Senior Network Engineer

Summary Under the supervision of the IT Manager, the Senior Network Engineer is responsible for the design, implementation, configuration, and optimization of our enterprise network infrastructure across data centers, branch sites, and cloud environments. Ideal candidates will have deep experience with next‑generation firewalls, routers, switches, wireless access points, and a strong command of WAN routing protocols, SD‑WAN, IDS/IPS, VPNs, and firewall ACLs.

• Architecture & Design:
  Build resilient network architectures (campus, WAN/SD‑WAN, data centers), segmentation, policy‑based routing, and high‑availability frameworks.
• Implementation & Ops:
  Configure and manage firewalls, routers, switches, and wireless access points; handle BGP/OSPF/EIGRP routing, IPsec/SSL VPNs, DNS/DHCP/NAT/QoS.
• Telephony:
  Experience with enterprise telephony systems, VoIP technologies, SIP/RTP, CCaaS, UCaaS, QoS configuration for voice, SBCs, and VoIP security best practices.
• Troubleshooting & Monitoring:
  Diagnose L2/L3, VPN, SD‑WAN, wireless, and performance issues; lead incident response and post‑mortems.
• Automation & Documentation:
  Use Python, Ansible, Git for configuration automation; maintain diagrams, runbooks, inventories, and change records.
• Security & Compliance:
  Manage ACLs, IPS/IDS, firewalls, NAT, zero‑trust segmentation; enforce secure defaults and logging. Participate as the Network Subject Matter Expert in annual third‑party reviews.
• Leadership:
  Lead multi‑site tech projects and mentor junior staff.

• Excellent communication and stakeholder engagement skills.
• Excellent organizational skills and attention to detail.
• Strong knowledge of networking protocols and services, including TCP/IP, VLANs, STP, routing, NAT, QoS, DHCP, and DNS.
• Ability to configure and optimize dynamic routing protocols such as BGP, OSPF, and EIGRP.
• Understanding of Zero Trust security models, SASE frameworks, RF optimization techniques, and wireless network design principles.
• Advanced troubleshooting and packet analysis skills using Wireshark.
• Proficiency in scripting, change management, automation, and monitoring tools using Python, Ansible, and Power Shell.

• Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent experience).
• 7+ years of experience in network engineering in a complex enterprise environment.
• Industry‑recognized certifications such as CCNP Enterprise/Security, NSE‑4+, ACE‑A/ACE‑L, VCTA‑NV/VCP‑NV, CMNA, CISSP, or Security+ (preferred).
• Proficiency with Cisco Firepower, Forti Gate, Arista EOS, Velo Cloud SD‑WAN, HPE Instant On, Meraki MR/MX/MS platforms.
• Extensive experience with network protocols and services: TCP/IP, VLANs, STP, routing, NAT, QoS, DHCP, DNS.
• Extensive experience configuring and optimizing dynamic routing protocols including BGP, OSPF, and EIGRP where applicable.
• Extensive VPN, ZTNA, and firewall ACL experience.
• Experience managing and configuring next‑generation firewalls, Net Flow, DPI, IPS/IDS, and ACLs.
• Experience in cloud networking (AWS, Azure, GCP).

Prolonged periods of sitting at a desk and working on a computer (7 to 8 hours per day). Light lifting up to 25 lbs. Intermittent walking, bending, twisting, and stooping when racking hardware or performing cable management. General office environment: works at a desk in a well‑lit, air‑conditioned cubicle/office with moderate noise levels. Occasional travel to branches or data centers (up to 10 %).

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

This is an on‑site position at our Corporate Headquarters in Yuba City, CA. Remote work is not available for this role.

The company anticipates offering an annual salary range between $120,000 and $138,000 for this position at the time of hire. The range includes base salary and does not include possible overtime for non‑exempt employees or any applicable performance‑based incentives or commissions.

Employees are eligible for a discretionary yearly merit‑based…