Sr. Network & Infrastructure Engineer

At Kids2, we’re really good at what we do. And when we’re great at our jobs, we help parents be great at their jobs. Parenting is demanding, and that’s where we come in. We want to reimagine how brands can make it easier for early stage parents - not by just selling them products, but by providing holistic solutions that transcend borders, categories and aisles.

No matter our title or department, at Kids2, our job is to create more tiny wins for parents, so they can create bright futures for their little ones. That’s a big task! We’re serious about what we do, AND we love to have fun. Our team is hardworking, entrepreneurial, and passionate about helping families create millions, if not billions of tiny wins.

The Senior Network & Infrastructure Engineer owns the network that connects Kids2's US offices, the Suwanee data center, Azure, Hong Kong, mainland China and Mexico. This is a senior, hands‑on role on a small Global IT team, owning network architecture and the roadmap as well as firewalls, WAN and site‑to‑site tunnels, remote access VPN, and Meraki wired and wireless networks.

• Own the network architecture, design standards and roadmap across all sites.
• Lead network projects such as China connectivity and WAN and firewall refreshes, from design through cutover.
• Manage carriers and network vendors, and give input on the network budget.
• Administer Forti Gate and Cisco ASA/FTD (FMC) firewalls, including rules, policies, upgrades and change requests.
• Review firewall rules and logs, and keep configurations backed up and documented.
• Operate the IPsec tunnels and carrier‑managed WAN (DTNaaS) between the US, Azure, Hong Kong and China.
• Troubleshoot tunnel, routing and circuit issues, and work with carriers on outages and changes.
• Own Cisco Secure Client and Meraki client VPN, including configuration, client deployment, upgrades and user issues.
• Administer Cisco Meraki MX, MS and MR across all sites, including SSIDs, VLANs, switching, alerts and inventory.
• Operate certificate‑based Wi‑Fi (SCEPman, RADIUS/NPS) and work with the endpoint team on the device profiles that deliver certificates.
• Plan and lead office network buildouts and moves with the manager and regional IT staff.
• Renew public and internal certificates, including SAP system certificates.
• Manage internal and external DNS.
• Submit changes through Jira Service Management, review other network changes before they go through, and write runbooks for every system owned.
• Serve as the final technical escalation point for network issues.
• Mentor the help desk and regional IT staff on network work.
• Take part in after‑hours maintenance windows across US and Asia business hours.

• 7 or more years of network engineering experience in a multi‑site company.
• Production experience administering Forti Gate or Cisco firewalls, site‑to‑site IPsec VPN and WAN routing.
• Experience with Cisco Meraki (MX, MS and MR) and remote access VPN such as Cisco Secure Client.
• Experience with network connectivity into mainland China and Azure networking.
• Experience leading network projects and managing carriers and vendors is preferred.

• Education:
  
  Bachelor's degree in Information Technology, Computer Science or a related field, or equivalent experience.
• Certificate lifecycle and DNS administration; 802.1X wireless with RADIUS and certificate‑based authentication.
• Clear written documentation and the ability to work with regional IT staff across time zones.

• CCNP, Fortinet NSE 6 or NSE 7 preferred.

• Must be proficient with Forti Gate, Cisco ASA/FTD and FMC, Cisco Meraki, Cisco Secure Client and IPsec VPN.
• Working knowledge of RADIUS/NPS,…