Network Engineer

American Bath Group is looking for a Network Engineer to take clear ownership of a large, distributed enterprise network and help build a more standardized, resilient, and supportable environment. This role is designed for someone who can think architecturally while remaining hands-on with routing, firewalls, switches, wireless, troubleshooting, and change execution.

Applicants must be legally authorized to work in the United States.
This position is not eligible for employment-based visa sponsorship. American Bath Group is unable to sponsor or assume sponsorship of an employment visa for this position now or in the future.

• Enterprise network ownership across approximately 75 locations, including firewalls, switches, wireless access points, WAN/site connectivity, and related network configurations.
• Routing architecture and troubleshooting across a multi-site environment, including practical use of TCP/IP, OSPF, and BGP.
• Cisco and Meraki infrastructure configuration, troubleshooting, migration, and standardization.
• Firewall migration and policy standardization, including coordination of the planned Palo Alto-to-Fortinet transition with the MSP.
• Network segmentation and hardening opportunities that reduce manufacturing risk and help isolate legacy or unpatched devices where appropriate.
• Standardized Wi-Fi architecture so ABG devices can connect consistently across locations using common enterprise standards.
• Network appliance lifecycle governance, including a disciplined approach to switch/firewall firmware and patch cadence.
• Network resiliency for critical sites, including identification of single points of failure and practical continuity improvements.
• ISP and circuit relationships, including service performance, contract ownership, and opportunities to optimize spend.
• Technical direction and coordination across the Network Administrator, Telecom Administrator, MSPs, ISPs, help desk, infrastructure teams, and site stakeholders.

• Within the first six months, establish a clear roadmap for enterprise network standardization, hardening, resiliency, and lifecycle governance.
• Launch an initial pilot of the ABG network and Wi-Fi standardization approach to demonstrate seamless connectivity and repeatable site standards.
• Develop an initial point of view on network segmentation and cybersecurity hardening opportunities, particularly for manufacturing environments and legacy devices.
• Advance the firewall migration and policy-standardization work with clear testing, rollback, documentation, and stakeholder communication.
• By the end of year one, materially improve enterprise consistency across firewall rules, switch/network configurations, Wi-Fi standards, documentation, and operating ownership.
• Reduce key-person dependency by creating durable ownership, clear standards, repeatable processes, and broader team capability.

• Proven experience supporting or owning a multi-site enterprise network at meaningful scale.
• Deep practical understanding of TCP/IP and routing protocols, including OSPF and BGP.
• Recent hands-on experience configuring and troubleshooting both Cisco and Meraki environments.
• Hands-on capability across firewalls, switches, VLANs, wireless access points, network segmentation, and incident response.
• Experience driving network migrations, standardization, architecture improvements, or other meaningful infrastructure change.
• Ability to lead major outage diagnosis and recovery while coordinating vendors, carriers, and internal teams.
• Strong communication skills: able to explain network changes, expected impact, implementation risk, and recovery plans to both technical and non-technical stakeholders.
• Collaborative operating style. Network changes are expected to be coordinated with help desk and infrastructure resources rather than executed in isolation.

• CCNA certification or equivalent demonstrated networking depth.
• Palo Alto and/or Fortinet firewall experience.
• Experience managing MSPs, carriers, ISPs, or telecom/network vendors through migrations, incidents, or service changes.
• Multi-site Wi-Fi standardization and enterprise SSID/configuration-template experience.
• Experience with enterprise VoIP/telecom environments such as 8x8.
• Experience supporting manufacturing or operational environments where network availability and segmentation have direct business impact.

Why This Role Is Compelling

This is not a maintenance-only network role. The person stepping into this…