Senior Network Engineer

Overview

The Senior Network Engineer owns the reliability, security, supportability, and continuous improvement of the company network across corporate offices, manufacturing and field locations, internet services, remote access, and cloud environments. The role is hands-on and responsible for network design, implementation, monitoring, lifecycle maintenance, incident response, vendor coordination, documentation, and secure connectivity to Azure and other cloud services. The position partners closely with Global Platform Engineering, Cybersecurity, Technology Operations, application teams, and business stakeholders.

• Enterprise Network Engineering and Operations
• Design, implement, configure, support, and optimize LAN, WAN, wireless, internet, SD-WAN, routing, switching, DHCP, DNS, NAT, and site connectivity services.
• Administer and maintain firewalls, network switches, wireless access points, cellular or Cradlepoint connectivity, VPN services, and related network appliances.
• Plan and execute firmware, operating system, configuration, certificate, and hardware lifecycle maintenance using approved change practices.
• Monitor availability, performance, capacity, configuration health, and security events; investigate alerts and remediate conditions before they become business-impacting incidents.
• Maintain resilient connectivity for offices, manufacturing, customer-facing services, remote users, and critical business systems.
• Network Security and Access
• Design, review, implement, and document firewall policies, access control lists, segmentation, secure remote access, site-to-site VPNs, and network security standards.
• Process and validate VPN access, firewall exception, DNS filtering, corporate domains, customer domain, and connectivity requests with appropriate approvals and least privilege controls.
• Partners with Cybersecurity on network threat response, vulnerability remediation, logging, monitoring, privileged access, configuration standards, and audit evidence.
• Investigate connectivity, authentication, certificate, and policy issues across users, devices, applications, locations, and cloud services.
• Cloud Networking and Hybrid Infrastructure
• Design and support Azure/AWS virtual networks, subnets, route tables, network security groups, private endpoints, DNS, peering, hub-and-spoke patterns, VPN or private connectivity, and hybrid network services.
• Coordinate cloud network changes with Global Platform Engineering, application teams, and security teams to ensure availability, supportability, and controlled access.
• Support Azure Front Door or comparable edge services, external DNS, Cloudflare, domain registrars, and customer-facing domain mappings within assigned ownership.
• Troubleshoot Azure/AWS networking, access-list, name-resolution, service endpoint, and hybrid connectivity issues using structured diagnostics.
• Incident, Change, and Problem Management
• Lead or support restoration for network outages and performance events, including stakeholder updates, vendor escalation, service validation, and after-action documentation.
• Create implementation plans, risk assessments, validation steps, rollback plans, and post-change evidence for network changes.
• Perform root-cause analysis for recurring or high-impact network incidents and drive corrective actions through completion.
• Participate in an on-call rotation and planned after-hours maintenance as required.
• Documentation, Automation, and Lifecycle Planning
• Maintain accurate network diagrams, inventories, IP address documentation, circuit records, configurations, standards, runbooks, support procedures, and vendor contacts.
• Automate repeatable network tasks, configuration validation, reporting, backups, or compliance checks using Power Shell,…