Sr Network Systems Engineer

Network Architecture & Engineering 

• Design, implement, and maintain enterprise network infrastructure across multiple locations. 

• Develop scalable architectures supporting on-premises, cloud, and hybrid environments. 

• Lead network modernization initiatives focused on resiliency, security, and operational efficiency. 

• Evaluate networking technologies and recommend standards aligned with business and security requirements. 

• Create and maintain network diagrams, configuration standards, runbooks, and technical documentation. 

Routing, Switching & Wireless 

• Administer enterprise routing, switching, and wireless platforms. 

• Configure and support Layer 2 and Layer 3 networking services, including VLANs, routing protocols, redundancy, and QoS. 

• Perform capacity planning, performance tuning, and lifecycle management of network infrastructure. 

Firewall & Security Engineering 

• Design, implement, and manage enterprise firewall platforms and network security controls. 

• Develop segmentation strategies, access policies, and least-privilege connectivity models. 

• Partner with cybersecurity teams to investigate threats, remediate vulnerabilities, and improve security posture. 

• Review and implement firewall rule changes in accordance with change management standards. 

VPN & Secure Remote Access 

• Design and support site-to-site, client-based, and remote-access VPN solutions. 

• Troubleshoot secure connectivity for employees, contractors, partners, and third-party integrations. 

• Optimize remote access services for security, performance, reliability, and user experience. 

Network Access Control (NAC) 

• Administer and enhance Network Access Control solutions. 

• Develop policies for device authentication, posture validation, onboarding, and dynamic segmentation. 

• Integrate NAC capabilities with identity, endpoint management, and security platforms. 

• Support secure access for corporate, BYOD, contractor, and partner devices. 

Zero Trust Network Architecture (ZTNA) 

• Lead the design and adoption of Zero Trust networking principles and technologies. 

• Implement identity-aware access, segmentation, continuous validation, and least-privilege controls. 

• Partner with security, endpoint, identity, and cloud teams to expand ZTNA capabilities. 

• Develop roadmaps that advance secure access and reduce reliance on traditional network trust boundaries. 

Operations, Incident Response & Leadership 

• Serve as an escalation point for complex network incidents, outages, and performance issues. 

• Participate in on-call rotation, major incident response, root cause analysis, and corrective action planning. 

• Plan and execute changes using established change management and maintenance processes. 

• Provide technical leadership and mentorship to engineers and collaborate across infrastructure, security, cloud, and application teams. 

• Bachelor's degree in Information Technology, Computer Science, Engineering, or equivalent practical experience. 

• 8+ years of enterprise network engineering experience, including 5+ years supporting large-scale, multi-site environments. 

• Advanced experience with enterprise firewalls, VPN technologies, routing and switching, network segmentation, NAC, and Zero Trust concepts. 

• Strong understanding of TCP/IP, DNS, DHCP, VLANs, QoS, high availability, and dynamic routing protocols. 

• Experience supporting highly available production environments and using network monitoring and troubleshooting tools. 

• Excellent analytical, communication, collaboration, and technical documentation skills. 

Preferred Qualifications 

• Experience with Fortinet technologies such as FortiGate, FortiSwitch, FortiManager, FortiAuthenticator, FortiNAC, and FortiClient. 

• Experience with Arista networking platforms and enterprise wireless solutions. 

• Experience implementing Zero Trust Network Access solutions and cloud networking in Microsoft Azure. 

• Experience supporting mergers, acquisitions, data center transitions, or large-scale infrastructure migrations. 

• Experience in healthcare, financial technology, or another regulated industry. 

• Familiarity with SOC 2, HITRUST, HIPAA, PCI DSS, or similar compliance frameworks. 

Measures of Success 

• Improve network availability, performance, and resiliency across enterprise locations. 

• Advance the organization’s Zero Trust networking and secure remote access strategy. 

• Enhance network segmentation, firewall governance, and access control maturity. 

• Increase visibility and control of network-connected devices through NAC capabilities. 

• Reduce operational risk through standardization, automation, lifecycle planning, and high-quality documentation. 

• Deliver secure and scalable solutions that improve the employee technology experience.