IT Engineer - Network

The IT Network Engineer designs, secures, implements, and maintains a reliable, highly available hybrid network across Vivmark Residential's datacenters, corporate offices, residential properties, and public cloud environments. This role requires extensive expertise in enterprise routing and switching across Cisco (including Meraki), Juniper, and Arista platforms, along with working knowledge of Palo Alto firewalls, application delivery technologies (F5 Distributed Cloud and Cloudflare), cloud networking (Azure and AWS), and DDI (DNS, DHCP, and IP address management).

The IT Network Engineer incorporates security into network designs and operational decisions, partnering closely with Security Operations to implement network segmentation, traffic inspection, encryption, and access controls. This role also leads assigned infrastructure initiatives, manages load balancing and edge technologies, supports enterprise-wide infrastructure operations, and collaborates with technical counterparts across the merged organization. The engineer anticipates emerging technology trends, including SASE and zero trust networking, and recommends solutions that support current and future business requirements.

Salary: $111,000 $ 136,000 per year. In addition to base salary, this position is eligible for a discretionary annual bonus of 10.5%.

This position requires onsite attendance Monday through Thursday, with remote work permitted on Fridays.

Designs, configures, and maintains enterprise routing and switching infrastructure across datacenters, corporate offices, and residential properties using Cisco (including Meraki), Arista, and Juniper platforms. Manages internal and external routing protocols, including BGP, iBGP, OSPF, and EIGRP, to support multihomed internet connectivity, VRF-based segmentation, and datacenter interconnects. Administers wired and wireless networks across corporate offices and residential properties using Juniper Mist, Cisco wireless LAN controllers (WLCs), and Meraki, supporting platform transitions as needed.

Maintains 802.1X wireless authentication in partnership with the Identity team. Administers DNS, DHCP, and IP address management (IPAM) services through Infoblox and supports external DNS services. Maintains network monitoring, alerting, and capacity reporting using Solar Winds Orion or equivalent tools, identifying trends and addressing potential issues proactively.

Manages internal and internet-facing application delivery, including load balancing through F5 Distributed Cloud (Customer Edge) and application protection and traffic management through Cloudflare, including DNS, WAF, TLS, and tunnels. Manages TLS configurations and certificate life cycles for load-balanced and proxied services in coordination with the Identity team. Troubleshoots application delivery issues across edge services, perimeter firewalls, load balancers, and server environments.

Designs, implements, and supports hybrid connectivity between on-premises infrastructure and public cloud environments, including Azure Express Route, VPN gateways, hub-and-spoke virtual networks, Private Link, AWS Direct Connect, and Transit Gateway. Configures and maintains BGP routing policies and network segmentation to support secure, reliable hybrid connectivity. Supports cloud network security configurations, including network security groups, virtual firewalls, private endpoints, and hybrid DNS resolution.

Uses automation and infrastructure-as-code tools, including Ansible, Terraform, Python, and Power Shell, to deploy, audit, maintain, and back up network configurations.

Applies current cybersecurity threat intelligence to network design and operations and partners with Security Operations to implement network segmentation, Palo Alto firewall policies through Panorama, TLS inspection, VPN security, and zero trust access controls. Hardens network devices and maintains current firmware and software, supporting vulnerability remediation, patching, and technology lifecycle planning. Supports security incident response through traffic analysis, log reviews, packet captures, and network-level containment activities.

Secures the network management plane through appropriate authentication, authorization, and accounting (AAA), multifactor authentication (MFA),…