Network Engineer

Position: Network Engineer

Company: NAPCO Security Technologies, Inc.

Location: Amityville, NY

Reports to: Vice President, IT

Company: NAPCO Security Technologies, a worldwide leader in the design and manufacturing of reliable, innovative solutions for physical security, access control, locking, cellular communications, sub-GHz wireless communications, cloud-based systems and commercial fire protection for residential, commercial & institutional premises and campuses for over 50 years, headquartered in Amityville, Long Island NY, seeks a Mid-Senior Network Engineer to join our IT team in a hands-on, on-site role focused on strengthening and modernizing our network infrastructure. This position will play a key role in reconfiguring the internal network, organizing and securing VPN connectivity, and maintaining secure, well patched network infrastructure aligned with cybersecurity and compliance best practices, including SOX and the NIST Cybersecurity Framework (CSF). This is an execution focused role for an experienced engineer who enjoys working directly with network hardware, supporting all NAPCO infrastructure, improving stability and security, and partnering with internal teams and vendors.

Responsibilities:

• Configure, maintain, and support enterprise network infrastructure, including:
• Fortinet firewalls
• Juniper switches
• Wireless networking (Wi-Fi / Access Points)
• Multi‑ISP WAN connectivity and failover configurations
• SD WAN solutions
• Support network equipment and connectivity across the NAPCO Landscape.
• Execute internal network improvements such as VLAN cleanup, routing optimization, segmentation, and resiliency enhancements.
• Implement and maintain Voice VLAN configurations and Quality of Service (QoS) policies to support reliable VoIP traffic and prioritize latency‑sensitive applications.
• Monitor network performance, availability, and capacity using vendor agnostic monitoring and alerting tools.
• Troubleshoot and resolve network issues impacting corporate users, operational systems, wireless networks, and voice traffic quality.
• Perform hardware and network device patching, firmware upgrades, and maintenance to ensure systems remain secure, supported, and reliable.
• Address network related vulnerabilities in coordination with security partners, IT leadership, and change management processes.
• Manage and optimize internet connectivity across multiple ISPs, including performance tuning, redundancy, and failover.
• Implement and maintain:
• Site to site VPNs
• Remote access VPNs
• Secure access for vendors, partners, and third parties
• Help standardize VPN access models aligned with least privilege and Zero Trust principles.
• Resolve connectivity and access issues for on site, remote, and operational users.
• Support network security controls aligned with the NIST Cybersecurity Framework (CSF).
• Participate in network related security incident triage, root cause analysis, and remediation.
• Support SOX relevant IT General Controls (ITGCs) by maintaining documentation and audit evidence.
• Ensure network configurations, standards, patches, and changes are properly documented to support audit readiness, operational continuity and reduced key person dependency.
• Support connectivity between on premises environments and cloud platforms (e.g., Azure or AWS).
• Assist with hybrid networking initiatives as the environment evolves under guidance from IT leadership.
• Provide hands-on, on-site support for network equipment across all NAPCO environments.
• Serve as an escalation point for MSPs and network service providers.
• Coordinate hardware lifecycle activities, including upgrades and end of support planning.
• Assist with change windows, maintenance activities, and scheduled upgrades.
• Participate in after-hours support or maintenance as needed.

Requirements:

• 5–10 years of experience in network engineering or infrastructure roles.
• Preferred certifications include Fortinet Certified Professional (FCP) Network Security, Juniper JNCIA/JNCIS, Cisco CCNA or CCNP, CompTIA Security+ or CySA+, Microsoft Azure Network Engineer Associate, or equivalent networking and cybersecurity certifications.
• Hands on experience with:
• Fortinet firewalls
• Juniper switching environments
• VPNs and SD WAN technologies
• Wireless networking (enterprise Wi-Fi / access points)
• Voice VLANs and QoS for VoIP traffic
• Experience supporting corporate network environments. -…