Expert Engineer, Secure LAN Infrastructure

The Campbell's Company is a long-established brand known for connecting people through food. They are seeking an Expert Engineer for Secure LAN Infrastructure to provide technical leadership across enterprise networks, ensuring secure and high-performing access for various locations.

Responsibilities:

• Serve as the technical lead for enterprise Secure LAN and Wi-Fi platforms, including design, configuration, optimization, and lifecycle management
• Define and maintain wireless standards for coverage, capacity, performance, resiliency, and security across all locations
• Lead technical execution for wireless deployments, upgrades, and redesigns across corporate offices, manufacturing plants, warehouses, and specialized environments
• Provide technical leadership for network authentication and access platforms supporting wired and wireless connectivity, including 802.1X, certificate-based authentication, device authentication, and identity-integrated access models
• Define and maintain enterprise network access control standards, including authentication methods, authorization models, device profiling, guest access, and policy enforcement patterns
• Lead the design and operational governance of identity-driven access control models supporting secure user, device, guest, and operational network access
• Define and enforce firewall security standards, segmentation models, and traffic control patterns aligned with cybersecurity policies and risk requirements
• Partner with Cybersecurity and Identity teams to ensure authentication, segmentation, and enforcement services align with Zero Trust principles and enterprise security standards
• Support secure access models across enterprise, manufacturing, warehouse, and site-based network environments
• Provide technical leadership for resilient LAN and WAN designs supporting high availability, operational continuity, and scalable connectivity
• Govern MSP-delivered operations, monitoring, and incident response for in-scope services and technologies
• Act as the senior escalation point for complex or systemic access, connectivity, routing, switching, wireless, authentication, and security incidents
• Lead root-cause analysis and corrective action planning for major outages and recurring network incidents
• Participate in design reviews and infrastructure solutioning efforts across network, cybersecurity, cloud, and infrastructure initiatives
• Define and maintain engineering standards, configuration baselines, network design patterns, documentation, and runbooks
• Identify opportunities to improve reliability, resiliency, security posture, operational discipline, automation, and cost efficiency

Requirements:

• Bachelor's degree in Information Technology, Engineering, or related field
• 8+ years of experience engineering enterprise Wi-Fi, authentication, LAN, WAN, or network connectivity platforms
• Strong hands-on experience with enterprise LAN technologies, switching, wireless, and network access control
• Strong hands-on experience designing and managing enterprise IPv4 routing across LAN and WAN environments
• Deep understanding of BGP and OSPF routing protocols and enterprise-scale operations
• Strong expertise in Layer 2 segmentation including VLANs, spanning tree, and resilient switching architectures
• Experience with policy-based access control, including role-based access, device profiling, and segmentation
• Experience integrating NAC with directory services, PKI, endpoint management, and security tooling
• Hands-on experience with enterprise networking platforms from vendors such as Cisco, HPE Aruba, Juniper, Fortinet, or equivalent
• Ability to operate in multi-vendor environments with depth in at least one leading platform
• Experience supporting high-availability environments with strict maintenance and change control requirements
• Experience supporting industrial or site-based environments with network segmentation and zoning
• Understanding Purdue Model and industrial segmentation principles
• Strong troubleshooting and incident resolution capabilities
• Ability to lead technically without direct people management
• Demonstrated ability to produce and maintain high-quality technical documentation, including architectural and engineering diagrams, design standards, process documentation, runbooks, configuration baselines, and revision-controlled standards documents that support operational consistency, knowledge transfer, and long-term maintainability
• Experience operating in MSP-delivered network models
• Experience supporting hybrid cloud and site-to-site connectivity scenarios
• Familiarity with Zero Trust networking and identity-integrated access controls
• Experience supporting SD-WAN or modern enterprise connectivity architectures
• Experience designing large-scale routing domains and hybrid network architectures
• Experience with modern network fabric designs such as spine-leaf and VXLAN
• Experience with industrial or OT network segmentation and security models
• Familiarity with IEC 62443 or similar industrial security frameworks
• Relevant networking, wireless, security, or cloud certifications
• Deep hands-on expertise with firewall platforms and network segmentation models
• Hands-on experience with enterprise NAC platforms supporting 802.1X, MAB, certificates, and identity-based access
• Experience or strong familiarity with network automation and programmable infrastructure practices, including API-driven workflows, automation platforms, AIOps, agentic AI concepts, and Network as Code approaches used to reduce manual operations, improve repeatability, and enable more consistent network service delivery
• Familiarity with the emerging use of AI-enabled tools in network engineering and operations, including use cases such as documentation assistance, troubleshooting support, operational analysis, knowledge management, and productivity enhancement through platforms such as Microsoft Copilot or similar enterprise AI tools