Information Technology Network Engineer

The IT Network Engineer is the primary owner of network design, administration, security, and reliability across multiple company sites. This role is responsible for the full lifecycle of the organization's network infrastructure, from architecture and configuration to ongoing maintenance, circuit management, security compliance, and incident resolution. It requires deep hands-on expertise with Palo Alto firewalls, Cisco routing and switching platforms, and Cisco Meraki wireless.

The Network Engineer exercises independent professional judgment on infrastructure design decisions, security policy governance, and technology recommendations, and serves as the internal subject matter expert that site teams and business stakeholders rely on to keep the network performing and secure. The ideal candidate has direct multi-site network engineering experience, a proven track record of maintaining high availability across distributed environments, and a customer-first mindset that extends to every site and every user they support.

The following responsibilities reflect the primary duties of this role. Independent judgment, network design analysis, and multi-site technical ownership are central to the performance of each.

• Design, configure, deploy, and maintain network infrastructure across multiple sites, including LAN, WAN, SD-WAN, and wireless environments, exercising independent judgment on topology, hardware selection, and configuration standards.
• Administer and maintain Palo Alto next-generation firewalls, including security policy design, rule base management, threat prevention profiles, NAT configurations, and firmware lifecycle management across all sites.
• Configure and manage Cisco routers and switches, including routing protocol configuration (BGP, OSPF, EIGRP), VLAN segmentation, STP, QoS, and access control, ensuring consistent and reliable connectivity across the enterprise.
• Administer Cisco Meraki wireless infrastructure, including access point deployment, RF planning, SSID configuration, client policy enforcement, and ongoing performance monitoring and optimization across distributed sites.
• Own circuit procurement, contract management, and vendor relationships for all WAN connectivity, including MPLS, broadband, dedicated fiber, and cellular backup circuits - managing SLAs, renewals, and escalations with carriers.
• Maintain and optimize network uptime across all sites, proactively monitoring infrastructure health, identifying degradation trends, and independently determining and implementing corrective actions before failures impact operations.
• Design, implement, and enforce network security controls, including firewall policy governance, network segmentation, intrusion prevention, VPN architecture (site-to-site and remote access), and zero-trust access principles.
• Working with the Information Security team, support PCI DSS network compliance requirements, including scoped network segmentation design, firewall rule review, quarterly network scans, and documentation to support audit and assessment activities.
• Manage DNS and Active Directory integration, including DNS zone administration, DHCP scope management, and ensuring reliable name resolution and authentication services across all network sites.
• Perform root cause analysis on network incidents, developing and documenting permanent corrective actions and sharing findings across the IT team to prevent recurrence.
• Develop and maintain network documentation, including topology diagrams, IP address management (IPAM), circuit inventories, hardware inventories, configuration standards, and runbooks.
• Evaluate and recommend emerging network technologies and vendor solutions, independently assessing fit against organizational requirements and presenting findings to IT leadership.
• Provide escalation support and technical guidance to site IT staff and support teams, serving as the internal subject matter expert for network-related incidents and projects.
• Partner closely with site operations, facilities, and business stakeholders at each location, maintaining a strong customer-service mindset and communicating network decisions and impacts clearly to non-technical audiences.

• 5+ years of progressive, hands-on network engineering experience supporting multi-site enterprise environments, including demonstrated ownership of network infrastructure design and operational decisions.
• Direct, hands-on experience administering Palo Alto Networks next-generation firewalls, including security policy management, Panorama (preferred), and threat prevention configuration.
• Proven experience configuring and supporting Cisco routers and switches in a multi-site enterprise environment, including routing protocols (BGP, OSPF), VLANs, and access layer design.
• Hands-on experience with Cisco Meraki wireless platform, including AP deployment, dashboard administration, and multi-site wireless management.
• Experience with circuit contract ownership and carrier…