Senior Network Engineer

Senior Network Engineer

Join to apply for the Senior Network Engineer role at The New York Public Library.

$120,000 - $130,000 / year

Information Technology

Crystal Building 40 W20th St

The IT Infrastructure & Operations Network Engineering department is responsible for the architecture, planning, implementation, installation and operations of NYPL's network infrastructure. NYPL covers three boroughs with 90+ branch locations, 12K+ endpoints, public/private cloud, and public/staff WiFi serving millions of New Yorkers every year. The Library’s network is highly redundant to ensure essential services are available with maximum uptime.

• Engineering level administration of NYPL’s network including routing, firewalls, ACLs, VLAN designs, VPN and of NYPL’s Public and Staff WiFi networks
• Review initial business requirements and provide initial technical designs
• Provide installation and engineering level support of NYPL network equipment and services
• Liaise with business partners on projects as necessary

• Support Network Engineers on the team
• Collaborate with other IT departments to ensure understanding of network considerations
• Engage colleagues across the business to set clear expectations

• The Library’s unique place in providing network access as a means to accomplish its mission and bridge the digital divide
• Advanced networking administration and implementation methodologies
• Zero‑Trust network security models to prepare NYPL for the future
• E‑rate funding guidelines

• Monitoring and operation efficiency of the networking stack
• Network security tools and practices

1 month – Familiarize with IT practices, build relationships with vendors and stakeholders, understand NYPL’s network topology, review current project backlog, coordinate prioritization, set clear goals.

3 months – Plan for future bandwidth upgrades across branch locations, field change and support requests for most of the network, support key projects with minimal supervision.

6 months and beyond – Own WAN, VPN, and core routing administration, prepare for equipment upgrades, participate in roadmap development.

• Architect, deploy, monitor and maintain the NYPL data network environment which consists largely of Cisco routers, switches and firewalls, as well as Extreme, & Cisco wireless network equipment
• Install, configure and maintain network firewalls (Cisco, Fortinet)
• Design and implement appropriate network level security controls at the Internet, datacenter, WiFi, and departmental LAN layers of the network (VLANS design, ACLs)
• Install and maintain data circuits between core locations, including dark and lit fiber at multigigabit speeds
• Prepare bid specifications for network routers, switches and security appliances, network monitoring systems, and core circuit connections, and participate in the evaluation of bids
• Plan future growth and integrate new technologies into the NYPL network
• Perform other assigned duties as necessary

Required Education & Certifications

Bachelor’s degree

Required Experience

• 5+ years administering networks for a widely distributed organization
• Experience designing and implementing networks
• Experience collaborating across IT support groups and business units

Required Skills

• Deep hands‑on experience with Cisco IOS features and LAN/WAN switching & routing technologies, including BGP, OSPF, EIGRP & Spanning Tree protocols, VPN, port/ether channel, VLAN design, and ACLs
• Excellent knowledge of Cisco network security practices and competent in configuring and supporting network firewalls (Cisco, Palo Alto)
• Familiarity with WAN circuits (Dark fiber, Megaport, MPLS, Point to Point Ethernet, virtual), including hardware provisioning and troubleshooting
• Ability to provision and support a cloud managed WiFi system, Cisco Meraki, Extreme Cloud, etc.
• Strong knowledge of networking in cloud environments (AWS, Azure, GCP, VMWare)
• Current CCNP certification in routing and switching preferred

Mentor junior engineers as necessary

• Of…