Network Engineer

Who You Are

A mid-level network professional with a strong security-first mindset who has grown beyond break-fix and is ready to take ownership of projects and sites. You are comfortable configuring enterprise switching, wireless, firewall, and VPN infrastructure with limited oversight, can lead an acquisition deployment from start to finish, and know when to loop in a Senior engineer. A strong mid-level engineer who bridges entry-level operations and senior-level architecture: execution-focused, security-conscious, and continuing to grow.

Construction Partners, Inc. is one of the fastest-growing civil infrastructure companies in the United States, specializing in the construction and maintenance of roadways across five southeastern states. CPI has a proven track record of successfully buying and integrating companies and is considered a "buyer of choice" among owners seeking to sell. Our senior management team has successfully acquired and integrated approximately 60 companies over the course of their decades-long careers.

• Independently configure and deploy enterprise-grade switching and wireless infrastructure at existing sites and acquisition locations; preferred experience with Ubiquiti Uni Fi/UISP, Dell, and Cisco.
• Perform firewall administration tasks including policy review, rule implementation, and troubleshooting under Senior engineer sign-off; preferred experience with Palo Alto and Panorama.
• Design and enforce network segmentation strategies using VLANs and zone-based security to isolate end-user, server, guest, OT, and management traffic.
• Implement and maintain network access control (NAC) policies to enforce least-privilege access and device compliance at the network edge.
• Apply security-first practices across all network changes: enforce change control, document security implications, and proactively identify misconfigurations or vulnerabilities.
• Lead acquisition network replacement projects end-to-end: site survey, cabling, switch/AP deployment, circuit coordination, and cutover; upscale to Senior engineers for firewall policy and BGP changes.
• Manage and troubleshoot Cradlepoint, Starlink, fiber, and broadband circuits, including ISP coordination and circuit turn-ups.
• Configure and maintain SSL VPN and S2S VPN connections; upscale firewall rule and policy changes to Senior Network Engineers for review and approval.
• Assist with vulnerability management and network hardening initiatives; remediate identified findings within assigned systems.
• Maintain thorough and accurate records in Netbox (IPAM/documentation integration); enforce documentation standards across junior engineers.
• Provide escalation support to Network Engineer 1 staff for complex LAN/WAN, wireless, and security issues.
• Monitor and respond to network incidents; perform root cause analysis and document findings.
• Patch and maintain all network infrastructure; proactively identify end-of-life or at-risk devices.
• Mentor Network Engineer 1 staff; provide knowledge transfer on tools, security practices, and procedures.
• Willingness to travel to branch and acquisition sites when necessary (multi-state).

• 5+ years of networking experience in a multi-site or enterprise environment.
• Hands-on proficiency with enterprise-grade managed switching (Ubiquiti, Cisco, Dell, or equivalent); vendor preference for Ubiquiti Uni Fi/UISP.
• Working knowledge of at least one enterprise next-gen firewall platform (Palo Alto preferred; Fortinet, Cisco FTD, or equivalent acceptable).
• Solid understanding of routing and switching: VLANs, STP, OSPF, and BGP fundamentals.
• Experience designing and implementing VLAN segmentation and network zone isolation strategies.
• Familiarity with network access control (NAC) concepts and implementation.
• Experience with SSL VPN and S2S VPN configuration and troubleshooting.
• Working knowledge of firewall policy, threat vectors, and network hardening practices.
• Proficiency with DNS, DHCP, and IPAM tools (Netbox preferred).
• Experience leading multi-site network deployments or infrastructure replacements.
• Strong documentation skills; experience maintaining network diagrams and asset records.