Network Engineer

Summary

GENERAL

SUMMARY:

Responsible for the design, deployment, and support of enterprise network infrastructure.

Involvesadvanced configuration and troubleshooting of Layer 2 and Layer 3 networks, including routing, switching, firewalls, and SD-WAN technologies.

Contributes to architectural decisions, mentors junior engineers, and leads small to medium-sized infrastructure projects across LAN, WAN, wireless, VPN, and cloud-integrated environments. Working closely with senior engineering staff, vendors, and cross-functional IT teams,ensures high availability, performance, and security of network services while driving operational improvements and adherence to industry best practices.

• Commits to the mission, vision, beliefs and consistently demonstrates our core values.
• Leads the deployment, configuration, and optimization of Layer 2 and Layer 3 network infrastructure, including switches, routers, wireless controllers, and firewalls.
• Performs advanced troubleshooting of network incidents and performance issues across LAN, WAN, VPN, and wireless environments, escalating to senior staff when necessary.
• Implements andmaintainsnetwork segmentation, VLAN strategies, and routing protocols such as OSPF and BGP.
• Leads routine network maintenance and lifecycle management, including firmware upgrades, device replacements, and structured cabling improvements.
• Designs, implements, andmaintainssecure site-to-site and remote-access VPN connections with third-party vendors and partners.
• Configures and manages SD-WAN infrastructure (e.g., Palo Alto ION), optimizing network traffic and failover policies.
• Utilizesadvanced monitoring and diagnostic tools (e.g., Solar Winds, Wireshark, Palo Alto Panorama) to proactivelyidentifyand resolve network issues.
• Maintains detailed andaccuratenetwork documentation including topology diagrams, configuration standards, and change control records.
• Assists in the design and execution of enterprise network projects and infrastructure upgrades, collaborating across IT disciplines and with external vendors.
• Contributes to the development and enforcement of network security practices, includingfirewallpolicies, access controls, and segmentation strategies.
• Provides Tier 2 and Tier 3 network support, serving as an escalation point for Network staff and mentoring junior team members.
• Participates in network architecture discussions and capacity planning to support organizational growth and technology initiatives.
• Contributes to the evaluation and testing of emerging networking technologies and makes recommendations for adoption where appropriate.
• Participates in the on-call rotation for after-hoursnetwork support and planned maintenance windows.
• Enters restricted access areas without supervision to perform advanced network-related tasks.
• Provide end-to-end network support for Community Connect partners, including design validation, secure connectivity (SD-WAN/VPN), troubleshooting, and ongoing optimization of network paths to ensure reliable and secure access to hosted applications such as EPIC and other Bryan owned services and solutions.
• Maintains professional growth and development through seminars, workshops, and professional affiliations to keep abreast of latest trends in field of expertise.
• Participates in meetings, committees and department projects as assigned.
• Performs other related projects and duties as assigned.

(Essential Job functions are marked with an asterisk “*).

• Knowledge of networking protocols and concepts, including TCP/IP, BGP, OSPF, VRRP, EIGRP, and MPLS.
• Knowledge of Layer 2 and Layer 3 technologies, including VLAN design,trunking, spanning-tree protocol, static and dynamic routing, and inter-VLAN routing.
• Knowledge of enterprise-grade networking equipment from vendors such as Extreme, Aruba, and Palo Alto.
• Knowledge of SD-WAN architecture and implementation, particularly Palo Alto ION deployment and policy configuration.
• Knowledge of network security principles, including segmentation,firewallzoning, zero-trust access, and vulnerability mitigation strategies.
• Knowledge of authentication, authorization, and accounting (AAA), 802.1X, and network access control systems.
• Skill in configuring andmaintainingenterprise firewalls, NAT policies, and access control rules—preferably in Palo Alto environments using Panorama.
• Skill inverbal and written communication to interface with technical staff, management, vendors, and non-technical stakeholders.
• Skillin using advanced network diagnostic and monitoring tools (e.g., Wireshark, Solar Winds, Net Flow analyzers) to resolve complex issues and ensure high availability.
• Abilityto design, implement, and troubleshoot secure VPN solutions (site-to-site and remote-access) in multi-vendor environments.
• Ability to design andmaintaincomprehensive network documentation, including topology diagrams, IP schemas, and standard operating procedures.
• Ability to manage and execute infrastructure projects from planning to…