Sr. Network Engineer

The Senior Network Engineer is the technical owner for the design, implementation, monitoring, and ongoing support of the company’s hybrid network environment and leads the network function, including cloud network operations. This role is responsible for secure, reliable connectivity across offices, retail locations, warehouse facilities, AWS and Azure cloud environments, and remote users, including Cisco and Meraki switching and wireless infrastructure and Palo Alto firewalls and virtual private network (VPN) services. A key objective of the role is modernizing cloud connectivity by removing the company’s dependency on Cisco cloud services routers and replacing them with cloud-native technologies for Azure-to-AWS and cloud-to-site communication. Working independently and in partnership with Infrastructure, Security, DevOps, application teams, business stakeholders, and vendors, the engineer establishes standards, leads network projects, resolves complex incidents, and improves the performance, resilience, security, and scalability of the network.

• Serve as the network subject matter expert and technical owner for the architecture, configuration, implementation, monitoring, maintenance, and lifecycle management of the hybrid network environment.
• Provide technical guidance and mentoring to other engineers.
• Configure and support Cisco and Meraki switching, routing, wireless, and site connectivity across offices, retail locations, and warehouse facilities.
• Configure, administer, and continuously improve Palo Alto firewalls, security policies, site-to-site VPNs, remote-access VPN services, and related network security capabilities.
• Own the design and execution of the cloud connectivity roadmap, removing dependency on Cisco cloud services routers and implementing cloud-native networking (such as AWS Transit Gateway, Azure Virtual WAN and VPN gateways, and native private connectivity) for Azure-to-AWS and cloud-to-site communication.
• Partner with DevOps on cloud network standards, security controls, and infrastructure-as-code for cloud networking.
• Lead the design and deployment of networks for new facilities and the upgrade of existing sites, including expansions and relocations, covering requirements gathering, design, equipment selection, implementation, testing, documentation, and transition to operations.
• Monitor network availability, performance, capacity, configurations, logs, and security events; establish actionable alerts, identify trends, and resolve issues before they materially affect business operations.
• Troubleshoot complex routing, switching, wireless, firewall, VPN, DNS, DHCP, latency, packet-loss, and cloud-connectivity issues, coordinating with carriers and vendors as required.
• Keep network devices current on security patches, software, and firmware; implement configuration management, backup, vulnerability remediation, and change-control practices for physical and virtual network devices.
• Partner with the information security team to implement defense-in-depth, segmentation, least-privilege access, zero-trust principles, intrusion prevention, and appropriate logging and threat-correlation controls.
• Develop and maintain network architecture diagrams, configuration standards, operating procedures, asset records, support documentation, and disaster-recovery information.
• Participate in incident response, problem management, root-cause analysis, and corrective-action planning for network and security events.
• Automate repeatable network administration, validation, reporting, and monitoring activities using APIs and scripting where practical.
• Manage technical relationships with telecommunications carriers, managed service providers, and network technology vendors, including escalation and service-performance reviews; partner with the Contracts team on circuit, service, and renewal decisions.
• Participate in an on-call rotation for critical network services.

Education/ Experience:

• ​​Bachelor’s Degree in Computer Science or equivalent work experience and appropriate certifications may count towards degree requirement.  ​
• Seven or more years of progressively responsible network engineering experience, including substantial hands-on responsibility for enterprise physical-site and cloud networking environments.
• Demonstrated experience leading network implementations, migrations, upgrades, and complex production troubleshooting in a distributed organization.

**Skills an…