Network Engineer

Location: Hillsdale

Position Title: Network Engineer

Posting Number: S301P

Department: Information Technology Services

Position Type: Staff

Job Description: Job Summary
Hillsdale College has an opportunity for a seasoned Network Engineer with experience in large, distributed campus environments.
As a Network Engineer, you will be responsible for designing, provisioning, monitoring, and troubleshooting the network LAN / WAN / VLAN infrastructure used across Hillsdale College's campuses. As a vital member of the Network and System Administration team, you should have a strong knowledge of network infrastructure in a large enterprise environment. You should be an expert in the design, optimization, and troubleshooting of TCP /IP networks and equipment, including switching, routing, next-gen firewall management, performance analysis, QoS, and physical infrastructure (copper, fiber).

You should possess a solid understanding of modern network security design, Zero Trust architecture, and hybrid cloud networking. You will also support VoIP solutions, edge-delivered cloud services, and cloud-managed routing within our distributed campus network environment.

Essential Job Duties

Implement, monitor, and manage next-gen firewalls, routers, switches, and wireless access points across the campus network infrastructure.

Actively contribute to the configuration, deployment, and ongoing optimization of the Juniper Mist cloud-managed campus switching environment.

Support the transition of legacy campus edge security to modern Fortinet or Juniper next-gen firewalls.

Transition legacy remote access models toward identity-centric Zero Trust solutions (Cloudflare WARP , Microsoft GSA ).

Collaborate with the systems and data teams to configure secure, high-performance network topology between on-premises systems and Microsoft Azure / Microsoft Fabric cloud environments.

Design, configure, and maintain complex switching environments and VLAN segmentation schemas to isolate campus workloads and protect student/administrative data.

Manage external/internal DNS name spaces and implement edge-level redirects and traffic routing rules.

Engage in proactive network monitoring and advanced troubleshooting to resolve complex connectivity issues.

Recommend, schedule, and perform software/hardware upgrades, patches, reconfigurations, and capacity planning.

Participate in after-hours maintenance windows and emergency response rotations as required for campus operations.

Required Qualifications: Education and Experience
Minimum Requirements

• Experience: At least 4 years of experience as a Network Engineer in an enterprise or educational environment, with a proven track record of managing high-availability infrastructure.
• Education: Associate degree or higher in BIS , MIS , Computer Science, or equivalent professional experience.

Desired Training and Experience

• Relevant vendor certifications are highly desirable, including JNCIS - ENT / JNCIP - ENT (Juniper), Fortinet NSE / FCP , CCNA , CompTIA Network+, or Microsoft Certified:
  Azure Network Engineer.
• Prior experience in an educational, campus, or multi-site enterprise environment is preferred.

Other

Skills:

Other Skills

• Enterprise Switching & Cloud Management: In-depth experience deploying and managing enterprise switching environments. Hands-on experience with Juniper network switches and the Juniper Mist management platform (including AI-driven optimization and analytics) is highly preferred as the College migrates to this architecture.
• Next-Gen Firewalls ( NGFW ): Experience designing, configuring, and managing enterprise firewalls, including rule validation, application-level filtering, DMZ isolation, and threat protection. Familiarity with Fortinet (FortiOS) or Juniper ( SRX ) platforms is a major plus as we transition from legacy frameworks.
• Modern Access Control & ZTNA : Understanding of Zero Trust Network Access ( ZTNA ) and Security Service Edge ( SSE ) frameworks. Experience implementing modern alternatives to traditional client VPNs, specifically Cloudflare WARP and Microsoft Global Secure Access ( GSA / Entra Private Access).
• Edge & DNS Management: Advanced familiarity with utilizing cloud-based edge networks…