Enterprise Network Engineer

As an Enterprise Network Engineer, you will play a key role in designing, implementing, securing, optimizing, and supporting Metronet's enterprise network infrastructure and network security systems. You will help ensure the reliability, scalability, performance, and security of our wired, wireless, WAN, data center, cloud-connected, and remote-site environments while supporting critical business operations across the organization.

This role is ideal for an experienced network professional who has successfully designed, deployed, and supported enterprise-scale network and security solutions within medium to large business environments. You will lead network and security initiatives, manage infrastructure upgrades, troubleshoot complex technical challenges, and contribute to the continued modernization of our enterprise technology environment.

We're looking for a self-directed engineer who can take ownership of projects from planning through implementation, work independently with minimal supervision, and bring practical, real-world experience with enterprise networking technologies. The ideal candidate will have experience supporting large-scale firewall deployments, data center networking, routing and switching infrastructures, and multi-site enterprise environments. Success in this role comes from combining strong technical expertise with sound decision-making, problem-solving skills, and the ability to drive results in a fast-paced and evolving environment.

ESSENTIAL JOB FUNCTIONS:

• Lead the design, deployment, maintenance, and ongoing optimization of enterprise network infrastructure and network security platforms, including routers, switches, firewalls, wireless access points, WAN circuits, VPNs, and related technologies.
• Independently manage assigned network engineering projects from planning and design through implementation, documentation, testing, and operational support.
• Design and maintain enterprise LAN, WAN, wireless, data center, and cloud-connected network architectures to support business requirements, remote site connectivity, resiliency, performance, security, and future growth.
• Develop, maintain, and evolve network and network security standards, reference architectures, implementation practices, and engineering best practices that support scalability, security, and operational excellence across the enterprise.
• Design, implement, review, and maintain network security controls including firewall policies, ACLs, segmentation, VPN access, NAT, secure management access, zero trust-aligned controls, and access control frameworks.
• Serve as an escalation resource for complex network and network security incidents, including routing, switching, wireless, firewall, VPN, DNS, DHCP, WAN, cloud connectivity, performance, availability, and policy-related issues.
• Perform firewall rule reviews, network access reviews, security policy cleanup, and assist with vulnerability remediation efforts related to network infrastructure.
• Develop and maintain network and security documentation including diagrams, standards, configurations, procedures, support records, implementation plans, firewall rule documentation, and maintenance window documentation.
• Respond to, document, update, and resolve assigned network and security operations tickets in accordance with established service levels, escalation procedures, and change management practices.
• Drive network growth initiatives, capacity planning, infrastructure refresh projects, technology standardization efforts, and network security platform modernization across the enterprise.
• Lead and collaborate with vendors, service providers, contractors, security teams, and internal stakeholders to successfully deliver network projects, site deployments, migrations, cutovers, and infrastructure upgrades.
• Occasional travel to Evansville, IN for team meetings and collaboration events (approximately twice per year).
• All other duties as assigned

JOB QUALIFICATIONS AND REQUIREMENTS:

• Bachelor's degree or better in related field or 4+ years of related network engineering and network security experience minimum.
• Strong experience with NGFW firewalls such as Cisco Firepower, Palo Alto, or FortiGate, including firewall policy management, NAT, VPN, logging, troubleshooting, rule review, and problem resolution.
• Experience with enterprise networking technologies and management platforms such as Arista, Juniper, Cisco Nexus, Cisco ISE, Cisco ACI, NDFC, or similar enterprise networking and infrastructure management solutions preferred.
• Experience designing, deploying, and supporting enterprise-scale network infrastructure within medium-to-large multi-site business environments.
• Strong understanding of networking architectures, standards, and protocols, including routing, switching, VLANs, spanning tree, wireless, WAN, VPN, DNS, DHCP, NAT, QoS, and high availability concepts.
• Experience with network security concepts including segmentation, ACLs, least privilege access, secure remote access, zero trust principles, logging, monitoring, and incident response support.
• Experience with Cisco Catalyst 9000 switching platforms and enterprise wireless solutions such as Cisco Catalyst Wireless or Meraki preferred.
• Experience with dynamic routing protocols such as BGP, OSPF, or EIGRP, including route filtering, redistribution, and troubleshooting preferred.
• Experience with SD-WAN technologies, VPN technologies, WAN provider coordination, and remote-site connectivity preferred.
• Experience configuring, deploying, and maintaining Cisco network devices in enterprise LAN, WAN, wireless, security, and data center environments.
• Understanding of cloud networking and hybrid network connectivity concepts, including public cloud platforms such as AWS or Azure and related security controls.
• Experience with network monitoring, firewall logging, NetFlow, SNMP, Syslog, packet analysis, and performance troubleshooting tools preferred.
• Demonstrated ability to independently manage complex network engineering projects, troubleshoot advanced technical issues, and drive solutions with minimal supervision.
• Ability to communicate technical and security matters clearly to peers, leadership, vendors, contractors, and non-technical counterparts.
• Good oral and written communication skills with the ability to document technical designs, changes, security decisions, and operational procedures.
• Detail-oriented organizational skills with the ability to manage multiple priorities, projects, operational issues, and security-related requests.
• Dependability, adaptability, flexibility, creativity, professional attitude, and the ability to understand complex issues, drive troubleshooting efforts, escalate appropriately when needed.
• Willingness to work as a team and independently.
• Must be legally authorized to work in the U.S.

ADDITIONAL JOB REQUIREMENTS:

• Participate in an on-call rotation to support network and security incidents outside normal business hours.
• Industry-recognized certifications such as CCNP Enterprise, CCNA, Cisco Security, Palo Alto, Fortinet, AWS Networking, CompTIA Network+, Security+, or equivalent preferred.
• Experience designing, implementing, securing, and supporting enterprise network infrastructure in a multi-site environment.

Pay Range: $75,000 - $95,000/yr.

#LI-AF1