Senior Network Engineer

Wilson Elser is a leading defense litigation law firm with more than 1400 attorneys in 46 offices throughout the United States. Founded in 1978, we rank among the top 100 law firms identified by The American Lawyer and 36 in the National Law Journal’s survey of the nation’s largest law firms.

The Position

We’re looking for a Senior Network Engineer to own and evolve our enterprise network across multi-site and cloud environments. You’ll be a key technical voice shaping infrastructure strategy, driving security posture through zero-trust principles, and ensuring high availability for business-critical systems — all while working remotely on a collaborative, senior-level team.

Key Responsibilities

Design & Architecture

• Architect scalable, resilient network solutions including routing/switching, SD-WAN, firewalls, VPN, QoS, and zero-trust segmentation.
• Define requirements, evaluate technologies, and lead infrastructure changes from design through implementation.
• Develop and maintain business continuity and disaster recovery plans for all network components.

Operations & Maintenance

• Perform proactive maintenance — patching, upgrades, tuning, and health monitoring across the networking estate.
• Manage vulnerability findings and vendor security advisories for network equipment and systems.
• Maintain accurate network documentation, configuration baselines, and topology diagrams.
• Own and resolve network-related incidents and service requests, driving issues to resolution.

Collaboration & Strategy

• Partner with security, infrastructure, and application teams to support firm-wide initiatives.
• Evaluate emerging technologies and translate their impact into actionable recommendations.
• Serve as a technical mentor and backup resource across the Network Engineering team.
• Communicate clearly with technical and non-technical stakeholders at all levels.

Qualifications

• 10+ years of hands-on network engineering experience across multi-site enterprise environments
• Bachelor’s degree in Computer Science, Information Technology, or a related field — or equivalent professional experience.
• Palo Alto Firewalls - Production deployment, policy management, and troubleshooting of Palo Alto NGFW (Panorama experience a strong plus).
• Cisco ACI - Hands-on experience with Nexus 9300/9000 series in ACI mode — fabric design, EPG/contract configuration, and troubleshooting.
• Proven ability to architect, implement, and troubleshoot complex, multi-vendor network infrastructure.
• Strong documentation habits — you leave networks better documented than you found them.
• Ability to translate ambiguous business requirements into clear, implementable technical designs.
• Excellent communication skills — comfortable presenting to both engineers and executives.
• Strong project management instincts with the ability to juggle multiple workstreams independently.
• A collaborative, team-first mentality balanced with the ability to drive work autonomously.
• Routing & Switching
  • Deep expertise in enterprise routing protocols (OSPF, BGP) and switching (VLANs, port channels, spanning tree, QoS) across multi-site environments.
  • Cisco certification at the professional or expert level (CCNP, CCDP, or CCIE) strongly preferred.
  • Experience in professional services, financial services, or legal industry environments.
  • Familiarity with network automation tooling (Ansible, Python/Netmiko, Terraform for network infra).
  • Experience with public cloud networking (AWS, Azure) and hybrid connectivity patterns.
  • Exposure to Panorama for centralized Palo Alto management at scale.
• Core Networking
  • SD-WAN (Silver Peak / HPE Aruba EdgeConnect) — deployment, policy, and optimization
  • DMVPN, IPSec VPN, and secure remote access architectures
  • Load balancing (Citrix NetScaler / ADC) — configuration, SSL offload, and health monitoring
  • Wireless networking via Cisco Meraki — deployment, RF planning, and troubleshooting
  • Network tapping and packet capture solutions for visibility and forensics
• Security & Zero Trust
  • Zscaler (ZIA/ZPA) — implementation, policy configuration, and troubleshooting
  • ACL development and firewall policy lifecycle management
  • Zero-trust network segmentation principles and implementation
  • WAF configuration and proxy infrastructure
• Collaboration & Voice
  • Cisco Call Manager (CUCM) and Unity Connection — administration and troubleshooting
  • Network…