Senior Network Engineer

POSITION SUMMARY: 

The Senior Network Engineer is responsible for designing, implementing, and operating a large-scale, multi-site enterprise network supporting ~1,800–2,000+ locations, corporate sites, and data-center/cloud connectivity. This role owns day-to-day network reliability and serves as a Tier 3 escalation point, leading incident response, root cause analysis, and permanent remediation to improve uptime and reduce repeat issues. The Senior Network Engineer also drives modernization efforts across SD-WAN, Wi-Fi, security edge, and cloud connectivity, partnering closely with carriers, Cisco/Meraki, and third-party field services to plan and execute changes at scale with strong standards, documentation, and change control discipline. 

ESSENTIAL DUTIES: 

• Design, implement, and support enterprise firewall/security platforms (Cisco Firepower/FTD preferred), including access control policies, NAT, HA/failover, and upgrade planning. 

• Design and operate hybrid cloud connectivity, including Azure ExpressRoute and Megaport, supporting multi-carrier interconnects, BGP peering, route advertisements, and validated failover across diverse transport providers. 

• Engineer and maintain resilient routing and traffic-path control across the enterprise network using OSPF, BGP, route filtering, summarization, and redistribution best practices. 

• Administer and support Cisco Meraki environments (MX, MR, MS, MG) at scale, including templates, configuration standards, firmware lifecycle planning, and large-scale troubleshooting. 

• Design, support, and optimize SD-WAN / AutoVPN connectivity, including resiliency models, hub/spoke architectures, routing behavior, and tunnel health validation. 

• Own WAN circuit lifecycle and carrier/vendor coordination, including turn-ups, outage escalation, demarcation troubleshooting, and restoration verification. 

• Implement and maintain network segmentation and security controls aligned to least-privilege principles across corporate, guest, and IoT environments. 

• Design, validate, and troubleshoot wireless solutions for indoor and outdoor deployments, applying RF fundamentals and performance optimization practices. 

• Lead complex incident troubleshooting using packet captures and log/event analysis; perform root cause analysis and drive permanent corrective actions. 

• Develop and maintain network automation using Python and/or PowerShell, leveraging APIs (e.g., Meraki Dashboard API) to improve reporting, compliance checks, and bulk-change efficiency. 

• Execute production network changes using formal change management practices, including implementation plans, rollback procedures, risk assessments, and pre/post validation. 

• Create and maintain network documentation, standards, diagrams, and runbooks; communicate technical updates clearly to both technical and non-technical stakeholders. 

• Serve as a Tier 3 escalation point, providing technical leadership, mentoring, and guidance to other engineers and operational teams. 

• Performs other duties as assigned. 

KNOWLEDGE, SKILLS, AND ABILITIES: 

• Advanced proficiency in enterprise network design and operations across large, distributed environments. 

• Strong expertise in network security and firewall technologies (Cisco Firepower/FTD preferred). 

• Advanced proficiency in Azure network connectivity including ExpressRoute, with strong understanding of Megaport interconnect models. 

• Strong understanding of resilient routing design (BGP/OSPF) and traffic-path control. 

• Proven ability to troubleshoot complex network issues using packet captures and log correlation. 

• Strong organizational, documentation, and communication skills; proficiency in Microsoft Office including Visio. 

EDUCATION, EXPERIENCE, AND OTHER REQUIREMENTS: 

• Bachelor’s degree (BA/BS) in Computer Science or related field from four-year college or university; or 7+ years related experience and/or training; or equivalent combination of education and experience in a large enterprise network environment. 

• 7+ years of experience in network engineering, including design and operational support of enterprise WAN/LAN/Wi-Fi environments. 

• 5+ years of hands-on experience supporting Cisco networking solutions, with preference for Meraki-based distributed networks. 

• Experience supporting enterprise firewall platforms, including policy management and troubleshooting. 

• Experience supporting cloud connectivity and hybrid network designs, including ExpressRoute and third-party connectivity providers (e.g., Megaport, Equinix). 

CERTIFICATIONS, LICENSURES, AND LANGUAGE SKILLS: 

• CCIE Enterprise Infrastructure (required) 

• AZ-700 Microsoft Azure Network Engineer Associate (preferred) 

PHYSICAL REQUIREMENTS: 

Position requires little to moderate physical activity. Handling of average weight objects up to 15 pounds; occasional standing or walking; frequently at a keyboard, workstation, or desk.  

WORK ENVIRONMENT: 

Work is typically in a normal office administrative environment involving minimal exposure to physical risks.