How you will make history here..
The Expert Engineer, Secure LAN, Infrastructureis responsible forproviding hands-on technical leadership and execution across enterprise wired and wireless networks,firewalland network authentication platforms. This role ensures secure, resilient, and high-performing access for corporate offices, manufacturing sites, warehouses, and remote locations.
Reporting to the Sr Manager, Network and Security Engineering, this role partners closely with Network Services delivery teams, Cybersecurity, Hybrid Cloud, Workplace Experience, and Manufacturing IT. This role willretaintechnical ownership, standards authority, and final escalation accountability for LAN,WiFi,Firewalland related authentication, while governing MSP-delivered operations, monitoring, and incident response to ensure consistent service quality.
This is a remote role but must be able to work East Coast Hours
________________________________________
Key Responsibilities Serve as the technical lead for enterprise Secure LAN and Wi-Fi platforms, including design, configuration, optimization, and lifecycle management.
Define andmaintainwireless standards for coverage, capacity, performance, resiliency, and security across all locations.
Lead technical execution for wireless deployments, upgrades, and redesigns across corporate offices, manufacturing plants, warehouses, and specialized environments.
Provide technical leadership for network authentication and access platforms supporting wired and wireless connectivity, including 802.1X, certificate-based authentication, device authentication, and identity-integrated access models.
Define andmaintainenterprise network access control standards, including authentication methods, authorization models, device profiling, guest access, and policy enforcement patterns.
Lead the design and operational governance of identity-driven access control models supporting secure user, device, guest, and operational network access.
Define and enforcefirewallsecurity standards, segmentation models, and traffic control patterns aligned with cybersecurity policies and risk requirements.
Partner with Cybersecurity and Identity teams to ensure authentication, segmentation, and enforcement services align with Zero Trust principles and enterprise security standards.
Support secure access models across enterprise, manufacturing, warehouse, and site-based network environments.
Provide technical leadership for resilient LAN and WAN designs supporting high availability, operational continuity, and scalable connectivity.
Govern MSP-delivered operations, monitoring, and incident response for in-scope services and technologies.
Act as the senior escalation point for complex or systemic access, connectivity, routing, switching, wireless, authentication, and security incidents.
Lead root-cause analysis and corrective action planning for major outages and recurring network incidents.
Participate in design reviews and infrastructure solutioning efforts across network, cybersecurity, cloud, and infrastructure initiatives.
Define andmaintainengineering standards, configuration baselines, network design patterns, documentation, and runbooks.
Identifyopportunities to improve reliability, resiliency, security posture, operational discipline, automation, and cost efficiency.
________________________________________
What you bring to the table... (Must have)- Bachelor27s degree in Information Technology, Engineering, or related field,
- 8+ years of experience engineering enterprise Wi-Fi, authentication, LAN, WAN, or network connectivity platforms.
- Strong hands-on experience with enterprise LAN technologies, switching, wireless, and network access control.
- Strong hands-on experience designing and managing enterprise IPv4 routing across LAN and WAN environments.
- Deep understanding of BGP and OSPF routing protocols and enterprise-scale operations.
- Strongexpertisein Layer 2 segmentation including VLANs, spanningtree, and resilient switching architectures.
- Experience with policy-based access control, including role-based access, device profiling, and segmentation.
- Experience integrating NAC with directory services, PKI, endpoint management, and security tooling.
- Hands-on experience with enterprise networking platforms from vendors such as Cisco, HPE Aruba, Juniper, Fortinet, or equivalent.
- Ability tooperatein multi-vendor environments with depth in at least one leading platform.
- Experience supporting high-availability environments with strict maintenance and change control requirements.
- Experience supporting industrial or site-based environments with network segmentation and zoning.
- UnderstandingPurdue Model andindustrialsegmentation principles.
- Strong troubleshooting and incident resolution capabilities.
- Ability to lead technically without direct people management.
- Demonstrated ability to produce andmaintainhigh-quality technical documentation, including architectural and engineering diagrams, design standards, process documentation, runbooks, configuration baselines, and revision-controlled standards documents that support operational consistency, knowledge transfer, and long-term maintainability.
________________________________________
Nice to have... (Preferred)- Experienceoperatingin MSP-delivered network models.
- Experience supporting hybrid cloud and site-to-site connectivity scenarios.
- Familiarity with Zero Trust networking and identity-integrated access controls.
- Experience supporting SD-WAN or modern enterprise connectivity architectures.
- Experience designing large-scale routing domains and hybrid network architectures.
- Experience withmodern network fabric designs such as spine-leaf and VXLAN.
- Experience with industrial or OT network segmentation and security models.
- Familiarity with IEC 62443 or similar industrial security frameworks.
- Relevant networking, wireless, security, or cloud certifications.
- Deep hands-onexpertisewithfirewallplatforms and network segmentation models.
- Hands-on experience with enterprise NAC platforms supporting 802.1X, MAB, certificates, and identity-based access.
- Experience or strong familiarity with network automation and programmable infrastructure practices, including API-driven workflows, automation platforms, AIOps, agentic AI concepts, and Network as Code approaches used to reduce manual operations, improve repeatability, and enable more consistent network service delivery.
- Familiarity with the emerging use of AI-enabled tools in network engineering and operations, including use cases such as documentationassistance, troubleshooting support, operational analysis, knowledge management, and productivity enhancement through platforms such as Microsoft Copilot or similar enterprise AI tools.
______________________________________
Key Skills- Enterprise wired and Wi-Fi engineering
- LAN/WAN architecture and design
- Layer 2 switching and segmentation
- Network authentication and access control
- Identity-based segmentation
- Firewallengineering and policy management
- Industrial networking fundamentals
- Multi-vendor networking platforms
- MSP governance and escalation
- Network troubleshooting and root-cause analysis
- Network automation, AIOps, and AI-enabled operational workflows
- Technical documentation, architecture diagrams, engineering standards, and process governance
_______________________________________
Compensation and Benefits:
The target base salary range for this full-time, salaried position is between
$153,900-$211,600
Individual base pay depends on work location and additional factors such as experience, job-related skills, and relevant education or training. Total pay may include other forms of compensation. In addition, we offer competitive health, dental, 401k and wellness benefits beginning on the first day of employment. Please ask your Talent Acquisition Partner for more information about our total rewards package.
