Senior Network Engineer

Where Banking Feels Like Belonging At APGFCU, our values are at the heart of everything we do, empowering us as leaders in the credit union movement. We prioritize purpose and connection in how we serve our members, co-workers and communities - helping to navigate life's little and big moments.

WHO WE ARE:

AS A MEMBER-OWNED, NOT-FOR-PROFIT CREDIT UNION, APG FEDERAL CREDIT UNION (APGFCU®) EMPOWERS OUR MEMBERS WITH FINANCIAL PRODUCTS AND SERVICES TO SUPPORT THEM AT EVERY STAGE OF THEIR FINANCIAL LIVES, HELPING THEM BECOME MONEY SMART AND FINANCIALLY INDEPENDENT. WE PROUDLY SERVE PEOPLE IN:

* HARFORD COUNTY

* CECIL COUNTY

* BALTIMORE COUNTY

* BALTIMORE CITY

WE BELIEVE BANKING SHOULD FEEL PERSONAL, SUPPORTIVE, AND HUMAN. THAT GOES FOR OUR MEMBERS AND OUR EMPLOYEES. HERE, YOU’RE NOT JUST FILLING A ROLE — YOU’RE

MAKING A DIFFERENCE IN YOUR COMMUNITY.

OUR TEAM LIFTS EACH OTHER UP AND OUR LEADERS INVEST IN YOUR GROWTH. WE CELEBRATE WINS, RECOGNIZE AND VALUE CONTRIBUTIONS, AND SUPPORT EACH OTHER THROUGH CHALLENGES. WE STRIVE FOR MEANINGFUL CONNECTIONS ACROSS OUR TEAMS, BECAUSE

THAT’S WHAT BELONGING IS ALL ABOUT.

LET’S BUILD SOMETHING MEANINGFUL TOGETHER.

ROLE SUMMARY: UNDER THE GENERAL DIRECTION OF THE VP OF IT INFRASTRUCTURE, THE SENIOR NETWORK ENGINEER IS RESPONSIBLE FOR THE ARCHITECTURE, DESIGN, IMPLEMENTATION, OPTIMIZATION, AND SUPPORT OF THE CREDIT UNION’S ENTERPRISE NETWORK INFRASTRUCTURE ACROSS ALL MANAGED PHYSICAL AND CLOUD ENVIRONMENTS. THIS ROLE SERVES AS THE LEAD NETWORK AUTHORITY, PROVIDING STRATEGIC DIRECTION, ADVANCED TECHNICAL EXPERTISE, AND OVERSIGHT OF COMPLEX NETWORK ENVIRONMENTS INCLUDING ROUTING, SWITCHING, FIREWALLS, SD-WAN, WIRELESS, CLOUD NETWORKING, AND NETWORK SECURITY. THE SENIOR NETWORK ENGINEER LEADS CRITICAL INFRASTRUCTURE INITIATIVES, ENSURES HIGH AVAILABILITY AND PERFORMANCE, AND COLLABORATES CLOSELY WITH INTERNAL TEAMS AND EXTERNAL PARTNERS TO ALIGN NETWORK CAPABILITIES WITH

BUSINESS OBJECTIVES AND REGULATORY REQUIREMENTS.

KEY RESPONSIBILITIES:

NETWORK ARCHITECTURE & ENGINEERING (60%):

* ARCHITECT, DESIGN, AND MAINTAIN ON-PREMISES, BRANCH, COLOCATION, AND CLOUD NETWORKS, INCLUDING LAN/WAN, SD-WAN, VPN, VTI, WIRELESS, FIREWALLS, IPS/IDS,

AND CLOUD NETWORKING.

* DESIGN AND MANAGE SCALABLE, HIGHLY AVAILABLE NETWORK SOLUTIONS WITH

REDUNDANCY, FAILOVER, AND DISASTER RECOVERY.

* DESIGN, IMPLEMENT, AND MAINTAIN ADVANCED ROUTING AND SWITCHING CONFIGURATIONS, INCLUDING BGP, EIGRP, OMP, OSPF, VLANS, AND QOS. * ENGINEER AND MANAGE SECURE CONNECTIVITY ACROSS HYBRID AND MULTI-CLOUD

ENVIRONMENTS.

• MAINTAIN ACCURATE NETWORK DIAGRAMS, STANDARDS, AND DOCUMENTATION.
• TROUBLESHOOT AND PERFORM ROOT CAUSE ANALYSIS FOR NETWORK OUTAGES,

PERFORMANCE, AND LATENCY ISSUES.

* PARTNER WITH CROSS-FUNCTIONAL TEAMS TO TRANSLATE BUSINESS NEEDS INTO NETWORK

SOLUTIONS.

* DESIGN, ENGINEER, AND MANAGE AZURE VIRTUAL NETWORKING AND COMPUTE

INFRASTRUCTURE.

• AUTOMATE TASKS AND CONFIGURATIONS USING POWERSHELL AND OTHER SCRIPTING TOOLS.
• VISIT SITES AS NEEDED TO IMPLEMENT, CONFIGURE, AND INSTALL NETWORK

INFRASTRUCTURE FOR BRANCHES AND DATA CENTERS.

* DESIGN AND MAINTAIN OFFSITE AND CLOUD INFRASTRUCTURE; SUPPORT ANNUAL DISASTER

RECOVERY TESTING AND RPO ACHIEVEMENT.

* MONITOR ON-PREMISES, IAAS, AND CLOUD SYSTEMS FOR PERFORMANCE, CAPACITY, AND

ISSUES.

* SERVE AS THE TOP ESCALATION POINT FOR ENTERPRISE NETWORKING ISSUES AND

SUPPORT RELATED SYSTEMS, HARDWARE, AND SERVERS.

* LEAD IT PROJECTS AND PROVIDE INFRASTRUCTURE EXPERTISE IN AZURE, CONNECTIVITY,

ACCESS, PATCHING, DR, AND BACKUP.

* MAINTAIN ON-PREMISES AND CLOUD DOCUMENTATION, LICENSING, INVENTORY, AND

CHANGE MANAGEMENT RECORDS.

CLOUD NETWORKING SERVICES (10%):

* DESIGN AND MANAGE AZURE CLOUD NETWORKING, INCLUDING VIRTUAL NETWORKS AND

HYBRID CONNECTIVITY.

* DEPLOY, CONFIGURE, AND MANAGE SECURE, SCALABLE, HIGH-PERFORMING AZURE

SERVICES.

* IMPLEMENT CLOUD MONITORING, TUNING, LOAD BALANCING, AND SECURE

ON-PREMISES-TO-CLOUD CONNECTIVITY.

* AUTOMATE PROVISIONING AND CONFIGURATION USING POWERSHELL, PYTHON, AND

INFRASTRUCTURE AS CODE.

PROJECT & VENDOR MANAGEMENT (10%):

• LEAD TECHNICAL INFRASTRUCTURE DEPLOYMENTS, UPGRADES, AND MIGRATIONS.
• MANAGE KEY NETWORKING VENDORS, INCLUDING ISPS, HARDWARE, SOFTWARE, AND

OPERATIONAL SUPPORT PARTNERS.

* USE ITSM, SMARTSHEET, JIRA, AND SIMILAR TOOLS TO ORGANIZE, TRACK, AND DELIVER

WORK USING AGILE PRACTICES.

• EVALUATE PROPOSALS AND MANAGE APPROVED PROJECTS THROUGH THE FULL LIFECYCLE.
• ENSURE TECHNICAL SPECIFICATIONS ALIGN WITH INFRASTRUCTURE STANDARDS AND

ENTERPRISE IT PROJECT REQUIREMENTS.

NETWORK SECURITY & IT + ISO COLLABORATION (10%):

* DESIGN AND IMPLEMENT NETWORK SECURITY ARCHITECTURE, INCLUDING FIREWALLS,

IDS/IPS, SEGMENTATION, AND ZERO TRUST.

* MONITOR NETWORK TRAFFIC AND SECURITY EVENTS TO IDENTIFY THREATS AND

VULNERABILITIES.

* PARTNER WITH IT LEADERSHIP ON LAYERED SECURITY STRATEGY AND COMPLIANCE WITH

APGFCU, NCUA, REGULATORY, AND INDUSTRY STANDARDS.

* LEAD NETWORK SECURITY INCIDENT RESPONSE THROUGH RESOLUTION.

PROFESSIONAL DEVELOPMENT (5%):

* PARTNER WITH TEAMS TO UNDERSTAND BUSINESS NEEDS AND DELIVER NETWORK

SOLUTIONS.

* MAINTAIN ADVANCED CERTIFICATIONS AND PURSUE PROFESSIONAL DEVELOPMENT.

* SHARE KNOWLEDGE AND MENTOR IT TEAM MEMBERS.

ADDITIONAL RESPONSIBILITIES (5%):

* SUPPORT EVOLVING BUSINESS AND TEAM PRIORITIES THROUGH OTHER DUTIES AND

SPECIAL PROJECTS.

* PROVIDE AFTER-HOURS AND ON-CALL SUPPORT FOR HIGH-PRIORITY INCIDENTS AND

OUTAGES AS NEEDED.

* SUPPORT SYSTEMS ENGINEERS, THE SERVICE DESK, AND THE BROADER IT TEAM.

* PERFORM OTHER ASSIGNED DUTIES.

* PHYSICAL DEMANDS: MOST OF YOUR TIME WILL BE SPENT WORKING AT A COMPUTER, PERFORMING NETWORK ADMINISTRATION AT REMOTE SITES, COLLABORATING IN MEETINGS, AND CONNECTING WITH COLLEAGUES AND STAKEHOLDERS. OCCASIONALLY, YOU MAY ATTEND EVENTS, MOVE BETWEEN WORKSPACES, TRAVEL FOR BUSINESS, OR HELP TRANSPORT MATERIALS WEIGHING UP TO 30 POUNDS. WE’RE COMMITTED TO PROVIDING REASONABLE ACCOMMODATION TO SUPPORT EMPLOYEES IN PERFORMING THE ESSENTIAL

RESPONSIBILITIES OF THE ROLE.

A TYPICAL DAY IN THE ROLE:

* LEAD DAY-TO-DAY PRIORITIES: MANAGE CORE RESPONSIBILITIES, PARTICIPATE IN TECHNOLOGY MEETINGS, IDENTIFY AND ORGANIZE WORK, PERFORM NETWORK DESIGN, CONFIGURATION, IMPLEMENTATION ACTIVITIES, AND FOCUS ON THE ACTIVITIES THAT

DRIVE SUCCESS IN THE ROLE.

* COLLABORATE WITH STAKEHOLDERS: PARTNER WITH TEAM MEMBERS, LEADERS, STAKEHOLDERS, AND CROSS-FUNCTIONAL COLLEAGUES TO SHARE UPDATES, SOLVE

PROBLEMS, AND MOVE INITIATIVES FORWARD.

* CREATE AND REVIEW WORK PRODUCTS: CREATE NETWORK DIAGRAMS, UPDATE/MAINTAIN DOCUMENTATION, WRITE OPERATIONAL SCRIPTS FOR DEVICE CONFIGURATION, DEVELOP AUTOMATED SOLUTIONS, AND CREATE OTHER MATERIALS THAT SUPPORT BUSINESS

OBJECTIVES.

* MONITORING AND VISIBILITY: SUPPORT FULL OBSERVABILITY AND MONITOR NETWORK TRAFFIC ACROSS ALL TOUCHPOINTS, CONFIGURE POLICIES, QOS, SLAS, AND OTHER ALERTS AND TRIGGERS TO PROACTIVELY MANAGE AND SCALE NETWORK OPERATIONAL

PERFORMANCE AND CAPABILITIES.

* IDENTIFY OPPORTUNITIES FOR IMPROVEMENT: LOOK FOR WAYS TO HARDEN AND IMPROVE NETWORK EFFICIENCY WITH EFFECTIVE SECURITY. RE-DESIGN CONTROLS AND CONFIGURATIONS TO OPTIMIZE PERFORMANCE. CONTINUOUSLY IMPROVE NETWORK INFRASTRUCTURE WHILE KEEPING DEVICES AND SYSTEMS COMPLIANT TO MINIMIZE

OPERATIONAL RISKS.

* STAY RESPONSIVE AND ADAPT TO CHANGING PRIORITIES: MANAGE EMAILS, MESSAGES, AND REQUESTS WHILE BALANCING PLANNED WORK WITH EMERGING BUSINESS NEEDS AND

OPPORTUNITIES.

QUALIFICATIONS:

* RELEVANT EXPERIENCE AND EDUCATION: 7–10+ YEARS OF PROGRESSIVE EXPERIENCE IN ENTERPRISE NETWORK ENGINEERING REQUIRED. BACHELOR’S DEGREE IN COMPUTER SCIENCE, INFORMATION SYSTEMS, OR A RELATED TECHNICAL FIELD PREFERRED; EQUIVALENT EXPERIENCE MAY BE CONSIDERED IN LIEU OF EDUCATION. * CERTIFICATIONS: MUST HAVE CISCO CCNA OR HIGHER CISCO CERTIFICATION, CCNP STRONGLY PREFERRED. CERTIFICATIONS IN THE FOLLOWING AREAS ARE PREFERRED: PALO

ALTO NETWORKS, MICROSOFT AZURE

* ADDITIONAL DESIRED EXPERIENCE: ADVANCED EXPERIENCE WITH CISCO, PALO ALTO, OR SIMILAR ENTERPRISE NETWORKING TECHNOLOGIES. STRONG EXPERTISE IN ROUTING/SWITCHING PROTOCOLS (BGP, OSPF, EIGRP, OMP). PROVEN EXPERIENCE WITH SD-WAN, VPN TECHNOLOGIES, AND NETWORK SEGMENTATION. HANDS-ON EXPERIENCE WITH CLOUD NETWORKING (AZURE, AWS) AND HYBRID ENVIRONMENTS. EXPERIENCE WITH FIREWALLS, IDS/IPS, AND NETWORK SECURITY FRAMEWORKS. EXPERIENCE LEADING LARGE-SCALE INFRASTRUCTURE OR NETWORK TRANSFORMATION PROJECTS. PROFICIENCY WITH SCRIPTING AND AUTOMATION TOOLS (POWERSHELL, PYTHON). * PROBLEM‑SOLVING MINDSET: YOU ENJOY DIGGING INTO CHALLENGES, FINDING

SOLUTIONS, AND IMPROVING HOW THINGS GET DONE.

* COMFORT WITH TOOLS AND TECHNOLOGY: YOU’RE FAMILIAR WITH THE SYSTEMS OR SOFTWARE THIS ROLE USES, OR YOU’RE CONFIDENT YOU CAN LEARN THEM QUICKLY. * ABILITY TO WORK INDEPENDENTLY: YOU CAN TAKE OWNERSHIP OF YOUR WORK, MANAGE YOUR TIME WELL, AND KEEP THINGS MOVING WITHOUT NEEDING CONSTANT DIRECTION. * ADAPTABILITY AND FLEXIBILITY: YOU’RE COMFORTABLE NAVIGATING CHANGE, SHIFTING

PRIORITIES, AND LEARNING AS YOU GO.

• ATTENTION TO DETAIL: YOU TAKE PRIDE IN PRODUCING ACCURATE, HIGH‑QUALITY WORK.
• COMMITMENT TO GROWTH: YOU’RE CURIOUS, OPEN TO FEEDBACK, AND EXCITED TO KEEP

DEVELOPING YOUR SKILLS.

WHAT SUCCESS LOOKS LIKE:

* DELIVERS GREAT WORK: CONSISTENTLY PRODUCES HIGH-QUALITY, ACCURATE, AND TIMELY WORK THAT CUSTOMERS, STAKEHOLDERS, AND TEAM MEMBERS CAN RELY ON. THE WORK PRODUCED IN THIS ROLE MUST BE ABLE TO WITHSTAND REGULATOR SCRUTINY AND BE PRESENTABLE TO AN AUDIENCE AS DISCERNING AS THE BOARD OF DIRECTORS. * MEETS AND EXCEEDS EXPECTATIONS: SUCCESSFULLY ACHIEVES GOALS, MILESTONES, AND PERFORMANCE OBJECTIVES WHILE HELPING ADVANCE BROADER TEAM AND BUSINESS PRIORITIES. MANAGES WORK EFFECTIVELY USING WORK MANAGEMENT TOOLS, CREATES VISIBILITY AND TRANSPARENCY AROUND DELIVERY OF WORK PRODUCTS AND COMPLETED

ASSIGNMENTS.

* BUILDS STRONG RELATIONSHIPS: DEVELOPS TRUSTED PARTNERSHIPS WITH COLLEAGUES, LEADERS, CUSTOMERS, AND CROSS-FUNCTIONAL TEAMS TO COLLABORATE EFFECTIVELY AND ACHIEVE SHARED GOALS. WORKS CLOSELY WITH SENIOR IT LEADERS AS WELL AS KEY LEADERS AND STAKEHOLDERS ON BEHALF OF THE IT DEPARTMENT. * CONTRIBUTES TO TEAM SUCCESS: SUPPORTS COLLEAGUES, SHARES KNOWLEDGE, AND FOSTERS A POSITIVE, COLLABORATIVE ENVIRONMENT WHERE EVERYONE CAN DO THEIR BEST WORK. THE IT TEAM HAS A STRONG UNIFIED CULTURE THAT THIS ROLE MUST

CONTRIBUTE TO.

COMPENSATION:

$103,000 TO $175,200 ANNUALLY

OFFERS ARE BASED ON EXPERIENCE AND EDUCATION.

EQUAL OPPORTUNITY EMPLOYER

APGFCU IS PROUD TO BE AN EQUAL OPPORTUNITY AND AFFIRMATIVE ACTION EMPLOYER. WE ARE COMMITTED TO CREATING A WORKPLACE WHERE EVERYONE FEELS WELCOME AND SUPPORTED. EMPLOYMENT DECISIONS ARE MADE WITHOUT REGARD TO RACE, COLOR, RELIGION, SEX, NATIONAL ORIGIN, AGE, DISABILITY, OR ANY OTHER PROTECTED STATUS UNDER APPLICABLE FEDERAL, STATE, OR LOCAL LAW. IF AN ACCOMMODATION IS NEEDED DURING THE HIRING PROCESS, PLEASE EMAIL View email address on click.appcast.io [View email address on click.appcast.io]. EMPLOYMENT WITH APGFCU IS AT-WILL, MEANING THAT EITHER YOU OR APGFCU MAY TERMINATE THE EMPLOYMENT RELATIONSHIP AT ANY TIME, WITH OR WITHOUT CAUSE OR

NOTICE.

APGFCU participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. You can view the details by clicking here [ or returning to the careers homepage. APGFCU participa en E-Verify y proporcionará al gobierno federal la información de su Formulario I-9 para confirmar que usted está autorizado para trabajar en los EE.UU.. Puede ver los detalles haciendo clic aquí [ o regresando a la página de inicio de carreras profesionales.