Network Engineer; Annapolis, MD - onsite

Network Engineer

Department: Information Technology

Reports To: IT Manager or Director of Information Technology

Location: As Assigned

FLSA Status: Exempt (Not Eligible for Overtime) — This position is classified as Exempt under the FLSA because it involves the application of advanced technical knowledge and independent judgment consistent with the professional and computer employee exemptions.

Schedule: Full-time, 40 hours per week, schedule as assigned

Supervisory Responsibility: This position carries no supervisory responsibility.

Compensation Grade: TBD — Pending Compensation Grade Structure

The Network Engineer is responsible for architecting, deploying, and sustaining secure, high-availability LAN, WAN, and WLAN infrastructures across Chaney Enterprises' corporate offices, aggregate quarries, ready-mix concrete batch plants, and asphalt terminals. This role serves as a critical technical resource for IT/OT network segmentation, cybersecurity boundary enforcement, and continuous connectivity across remote and rural industrial environments. The Network Engineer collaborates closely with application, cybersecurity, and operations teams to align network services with enterprise dispatch, ERP, and automation platforms.

The position plays a direct role in advancing the organization's infrastructure maturity and supporting its continued geographic and operational growth.

The following duties are considered essential functions of this position. Other duties may be assigned.

• Architects, deploys, and maintains secure LAN, WAN, and WLAN infrastructures across corporate offices and heavy manufacturing facilities using Cisco Meraki, Ubiquiti Uni Fi, and SD-WAN platforms.
• Configures and optimizes managed switches, industrial routers, firewalls, wireless access points, and cellular failover systems to ensure reliable, low-latency connectivity at all sites.
• Designs and enforces segmented IT/OT network environments in accordance with the Purdue Model and IEC 62443 reference standards, maintaining strict zone isolation between plant-floor and corporate networks.
• Isolates automation platforms — including PLCs, SCADA systems, scale houses, and automated batch computers — from corporate internet traffic to reduce organizational cyber risk exposure.
• Manages site-to-site and client-to-site VPN solutions to provide secure remote access for field engineers, IT staff, and authorized third-party vendors.
• Designs, builds, and documents industrial network racks, equipment placement layouts, structured cabling guides, and power and cooling considerations for all network infrastructure installations.
• Deploys and administers 24/7 network monitoring systems to proactively detect anomalies, bandwidth bottlenecks, hardware outages, and security events across the enterprise.
• Performs routine maintenance, firmware and patch management, and hardware refresh cycles on critical network infrastructure to ensure continued operational reliability.
• Maintains comprehensive network documentation including topology maps, configuration baselines, change logs, and System Security Plans (SSPs) in accordance with IT governance standards.
• Diagnoses and resolves complex network connectivity issues across geographically dispersed sites, working to minimize Mean Time to Repair (MTTR) and reduce operational disruption.
• Collaborates with application and cybersecurity teams to ensure seamless integration of network services with core ERP, dispatch, and industrial control systems.
• Evaluates emerging networking technologies, platforms, and best practices and provides recommendations to leadership to support the organization's long-term infrastructure strategy.

• Minimum of three…