Network Engineer- Hybrid (3 days onsite)

Time zone & hours of work: US Time Zones
Start date: September 2026

Job Description:
You will help offset the workload of a lean, hands-on IT team supporting a growing, multi-site enterprise network. You will operate, secure, troubleshoot, and grow a mixed environment spanning legacy Ubiquiti switching, Cisco routing, switching, SD-WAN, and wireless, Palo Alto Networks security, and secure remote access for employees, customers, and partners.

The position combines network engineering with practical site, cabling, and light data center support and requires strong change control, documentation, and customer-service discipline.

Essential Duties And Responsibilities:
Operate, monitor, and maintain the enterprise LAN/WAN built on Cisco routers and switches (Catalyst core, distribution, and access switching; SD-WAN edge routers), ensuring high availability, performance, and resiliency across all sites.
Administer Cisco SD-WAN (SD-WAN Manager, Validator, and Controller), including high-availability and single-device site profiles and integration of SD-WAN edge routing with the LAN.
Deploy, operate, and optimize the enterprise wireless network, including Cisco CW9176I Wi-Fi 7 access points and Catalyst 9800-L wireless controllers operating in FIPS mode; validate coverage and performance through post-installation site surveys and acceptance testing.
Troubleshoot legacy and new-building wireless access, coverage, and performance issues.
Configure, operate, and tune Palo Alto Networks next-generation firewalls (PA-1410 class), including the Advanced WildFire, Advanced URL Filtering, Advanced Threat Prevention, and Advanced DNS Security subscription services.
Design, deploy, and support secure remote access for employees, customers, and partners using Prisma Access (SASE) and VPN, enforcing consistent, least-privilege policy.
Design and maintain routing (BGP, OSPF/EIGRP), switching (VLANs, STP, multigig/PoE for Wi-Fi 7), and IP addressing standards; troubleshoot complex Layer 2/Layer 3 issues end to end.
Provide hands-on site infrastructure support, including installing and mounting access points, pulling and testing network cabling, racking and connecting equipment, and supporting new-building readiness.
Assist with general IT data center activities and provide light infrastructure support for Dell servers and related equipment.
Respond to P1/P2 incidents and complex escalations.
Drive network development and growth: contribute to reference architecture, reusable design templates, standardization across sites, and repeatable, gated site expansions.
Plan and execute upgrades, migrations, and cutovers with phased rollout, rollback planning, and post-cutover validation to minimize business disruption.
Manage lifecycle and patching (firmware/OS) to remediate vulnerabilities and maintain vendor support currency.
Partner with cyber security to detect, prevent, and defend against network vulnerabilities; support security-control alignment (FIPS, CMMC/NIST 800-171) and hardened administrative access.
Provide technical expertise and fully engage during P1/P2 network escalations.
Maintain accurate network diagrams, runbooks, SOPs, and configuration records; engage external vendors on technology evaluation and recommendations.
Coordinate with carriers, vendors, and technology partners on troubleshooting, service delivery, and recommendations.

Qualifications:
REQUIRED
Minimum 7 years of professional experience in network engineering, operations, and network security across multi-vendor technologies including routing, switching, wireless, and security.
Deep, hands-on expertise with Cisco enterprise routing and switching (Catalyst platforms, IOS-XE), including CLI configuration and advanced troubleshooting.
Practical experience supporting legacy Ubiquiti switching.
Proven experience deploying and operating Cisco enterprise wireless (Catalyst 9800 controllers and current-generation access points; Wi-Fi 6E/Wi-Fi 7).
Strong Palo Alto Networks NGFW experience: security policy, NAT, VPN, and advanced subscription services (Advanced WildFire, Advanced URL Filtering, Advanced Threat Prevention, Advanced DNS Security).
Experience delivering and securing remote access / SASE solutions (Prisma Access, VPN) for internal and external users.
Ability and willingness to perform hands-on infrastructure work, including access-point installation, cable pulling and testing, equipment racking and connection, new-building support, and light data center or Dell server support.
Experience designing, scaling, and troubleshooting multi-protocol environments, Cisco SD-WAN deployments, IP connectivity, and carrier or ISP circuits.
Demonstrated ability to drive network development and growth, including multi-site standardization and new-site build-outs.
Working with network automation tools
Ability to work in production with minimal supervision, execute change windows (including after-hours cutovers), and respond to incidents with urgency.
Excellent presentation and communication skills regarding technical and non-technical concepts, and strong documentation skills.
Excellent interpersonal skills and the ability to establish professional working relationships with varying levels of both business and technical personnel.

PREFERRED
CCNP or CCIE preferred (Enterprise Infrastructure, Security or Wireless focus).
Palo Alto Networks certifications a plus (PCNSA / PCNSE).
Experience in FIPS-mode and compliance-driven environments (CMMC, NIST 800-171); aerospace, defense, or regulated-industry background.
Aerospace, defense, or regulated-industry experience.
Familiarity with network automation and scripting (Python, Ansible) and controller-based management/telemetry