7+ years of hands-on network engineering experience, including 2 years in a leadership role.
Deep expertise in routing and switching protocols such as BGP, VLANs, and QoS.
Production experience with Azure networking components like ExpressRoute and VPN gateways.
Strong documentation skills, including IPAM discipline and change management practices.
Active professional certification such as CCNP Enterprise or equivalent required.
Ability to manage vendor relationships and asset tracking effectively.
Comfortable with hands-on tasks including racking and cabling.
Responsibilities
Design and operate LAN, WAN, and wireless networks across multiple locations.
Manage datacenter networking and telecom connections.
Engineer hybrid cloud networking solutions, including Azure components.
Administer F5 BIG-IP with WAF, focusing on policy tuning and upgrades.
Implement network security measures aligned with Zero Trust principles.
Oversee IP address management and network documentation.
Build and maintain network monitoring and alerting systems.
Benefits
Full-time position based in Houston, TX.
Opportunity to mentor junior IT staff and shape network operations.
Engagement in compliance programs like SOC 2 Type II and FedRAMP.
Hands-on role with direct involvement in network engineering tasks.
Work in a dynamic environment with a focus on cutting-edge technology.
Full Job Description
Position Overview
This is a player-coach position. You will own Zedcor's network end to end: office LAN/WAN and wireless, datacenter networking for our on-premises virtualization and Azure Local buildout, hybrid Azure connectivity, and the edge connectivity that keeps surveillance towers streaming. You help set the standards, do the hands-on engineering, and build the operational discipline our compliance program depends on. This role is based full-time at our Houston office in the Willowbrook area.
Key Responsibilities
Design, build, and operate LAN, WAN, and wireless networks across the Houston headquarters, Calgary and remote sites across the US and Canada, including structured cabling, switching, wireless, 802.1x, VPN.
Own datacenter networking, Telcom connection management and monitoring.
Engineer and operate hybrid cloud networking: ExpressRoute, VPN gateways, virtual networks, NAT gateways, DNS, and Azure Front Door.
Administer the F5 BIG-IP with WAF fronting production, including policy tuning, upgrades, and failover testing.
Manage firewalls, network segmentation, and access controls aligned to Zero Trust principles and Entra ID-based identity.
Own IP address management, DNS/DHCP, and network documentation; drive the IPAM platform operation.
Manage ISP and carrier relationship across multiple sites/countries, including circuit provisioning, escalation, and cost control
Build network monitoring and alerting into our monitoring stack and respond to network-related security events
Produce and maintain the change records, diagrams, and configuration evidence required for SOC 2 Type II, and participate in audit walkthroughs
Mentor and direct junior IT staff on network tasks; establish runbooks so the network survives without heroics
Qualifications & Requirements
Key Responsibilities
Design, build, maintain, and troubleshoot IPsec and SSL VPN networks.• Manage and support a Cradlepoint environment of 20,000+ devices.
Manage Sophos firewalls or become proficient with Sophos within the first 30 days if experienced with another major firewall platform.
Ensure DNS and DHCP are centrally managed, monitored, logged, secured, and not hosted directly on firewalls.
Patch, monitor, log, audit, and secure network infrastructure.
Ensure network links, management access, VPNs, and sensitive data flows are encrypted.
