GENERAL SUMMARY:

Responsible for the design, deployment, and support of enterprise network infrastructure. Involves advanced configuration and troubleshooting of Layer 2 and Layer 3 networks, including routing, switching, firewalls, and SD-WAN technologies. Contributes to architectural decisions, mentors junior engineers, and leads small to medium-sized infrastructure projects across LAN, WAN, wireless, VPN, and cloud-integrated environments. Working closely with senior engineering staff, vendors, and cross-functional IT teams, ensures high availability, performance, and security of network services while driving operational improvements and adherence to industry best practices.

PRINCIPAL JOB FUNCTIONS:

1. *Leads the deployment, configuration, and optimization of Layer 2 and Layer 3 network infrastructure, including switches, routers, wireless controllers, and firewalls.

1. *Performs advanced troubleshooting of network incidents and performance issues across LAN, WAN, VPN, and wireless environments, escalating to senior staff when necessary.

1. *Implements and maintains network segmentation, VLAN strategies, and routing protocols such as OSPF and BGP.

1. *Leads routine network maintenance and lifecycle management, including firmware upgrades, device replacements, and structured cabling improvements.

1. *Designs, implements, and maintains secure site-to-site and remote-access VPN connections with third-party vendors and partners.

1. *Configures and manages SD-WAN infrastructure (e.g., Palo Alto ION), optimizing network traffic and failover policies.

1. *Utilizes advanced monitoring and diagnostic tools (e.g., SolarWinds, Wireshark, Palo Alto Panorama) to proactively identify and resolve network issues.

1. *Maintains detailed and accurate network documentation including topology diagrams, configuration standards, and change control records.

1. *Assists in the design and execution of enterprise network projects and infrastructure upgrades, collaborating across IT disciplines and with external vendors.

1. *Contributes to the development and enforcement of network security practices, including firewall policies, access controls, and segmentation strategies.

1. *Provides Tier 2 and Tier 3 network support, serving as an escalation point for Network staff and mentoring junior team members.

1. *Participates in network architecture discussions and capacity planning to support organizational growth and technology initiatives.

1. *Contributes to the evaluation and testing of emerging networking technologies and makes recommendations for adoption where appropriate.

1. *Participates in the on-call rotation for after-hours network support and planned maintenance windows.

1. Enters restricted access areas without supervision to perform advanced network-related tasks.

1. Provide end-to-end network support for Community Connect partners, including design validation, secure connectivity (SD-WAN/VPN), troubleshooting, and ongoing optimization of network paths to ensure reliable and secure access to hosted applications such as EPIC and other Bryan owned services and solutions.

1. Maintains professional growth and development through seminars, workshops, and professional affiliations to keep abreast of latest trends in field of expertise.

1. Participates in meetings, committees and department projects as assigned.

1. Performs other related projects and duties as assigned.

(Essential Job functions are marked with an asterisk "*").

REQUIRED KNOWLEDGE, SKILLS AND ABILITIES:

1. Knowledge of networking protocols and concepts, including TCP/IP, BGP, OSPF, VRRP, EIGRP, and MPLS.

1. Knowledge of Layer 2 and Layer 3 technologies, including VLAN design, trunking, spanning-tree protocol, static and dynamic routing, and inter-VLAN routing.

1. Knowledge of enterprise-grade networking equipment from vendors such as Extreme, Aruba, and Palo Alto.

1. Knowledge of SD-WAN architecture and implementation, particularly Palo Alto ION deployment and policy configuration.

1. Knowledge of network security principles, including segmentation, firewall zoning, zero-trust access, and vulnerability mitigation strategies.

1. Knowledge of authentication, authorization, and accounting (AAA), 802.1X, and network access control systems.

1. Skill in configuring and maintaining enterprise firewalls, NAT policies, and access control rules-preferably in Palo Alto environments using Panorama.

1. Skill in verbal and written communication to interface with technical staff, management, vendors, and non-technical stakeholders.

1. Skill in using advanced network diagnostic and monitoring tools (e.g., Wireshark, SolarWinds, NetFlow analyzers) to resolve complex issues and ensure high availability.

1. Ability to design, implement, and troubleshoot secure VPN solutions (site-to-site and remote-access) in multi-vendor environments.

1. Ability to design and maintain comprehensive network documentation, including topology diagrams, IP schemas, and standard operating procedures.

1. Ability to manage and execute infrastructure projects from planning to implementation, including vendor coordination, budgeting input, and milestone tracking.

1. Ability to mentor junior staff, share technical knowledge, and lead troubleshooting or implementation efforts.

1. Ability to work independently on complex tasks and make sound technical decisions with minimal oversight.

1. Ability to maintain confidentiality relevant to sensitive information.

1. Ability to maintain regular and punctual attendance.

EDUCATION AND EXPERIENCE:

Associate degree in Computer Science, Information Technology, Networking, or a related field required. Bachelor's degree preferred. Minimum of three (3) years of progressively responsible experience supporting, configuring, and troubleshooting enterprise network infrastructure in a multi-site or complex environment required. In lieu of Associates degree, an additional two (2) years of progressively responsible experience in these same areas required.

Experience with one or more enterprise networking platforms (e.g., Extreme, Cisco, Aruba, Palo Alto) in production environments required. Experience leading technical tasks or projects, mentoring junior staff, or contributing to network architecture discussions preferred.

OTHER CREDENTIALS / CERTIFICATIONS:

The following certifications are preferred.

• Cisco Certified Network Associate (CCNA)

• Cisco Certified Network Professional (CCNP Enterprise)

• CompTIA Security+

• Palo Alto Networks Certified Network Security Administrator (PCNSA)

• Extreme Networks Certified Specialist (ECS)

• Aruba Certified Professional (ACP)

PHYSICAL REQUIREMENTS:

(Physical Requirements are based on federal criteria and assigned by Human Resources upon review of the Principal Job Functions.)

(DOT) -- Characterized as medium work requiring exertion of 20 to 50 pounds of force occasionally, and / or 10 to 25 pounds of force frequently, and / or greater than negligible up to 10 pounds of force constantly to move objects.

Involves sitting most of the time but may involve walking or standing for brief periods as well as working above your head while on a ladder.