Sr Network Systems Engineer

Network Architecture & Engineering

• Design, implement, and maintain enterprise network infrastructure across multiple locations.

• Develop scalable architectures supporting on-premises, cloud, and hybrid environments.

• Lead network modernization initiatives focused on resiliency, security, and operational efficiency.

• Evaluate networking technologies and recommend standards aligned with business and security requirements.

• Create and maintain network diagrams, configuration standards, runbooks, and technical documentation.

Routing, Switching & Wireless

• Administer enterprise routing, switching, and wireless platforms.

• Configure and support Layer 2 and Layer 3 networking services, including VLANs, routing protocols, redundancy, and QoS.

• Perform capacity planning, performance tuning, and lifecycle management of network infrastructure.

Firewall & Security Engineering

• Design, implement, and manage enterprise firewall platforms and network security controls.

• Develop segmentation strategies, access policies, and least-privilege connectivity models.

• Partner with cybersecurity teams to investigate threats, remediate vulnerabilities, and improve security posture.

• Review and implement firewall rule changes in accordance with change management standards.

VPN & Secure Remote Access

• Design and support site-to-site, client-based, and remote-access VPN solutions.

• Troubleshoot secure connectivity for employees, contractors, partners, and third-party integrations.

• Optimize remote access services for security, performance, reliability, and user experience.

Network Access Control (NAC)

• Administer and enhance Network Access Control solutions.

• Develop policies for device authentication, posture validation, onboarding, and dynamic segmentation.

• Integrate NAC capabilities with identity, endpoint management, and security platforms.

• Support secure access for corporate, BYOD, contractor, and partner devices.

Zero Trust Network Architecture (ZTNA)

• Lead the design and adoption of Zero Trust networking principles and technologies.

• Implement identity-aware access, segmentation, continuous validation, and least-privilege controls.

• Partner with security, endpoint, identity, and cloud teams to expand ZTNA capabilities.

• Develop roadmaps that advance secure access and reduce reliance on traditional network trust boundaries.

Operations, Incident Response & Leadership

• Serve as an escalation point for complex network incidents, outages, and performance issues.

• Participate in on-call rotation, major incident response, root cause analysis, and corrective action planning.

• Plan and execute changes using established change management and maintenance processes.

• Provide technical leadership and mentorship to engineers and collaborate across infrastructure, security, cloud, and application teams.

• Bachelor's degree in Information Technology, Computer Science, Engineering, or equivalent practical experience.

• 8+ years of enterprise network engineering experience, including 5+ years supporting large-scale, multi-site environments.

• Advanced experience with enterprise firewalls, VPN technologies, routing and switching, network segmentation, NAC, and Zero Trust concepts.

• Strong understanding of TCP/IP, DNS, DHCP, VLANs, QoS, high availability, and dynamic routing protocols.

• Experience supporting highly available production environments and using network monitoring and troubleshooting tools.

• Excellent analytical, communication, collaboration, and technical documentation skills.

Preferred Qualifications

• Experience with Fortinet technologies such as FortiGate, FortiSwitch, FortiManager, FortiAuthenticator, FortiNAC, and FortiClient.

• Experience with Arista networking platforms and enterprise wireless solutions.

• Experience implementing Zero Trust Network Access solutions and cloud networking in Microsoft Azure.

• Experience supporting mergers, acquisitions, data center transitions, or large-scale infrastructure migrations.

• Experience in healthcare, financial technology, or another regulated industry.

• Familiarity with SOC 2, HITRUST, HIPAA, PCI DSS, or similar compliance frameworks.

Measures of Success

• Improve network availability, performance, and resiliency across enterprise locations.

• Advance the organization’s Zero Trust networking and secure remote access strategy.

• Enhance network segmentation, firewall governance, and access control maturity.

• Increase visibility and control of network-connected devices through NAC capabilities.

• Reduce operational risk through standardization, automation, lifecycle planning, and high-quality documentation.

• Deliver secure and scalable solutions that improve the employee technology experience.