Network Engineer
Location: Fairmont, WV, On-Site Required
We are seeking an experienced senior-level Network Engineer Senior-Level, in coordination with Government, to perform a variety of complex network engineering tasks independently which are broad in nature and are concerned with the design and implementation of integrated networks, including personnel, hardware, software, and support facilities and/or equipment. Lead major technical/engineering network activities of higher complexity and importance than those normally assigned to lower-level engineers. Plan and perform network-engineering research, design development, and other assignments in conformance with network design, engineering and customer specifications. Responsible for the completion of assigned engineering projects within budgetary and scheduling guidelines. Leads a group of engineers, analysts, and/or technicians assigned for the duration of a project or may function as ongoing lead within a group associated with one of more technical areas. Supervise team of Network Engineers.
Duties and Responsibilities
Alcatel-Lucent Switch Administration
- Design, configure, deploy, and maintain Alcatel-Lucent Enterprise (ALE) OmniSwitch infrastructure across LAN environments
- Build and maintain VLAN architecture, spanning tree configurations, and link aggregation across the switch fleet
- Perform switch firmware upgrades, patching, and lifecycle management to keep infrastructure current and secure
- Troubleshoot switching-layer issues, including port errors, VLAN misconfigurations, and inter-switch connectivity problems
- Plan and execute switch replacements, stack expansions, and capacity upgrades as the network grows
OmniVista Management
- Manage and monitor the switch fleet through OmniVista Network Management System
- Build and maintain configuration templates to standardize switch deployments and reduce configuration drift
- Use OmniVista dashboards and alerting to proactively identify device health issues, port errors, and abnormal traffic patterns
- Coordinate firmware rollouts and configuration changes across multiple sites using OmniVista's centralized management tools
- Maintain accurate device inventory and topology views within the platform
Fortinet FortiGate Firewall Administration
- Configure and maintain FortiGate firewall policies to enforce network segmentation and security controls
- Manage routing configurations and high availability (HA) pairs to ensure firewall resiliency
- Apply and tune security profiles, including intrusion prevention, application control, and web filtering
- Perform firmware upgrades and patching on FortiGate appliances in line with vendor security advisories
- Troubleshoot firewall-related connectivity and performance issues in coordination with the security team
FortiAnalyzer & Log Management
- Utilize FortiAnalyzer for centralized log aggregation across FortiGate devices
- Build and maintain reports and dashboards for traffic analysis, security event trends, and compliance reporting
- Correlate security events across the network to support incident detection and investigation
- Tune log retention, storage, and alerting policies to align with organizational and compliance requirements
802.1X & Certificate-Based Network Access Control (ClearPass)
- Design and manage 802.1X network access control policies using Aruba ClearPass
- Implement and maintain certificate-based authentication (EAP-TLS) for wired and wireless endpoints
- Manage PKI/certificate lifecycle for network authentication, including issuance, renewal, and revocation of client and device certificates
- Build and maintain ClearPass policy enforcement rules, role mapping, and endpoint profiling
- Support onboarding workflows for new devices and troubleshooting authentication failures for end users and IT staff
- Coordinate with endpoint/device teams to ensure certificate deployment aligns with authentication policy requirements
Network Operations & Documentation
- Troubleshoot complex, multi-layer network issues spanning switching, routing, firewall, and NAC systems
- Develop and maintain network documentation, including topology diagrams, standard operating procedures, and configuration baselines
- Participate in on-call rotation and respond to network incidents to minimize downtime
- Collaborating with cross-functional IT teams on projects involving network connectivity, security, and infrastructure changes
- Stay current with vendor firmware releases, security advisories, and industry best practices
Basic Qualifications
- Bachelor’s degree or AA/AS Degree required
- 10-15+ years of experience in enterprise network engineering or administration
- Hands-on experience configuring and troubleshooting Alcatel-Lucent Enterprise switches (OmniSwitch series)
- Experience managing switch infrastructure through OmniVista
- Working knowledge of Fortinet FortiGate firewall administration (policies, routing, HA)
- Experience with FortiAnalyzer or similar log management/reporting tools
- Experience implementing 802.1X authentication with ClearPass (or similar NAC platform), including certificate-based (EAP-TLS) authentication
- Solid understanding of PKI concepts and certificate management
- Strong foundation in networking fundamentals: VLANs, spanning tree, routing protocols (OSPF/BGP), QoS, and network security
- Ability to troubleshoot complex, multi-layer network issues independently
- Excellent documentation and communication skills
- Must be able to lift and carry 50 lbs. for up to 100 feet at a time; must be able to lift 25 lbs. vertically using ladders
- Must be able to work in confined spaces, such as raised floors or communications closets; must be able to work in noisy environments, such as data centers and operations centers; must be able to stand or sit for 8 hours at a time
Preferred Qualifications
- Industry certifications such as ACSA/ACSE (Alcatel-Lucent), NSE (Fortinet), or CPCA/CPCE (ClearPass)
- Scripting/automation experience (Python, Ansible) for network configuration management
- Experience in a regulated or security-conscious industry
- CCNA/CCNP or equivalent vendor-neutral networking certification