Network Engineer

Your essential job functions will include but may not be limited to: Maintain, troubleshoot, and expand enterprise on-premise network infrastructure. Support routing, switching, VLAN, VRF, firewall, VPN, load balancing, and network segmentation requirements. Assist with integration between the on-premise environment and pilot cloud enclave. Develop and maintain network diagrams, IP plans, port/protocol matrices, firewall rule documentation, and routing documentation. Support network connectivity for multi-tenant environments, backend systems, frontend access systems, storage systems, directory services, and management networks. Perform network configuration changes through formal change management processes. Troubleshoot packet loss, latency, asymmetric routing, MTU issues, DNS issues, TLS inspection issues, firewall policy issues, and routing failures. Support secure enclave design using segmentation, access control lists, firewall policies, VPNs, and zero-trust principles. Participate in migration planning, cutover events, test events, and rollback planning. Support monitoring, logging, and alerting for network performance and availability. Coordinate with cybersecurity teams to ensure network controls align with organizational security requirements. Contribute to network standards, configuration baselines, and operational runbooks. Explain network risk, operational impact, and mitigation strategies. Mentor junior staff and participate in architecture reviews. Assist PM and System Administrators in procurement activities Assist in the planning for large-scale projects through vendor comparison and cost studies Create and deliver system status updates to customers and stakeholders TCP/IP, subnetting, routing, switching, NAT, PAT, VLANs, trunks, ACLs, QoS, and network segmentation. Dynamic routing protocols such as OSPF, BGP, EIGRP, or equivalent enterprise routing protocols. Firewall rule design, inter-zone traffic policy, VPN tunnels, and security boundary enforcement. Enterprise DNS, DHCP, NTP, IPAM, and certificate-aware network services. Hybrid connectivity concepts such as site-to-site VPN, private circuits, cloud gateways, and transit routing. Network troubleshooting using CLI tools and packet-level analysis. High availability network designs, including redundant links, routing failover, firewall HA, and load balancing. Change control, maintenance windows, implementation planning, and rollback execution. Network documentation suitable for operations, engineering review, security review, and leadership briefing. Strong documentation discipline. Comfortable working in maintenance windows and high-visibility operational environments. Ability to communicate clearly with technical and non-technical stakeholders. Self-starter with a strong sense of personal responsibility. 10 years' experience working as a Network Engineer or related field. Proficiency with Active Directory, domain controllers, IP addressing, DNS, remote access, VLANs, and VoIP systems Bachelor's degree in an IT-related field (e.g., cybersecurity, computer science, computer engineering). CompTIA Network+, Security+ Cisco CCNA, CCNP, DevNet Azure Network Engineer, Google Professional Cloud Network Engineer, AWS Cloud Engineer VMware VCP, VCAP Red Hat RHCSA, RHCE Cisco IOS, IOS-XE, NX-OS, Catalyst, Nexus Must possess a Top Secret (TS) security clearance (with SCI and SAP eligibility). LI-MM1 ONSITE