The Network Engineer plays a critical role in building and maintaining a secure, reliable, and scalable technology infrastructure that supports teaching, learning, and school operations across the district. This role ensures the stability and integrity of district-wide data, voice, video, wireless, and cloud network services.
The Network Engineer is responsible for designing, deploying, and maintaining LAN/WAN architectures; optimizing wired and wireless performance in high-density learning environments; supporting cloud-first initiatives; and ensuring strong cybersecurity safeguards aligned with K-12 data privacy requirements and CIS Controls.
This position supports the full lifecycle of network operations-from planning and implementation to monitoring, incident response, and continuous improvement-ensuring that students, teachers, and staff have dependable access to the systems essential for learning and district operations.

ESSENTIAL RESPONSIBILITIES
Strategy & Planning
• Collaborate with Technology leadership to assess network capacity, future needs, and cloud readiness across all school sites.
• Maintain thorough documentation for network diagrams, configurations, standards, and procedures.
• Develop and maintain policies for network use, cloud services, identity management, and disaster recovery/business continuity.
• Contribute to long-term roadmaps for data center modernization, cloud adoption, and Azure-hosted services.
• Evaluate network impacts of K-12 instructional technology initiatives, including 1:1 programs, online testing, and e-learning platforms.
• Assess cybersecurity risks and support district-wide strategies aligned to FERPA, COPPA, CIPA, and CIS Controls.
Acquisition & Deployment
• Design, deploy, and manage LAN, WAN, WLAN, and cloud-connected architectures across district sites, including routing, switching, firewalls, load balancers, servers, and security appliances.
• Architect, deploy, and maintain Azure cloud networking environments, including VNets, ExpressRoute/VPN gateways, Azure Firewall, NSGs, ASGs, and Azure Monitor.
• Lead network infrastructure upgrades, hardware refresh cycles, and transitions toward cloud-first ecosystems.
• Research and evaluate emerging network technologies, cloud capabilities, and industry best practices relevant to K-12 environments.
• Partner with vendors, E-Rate providers, and service partners to procure cost-effective technology solutions aligned to district goals.
Operational Management
• Configure, optimize, and maintain district networks to ensure uptime and performance that support instructional and administrative needs.
• Manage VMware virtual infrastructure.
• Monitor on-premises and cloud networks using network management and security tools such as Azure Monitor, Meraki Dashboard, and SolarWinds.
• Support connectivity and integration of servers, endpoints, classroom technologies, web filters, VoIP systems, security systems, and IoT/AV equipment.
• Manage and maintain Azure AD, identity integrations, and hybrid infrastructure.
• Ensure adherence to cybersecurity best practices, including MFA, conditional access, identity governance, least privilege, and zero-trust principles.
• Perform system backups, disaster recovery testing, audit logging, and compliance reporting.
• Maintain inventory of network components, licensing, warranties, and cloud resource usage.
• Provide mentorship and technical guidance to junior team members and school site technicians.
• Respond to incidents and outages with urgency, professionalism, and strong communication.
Additional Responsibilities
• Participate in an on-call rotation.
• Inspect and service network equipment, including cabling and network closets.
• Lift and transport moderate equipment such as servers, switches, APs, UPS units, and related hardware.
• Travel frequently to school sites as needed.

QUALIFICATIONS
Required Qualifications
• Bachelor's degree in Computer Science, Information Technology, or related field, or equivalent professional experience (5+ years).
• Proven experience designing and maintaining LAN/WAN/WLAN environments across multiple sites.
• Strong knowledge of TCP/IP, VLANs, DHCP/DNS, routing protocols (OSPF/BGP), QoS, authentication systems (RADIUS/TACACS/AAA), and load balancing.
• Experience managing enterprise wireless environments in high-density settings such as classrooms, auditoriums, and testing labs.
• Experience with Azure networking, identity management, and hybrid infrastructure, including Azure AD, Azure Firewall, VPN gateways, virtual networks, NSGs, and conditional access.
• Working knowledge of cybersecurity best practices, including firewalls, IDS/IPS, endpoint security, SSL certificates, authentication systems, and system hardening.
• Experience supporting Active Directory, Windows Server, and Microsoft 365.
• Understanding of K-12 data privacy requirements, including FERPA, COPPA, and CIPA.
• Experience with cloud migration, network automation, IEEE 802.1X, and Zero Trust security principles.
• Experience with VoIP systems and SIP trunking.
• Experience with cabling infrastructure, network testing tools, and structured wiring standards.
• Strong communication and customer service skills with the ability to explain technical concepts to non-technical stakeholders.
• Ability to collaborate effectively within a school-centered environment.
Preferred Qualifications
• Cisco certifications such as CCNA or CCNP.
• Microsoft Azure certifications such as AZ-104 or AZ-700.
• Security+ or equivalent cybersecurity certification.

COMPENSATION
The starting salary for this position is $90,000-$100,000 annually.
We also offer a comprehensive benefits package and the opportunity to contribute to a growing, mission-driven organization committed to the success of Los Angeles students.

Green Dot California Central Office, Los Angeles, CA