — VPCs, transit gateways, VPN/Direct Connect) Wireless infrastructure experience (Cisco, Aruba, Meraki) SD-WAN deployment and management Hands-on experience with network automation frameworks and infrastructure-as-code practices (Python, Ansible, Terraform, Git) Experience with AIOps or AI-assisted network monitoring, observability, and analytics platforms Familiarity with compliance frameworks (NIST, PCI-DSS, HIPAA, SOC 2)Education & Experience: Bachelor's degree in Computer Science, Information Technology, Computer Engineering, Telecommunications, or a related technical field — or equivalent combination of education, certifications, and hands-on experience Demonstrated experience supporting multi-site environments with 2000+ users and/or multiple data centers or branch locations Experience operating in a 24/7 production environment with defined SLAs, change control, and on-call responsibilities Prior experience mentoring junior engineers or serving as a technical escalation point Active or recent industry certification (CCNA/CCNP or vendor-equivalent) required; advanced certifications (CCIE, PCNSE, NSE 4+) strongly preferredJob DetailsJob Type: Full-timeCategory: Information Technology