Network Engineer

The Role

The Network Engineer II is a mid‑level role focused on the design, implementation, and support of our office and campus networks, including wired access, Wi‑Fi, and connected devices. You will work with senior engineers to execute established standards for switching, wireless, segmentation, and security, while owning day‑to‑day reliability and continuous improvement for user and IoT connectivity.

• Implement, operate, and troubleshoot wired campus networks, including access, distribution, and core switching, VLANs, link aggregation, and uplinks between buildings and MDF/IDF closets.
• Configure and support enterprise Wi‑Fi across offices and campus sites (SSID design, RF tuning, channel/power plans, client onboarding, and basic location services) to provide reliable connectivity for staff and devices.
• Assist in planning and executing network expansions and refreshes for new floors, buildings, and office relocations, including cabling standards, switch/AP placement, and closet design details.
• Implement and maintain network segmentation for users, servers, guests, and IoT devices using VLANs, VRFs, and ACLs or firewall policies, following security and compliance requirements.
• Onboard and support IoT and “smart” devices (badging, cameras, AV systems, building management, manufacturing or warehouse sensors), including network profiles, DHCP/DNS, and secure onboarding patterns.
• Collaborate with security engineers to place IoT devices into appropriate isolated network segments and enforce least‑privilege access through firewall or router policies.
• Monitor campus and IoT network health using enterprise tools (e.g., NMS, Wi‑Fi analytics, flow/packet data), respond to alerts, and drive incidents to resolution or escalation.
• Perform firmware and software upgrades on switches, APs, and related network equipment in a controlled manner, including planning, scheduling, and rollback procedures.
• Support voice and collaboration services as they relate to the network (VoIP QoS, wired/wireless prioritization, VLAN assignments, and basic troubleshooting).
• Maintain accurate documentation for campus and IoT networks, including floor plans, port maps, SSID and VLAN assignments, addressing plans, and runbooks.
• Participate in an on‑call rotation to support critical campus connectivity and IoT services, following standard incident management and communication practices.

• Classify IoT devices by function and risk (e.g., security cameras, badge readers, building controls, sensors) and map them to dedicated VLANs and IP ranges.
• Work with facilities, security, and operations teams to understand IoT requirements and ensure new systems are connected securely and reliably from day one.
• Apply best practices for IoT security such as network isolation, restricted outbound access, and monitoring for unusual traffic patterns.

• Wired networking:
  Enterprise access/distribution/core switches, Ethernet, PoE, copper and fiber plant, 802.1Q VLANs, STP, link aggregation.
• Wireless:
  Enterprise Wi‑Fi (controller‑based or cloud‑managed), WPA2/WPA3, 2.4/5/6 GHz RF design, guest and corporate SSIDs, basic location services.
• Campus services: DHCP/DNS integration, RADIUS/802.1X, NAC or onboarding portals, support for VoIP over wired and wireless.
• IoT:
  Segmented networks for cameras, access control, AV, building automation, sensors, and other specialized devices.
• Tooling:
  Network monitoring and management platforms (NMS, Wi‑Fi controllers, syslog, Net Flow/telemetry), documentation systems.

• 3–5 years of experience supporting enterprise wired and wireless networks in office, campus, or similar environments.
• Solid understanding of Ethernet, TCP/IP, VLANs, basic routing, and Wi‑Fi fundamentals (SSID, authentication, RF basics, roaming).
• Hands‑on experience configuring and troubleshooting switches and access points from at least one major vendor (e.g., Cisco, Meraki, Aruba).
• Experience implementing or supporting network segmentation for users, guests, and devices using VLANs and basic firewall/ACL policies.
• Exposure to IoT or “smart” devices on enterprise networks, with an understanding of why they require separate treatment from user endpoints.
• Strong troubleshooting and communication skills, with a focus on end‑user experience and clear documentation.

• Experience with NAC/802.1X, RADIUS, and certificate‑based onboarding for corporate and IoT devices.
• Familiarity with video surveillance, access control, AV, or building management systems from a network perspective.
• Exposure to cloud networking (e.g., connecting campuses to Azure or other cloud environments) and SD‑WAN or similar technologies.
• Relevant certifications such as CCNA/CCNP, CWNA, or vendor‑specific campus networking credentials.