Network Engineer

The City of Sugar Land is seeking a full‑time Network Engineer in the Information Technology Department
.

This position is full‑time and offers a salary range of $74,422 – $93,038, depending on qualifications and experience.

The City of Sugar Land is a municipality of 111,026 residents located approximately 20 miles southwest of downtown Houston, committed to providing high‑quality public services.

• City‑subsidized Medical and Dental Insurance with a variety of plan options
• City‑paid Basic Life Insurance @ 1x your annual salary and Long‑term Disability
• Voluntary Vision, Supplemental Life Coverage and other Aflac indemnity plans such as Accident, Cancer, Hospitalization, Critical Illness, Short Term Disability and pre‑paid legal benefits through Legal Shield
• 9 paid holidays and up to 3 floating holidays
• A generous vacation package with accruals starting on day 1
• Paid sick leave
• Paid parental leave
• A robust pension plan with TMRS includes a 7% contribution and a 2:1 match by the City
• No Social Security contribution required; can contribute to a Deferred Compensation (457b) plan
• Longevity pay for each month of service after your first 13 months of employment
• On‑site Wellness facilities and programming
• Access to multiple mental health benefits and resources, including a robust EAP

• Install, set up, maintain, and troubleshoot Cisco Catalyst switches and routers.
• Support Cisco routers, including OSPF routing, route design, route changes, and troubleshooting.
• Set up, monitor, and secure Cisco ASA, Cisco Firepower Threat Defense, and Forti Gate firewalls.
• Create and update NAT rules, VPN settings, firewall rules, and security policies.
• Troubleshoot Layer 2 and Layer 3 network problems using command‑line tools, logs, monitoring tools, and network diagrams.
• Monitor network performance and help plan for future network needs.
• Set up and support failover systems.
• Work with cybersecurity staff to ensure firewall rules, VPN access, and intrusion prevention systems comply with security policies.
• Maintain accurate network diagrams, device settings, firewall rules, and procedures.
• Stay current with Cisco best practices, certifications, new technology, and security alerts.
• Required to work as an essential employee before, during, and after an emergency or disaster.
• Stay abreast of and comply with all City and departmental policies and procedures.
• Perform other duties as assigned by your supervisor or Director.

• Strong experience with Cisco networking technologies, including switches, routers, VLANs, subnetting, and network troubleshooting.
• Experience with routing protocols, particularly OSPF, in production environments.
• Hands‑on firewall experience with Cisco ASA and Cisco Firepower Threat Defense;
  Forti Gate experience is a plus.
• Knowledge of firewall policies, NAT, VPN tunnels, and remote‑access VPNs.
• Strong Layer 2 and Layer 3 troubleshooting skills using CLI tools, logs, monitoring platforms, and diagrams.
• Ability to create, maintain, and update technical documentation, including network diagrams, device configurations, firewall rules, and operational procedures.

• High school graduate, GED or equivalent.
• Bachelor’s degree in Computer Science, Information Technology, Engineering, or related STEM field is preferred; equivalent technical training, certifications, and relevant experience considered.

• 3+ years of hands‑on experience supporting production networks, including switches, routers, firewalls, VPNs, and network troubleshooting (excluding classroom, lab, help desk, desktop support, or cabling‑only experience).

• Valid Texas Driver License.
• Industry certifications preferred, including CCNA (or higher), Network+, Security+, or Fortinet certifications.

In the event of a wide‑scale emergency that could impact our community, all employees must be ready to assist in managing the crisis and will be considered essential for the continuity of governmental operations.

The City of Sugar Land is an equal Opportunity employer.