Sr. Network Engineer

Job Description – Senior Network Engineer

Location:

Andover, MA (On-site) Job Type: Full-time Position Summary

Demoulas Super Markets, Inc. (Market Basket) is seeking a Senior Network Engineer to join our IT Infrastructure team. This is a hands‑on engineering and architecture role focused on the design, implementation, and operational excellence of a large-scale, multi‑site enterprise network.

The ideal candidate will bring deep expertise in routing, switching, WAN, LAN, wireless, and core network services, supporting both data center and end‑user access environments. This role complements an experienced network administrator and is intended to add architectural depth, ensure resiliency, and drive modernization efforts.

As Market Basket advances its network strategy, this role will also support closer integration with network security, helping to align connectivity with modern security principles such as ZTNA, SSE, etc. We are looking for a candidate who can serve as a key partner in creating a unified, forward‑looking approach to network and security architecture, ensuring that security becomes a seamless, embedded feature of the overall connectivity strategy.

• Architect, deploy, and manage secure and scalable enterprise network infrastructures across:
• Corporate campuses and user access networks (wired/wireless)
• Data centers, including high‑availability and resilient fabrics
• Branch locations (retail stores, distribution centers)
• SD‑WAN & Edge Networks, including ISP partnerships
• Manage and maintain core network services such as DNS, DHCP, IPAM, and network segmentation
• Monitor and support wireless infrastructure to ensure coverage, capacity, and performance (Aruba preferred)
• Serve as a senior escalation point for complex network issues across environments
• Support hybrid connectivity strategies between on‑premises environments and cloud providers (Azure)
• Improve consistency and efficiency of deployments by developing and implementing network automation workflows (Python, REST APIs, Ansible)
• Conduct network performance analysis, capacity planning, and optimization
• Create and maintain network documentation, architecture diagrams, and configuration baselines
• Collaborate with infrastructure and operations teams to support high‑availability initiatives
• Provide technical guidance and mentorship to junior staff
• Support firewall administration in collaboration with the cybersecurity team, providing architectural input and operational alignment
• Contribute to the long‑term goal of integrating network and network security strategies, helping to evolve from separate disciplines to a unified, secure connectivity model
• Collaborate on future integration of SSE, secure edge, and adaptive access solutions

• Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent experience)
• 7+ years of experience in enterprise network engineering and design
• Strong background in designing and managing:
• Large‑scale routing and switching design and administration
• Data center networks (Layer 2/3, VXLAN/EVPN, HA)
• Wired, Wireless, & LAN (Aruba preferred)
• Branch/store networks and WAN connectivity
• Experience in implementing and managing network authentication and access control (802.1X, NAC, Clear Pass) and network access segmentation models (dynamic segmentation, role‑based access)
• Experience with Aruba Central, Orchestrator, and Edge Connect SD‑WAN environments preferred
• Strong understanding of network security principles and firewall architectures, with experience supporting or collaborating on policy and rule implementation
• Demonstrated experience in ZTNA, SSE, and security‑forward network architectures
• Proficiency with core networking services such as DNS, DHCP, IPAM, routing protocols (OSPF, BGP), VPNs, QoS, ACLs
• Experience with network monitoring and automation tools
• Industry certifications (Aruba, Cisco CCNP/CCIE, security‑related credentials) are a plus

• Strategic mindset with the ability to connect network architecture to broader business and security goals
• Comfortable working across team boundaries to promote shared ownership of secure connectivity
• Excellent analytical and problem‑solving skills, especially in troubleshooting complex, cross‑domain issues
• Strong communicator with the ability to align technical decisions with company direction
• Collaborative and open to evolving responsibilities as the network‑security model matures