Principal Network Engineer

Job Description Owner's mindset - architecture, design, continuous improvement, documentation. The Senior Network Engineer is responsible for the design, implementation, maintenance, and optimization of enterprise network infrastructure. This role provides advanced (Tier 3) technical support and leads the delivery of complex network solutions across LAN/WAN environments. Operating as a senior individual contributor, this role applies deep technical expertise to solve complex problems, improve system performance, and has an owner's mindset to the architecture, documentation, delivery, and continuous improvement of infrastructure initiatives. The role works independently within established standards and actively contributes to day-to-day activities and managed projects. The ideal candidate will have strong experience designing, implementing, and supporting enterprise network infrastructure, with expertise in Cisco routing and switching technologies, WatchGuard firewalls, AWS networking services, Infrastructure as Code, and utilizing Generative Developer tools. This role will be responsible for maintaining network reliability, security, and performance across both on‑premises and cloud environments. Candidates who possess experience with certificate lifecycle management platforms, particularly Venafi, will be given additional consideration. Key Responsibilities Provide Tier 3 support for enterprise LAN/WAN environments, including routers, switches, firewalls, and network security devices Design, implement, and maintain network infrastructure solutions aligned with established architectural standards Troubleshoot complex network issues and drive timely resolution to ensure service stability and performance Execute network changes, upgrades, and patching activities through formal change management processes Optimize network performance, reliability, and cost efficiency across infrastructure components Contribute to the delivery of moderately to highly complex projects , including planning, implementation, and validation Partner with internal teams (e.g., security, infrastructure, application teams) to support integrated solutions Design and support AWS networking solutions, including: Amazon VPCs Transit Gateway Direct Connect Site-to-Site VPN Route Tables and Network ACLs Security Groups Load Balancing and Hybrid Connectivity Document network designs, configurations, procedures, and support models to ensure operational continuity Provide technical guidance and mentorship to junior team members and support knowledge sharing within the team Qualifications Required 5+ years of experience in network engineering within enterprise environments Current AWS Certified Advanced Networking – Specialty certification Strong hands‑on experience with: Cisco routing and switching (IOS, Nexus, enterprise hardware platforms) Network protocols (e.g., BGP, MPLS, EIGRP) Administering and troubleshooting WatchGuard firewall solutions, VPNs, and network security technologies Advanced proficiency in Infrastructure as Code (IaC) using Terraform or AWS CloudFormation , paired with experience utilizing Generative AI developer tools (e.g., Amazon Q , Amazon Bedrock , or AI coding assistants) to accelerate code generation, automate network compliance validation, and scale CI/CD network deployment pipelines Deep expertise designing and optimizing high‑performance AWS cloud network architectures tailored for AI/ML workloads . Demonstrated ability to configure and scale data‑transfer pipelines to Amazon S3 and compute clusters, managing high‑bandwidth, ultra‑low‑latency traffic patterns. Knowledge of advanced networking protocols and mechanisms for AI data clusters (e.g., congestion control protocols, minimizing packet loss, and maximizing throughput) to support seamless Large Language Model (LLM) training and inference deployments Experience supporting and maintaining large‑scale LAN/WAN environments Strong troubleshooting, diagnostic, and problem‑solving capabilities Knowledge of Zero Trust and modern network security architectures Experience with change management and operational support processes Strong written and verbal communication skills Bachelor's degree or equivalent experience Preferred Cisco or security certifications (e.g., CCNP, CCIE, CCSE) Experience with network security tools (IDS/IPS, SIEM, proxies, etc.) Experience with Venafi certificate lifecycle management and PKI administration. Exposure to virtualization environments (e.g., VMware) Salary Range Salary Range: 28,700 - 37,000 EEO & Equal Opportunity Information We will make reasonable accommodations to the known physical or mental limitation of otherwise‑qualified individuals with disabilities or special disabled veterans, unless the accommodation would impose an undue hardship on the operation of our business. Please email View email address on click.appcast.io to request an accommodation. For applicants residing in California, please read our employee California Privacy Policy and Notice. We do not require or administer lie detector tests as a condition of employment or continued employment. Sun Life will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws, including applicable fair chance ordinances. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. #J-18808-Ljbffr Sun Life