Senior Network Engineer

The Information Technology Department at Cambridge Health Alliance empowers high‑quality, equitable, and patient‑centered care through innovative and secure health IT solutions. Grounded in CHA’s mission and strategic plan, IT supports clinical, operational, and academic excellence by providing reliable infrastructure, safeguarding health information, and enabling data‑driven decision‑making. With a future‑focused approach, the team works to enhance access, advance health equity, and drive innovation across the system.

Reporting to the Director, Network & Telecommunications, the Senior Network Engineer serves as the principal technical authority for the Cambridge Health Alliance enterprise voice and data network. This role entails the coordination of all network implementations, modifications, and maintenance, ensuring stringent alignment with the overall enterprise design. The incumbent will function as a senior engineer to LAN, WAN, and Cable plant engineers and technicians, thereby fostering high‑quality, patient‑centered care through the deployment of secure and innovative health IT solutions.

• Conduct research and furnish recommendations for strategically appropriate support tools and systems, including network management platforms, traffic analysis solutions, and retrospective/prospective projection modeling.
• Lead the configuration, installation, implementation, and advanced troubleshooting of micro‑segmentation, routers, switches, wireless controllers and infrastructure, and other critical communication devices.
• Systematically monitor response times, bandwidth utilization, and resource availability to propose and implement performance enhancements. Utilize specialized surveying tools to optimize coverage and capacity within high‑density environments.
• Design and administer the IP address scheme and associated IP address assignment mechanisms.
• Design, deploy, and maintain robust enterprise wireless networks, including the execution of site surveys and comprehensive RF planning.
• Configure and troubleshoot wireless access points (APs) and wireless LAN controllers (WLCs).
• Ensure the integrity and security of the wireless network through the implementation of WPA2/3 protocols, and RADIUS integration. Proven hands‑on experience implementing Network Access Control (NAC) solutions.
• Resolve complex and atypical network problems, employing advanced packet capture and protocol analysis tools such as Wireshark.
• Monitor and coordinate the maintenance of network hardware and software to ensure maximum operational efficiency and uptime.
• Maintain up‑to‑date, meticulously detailed network topological diagrams and documentation for the entire CHA network and all business partner connections.

• Bachelor’s Degree in Computer Science, Engineering, or a closely related field is required; equivalent significant professional experience (e.g., a minimum of 6 years total experience) may be substituted.
• A minimum of 7-10 years of progressive experience in network engineering within an enterprise environment is mandatory, with at least 5 years served in a Senior Network Engineering role.
• Experience with in a large, distributed, and complex healthcare organization is highly desirable.

• Demonstrated hands‑on experience with Juniper, Aruba.
• Advanced and comprehensive knowledge of OSPF, EIGRP, BGP, RIP, RIPv2, TCP/IP, UDP, ICMP, EVPN-VXLAN and 802.1x standards.
• Deep understanding and practical application of VLANs, data/voice trunking, Spanning Tree Protocol (STP), Link Aggregation Group (LAG), and layer 2/3 fault tolerance design.
• Proficiency in the configuration and management of Access Control Lists (ACLs), Firewalls, Virtual Private Networks (VPNs), and Network Access Control (NAC) solutions and wireless security.

• Juniper Networks Certified Professional - Service Provider (JNCIP-SP) or Juniper Networks Certified Professional - Enterprise (JNCIP-ENT)
• Aruba Certified Mobility Professional (ACMP)
• CompTIA Network+ or Security+
• Certified Wireless Network Professional (CWNP) certifications (CWNA, CWAP, CWDP)

• Mandatory rotating 24/7 on‑call support is required, necessitating a 30‑minute remote response time or a 1‑hour on‑site response time.
• Must possess reliable personal transportation to facilitate travel between multiple sites.

Please note that the final offer may vary within the listed Pay Range, based on a candidate's experience, skills, qualifications, and internal equity considerations.

Monday - Friday, 8:30am - 5:00pm, On‑call Rotation