Role Purpose

Our IT mission is to ensure technology genuinely empowers H&V to create a cleaner world-and the network is what carries that mission between every site, system, and person. When it works, no one thinks about it. When it doesn't, a plant can't reach the ERP, a mill drops off monitoring, and the business feels it. The network you help run underpins nearly everything H&V does.

As a Network Engineer, you're the hands that keep the network running and growing. You deploy and configure the switches, firewalls, wireless, and connectivity our sites depend on-working to the standards and designs set by the senior engineering team, and contributing your own ideas where they help. This is a hands-on, execution-focused role: you'll spend your days deploying hardware, making changes, resolving issues, and keeping the network healthy across H&V's mills and offices. A central part of the role is deploying next-generation firewalls across our OT (operational technology) sites-hands-on project work that directly shapes how we protect production. You'll grow under the guidance of senior engineers, and throughout you put the customer first: success is measured by whether the business can rely on the network you help build.
Key Responsibilities

Network Deployment & Engineering

• You deploy and configure network hardware-switches, routers, and wireless access points-installed cleanly, configured to standard, and documented.
• You make the day-to-day changes: VLANs, port configuration and security, and switch and routing updates, executed carefully and with change discipline.
• You keep campus switching and wireless coverage holding up in industrial environments-not just conference rooms-and the wiring closet organized and documented.
• You work to the designs and standards set by the senior engineering team, and you contribute to design where your hands-on perspective helps.
• You troubleshoot connectivity issues from the physical layer up, and when something is beyond your depth you escalate with good information-after you've dug in, not before.

OT Firewall Deployment

• You're hands-on in deploying next-generation firewalls (Palo Alto) across H&V's OT sites-staging, installing, cabling, configuring to the approved design, and validating cutover.
• You partner with the OT Engineering team and senior network engineers to roll these out without disrupting production-OT environments can't just be rebooted, and you plan your work accordingly.
• You document each deployment so the next site goes faster and the estate stays consistent.

WAN, Connectivity & Firewalls

• Our MSP monitors the WAN day to day. When they escalate to check on-site conditions-a link, a device, a wiring closet-you make sure the question gets answered: handling it yourself, or coordinating someone on the field team to be your eyes and hands at the site.
• You support the wide-area network-SD-WAN (Cato SASE), MPLS, and VPN-working tickets and escalations through to resolution.
• You test HA failover on firewall pairs and redundant paths so the redundancy actually works when it's needed. Redundancy you've never failed over to is a hope, not a plan.
• You implement firewall changes to approved, scoped requests-specific sources, destinations, and ports, documented-so "allow" is always deliberate, never any/any.
• You help maintain segmentation and apply security standards as they're designed.

UPS, Power & Environmental

• You ensure UPS units across sites are monitored and maintained-batteries replaced on schedule and alerts configured, so a failing unit is known before it drops a load.
• You keep an eye on the power and environmental conditions the network gear depends on, and you flag risks before they take a closet down.

Monitoring, Documentation & Backups

• You monitor the network for faults and alerts, and you investigate them rather than just clearing them.
• You keep documentation and inventory current-topology, addressing, and device records that match reality.
• You back up device configurations so any device can be rebuilt. A config that only lives on the device is a config you'll eventually lose.

Privileged & Secure Access

• You work within the Privileged Access Management (PAM) model-admin credentials come from the vault, MFA is on, and you don't keep standing admin rights or local copies of passwords.
• You help enroll new network and security devices into PAM as they're deployed.

Tools, Automation & AI

• You use scripts and vendor tools to make repetitive work faster and less error-prone, and you lean on AI assistants in your day-to-day to work more effectively.
• You bring curiosity for doing things better-not just clearing the queue.

Vendor & Carrier Coordination

• You coordinate with carriers, vendors, and MSPs on deployments and support tickets-holding them to what was promised and escalating when they don't deliver.

How You Work

• You solve the customer's problem, not just the ticket-you ask what they're actually trying to accomplish before reaching for a fix.
• You look for what can be done, not why it can't-and when the answer is no, you bring an alternative or escalate.
• You communicate clearly across audiences-the infrastructure team, the wider IT organization, and the business. People hear from you early and often, especially when things are hard, and you translate technical status into what each audience actually needs to know.
• You ask questions and learn fast. You're growing into a senior engineer, and you treat feedback as fuel.

What You Own

• Clean deployments - hardware installed, configured to standard, and documented.
• Changes made carefully, with the change process followed and nothing left half-done.
• UPS and power monitoring kept current, so a dead battery never takes a site by surprise.
• Accurate documentation and device configuration backups.
• Tickets and issues driven to resolution, with clear escalation when you need it.

What We're Looking For

Required

• US citizen or Green Card holder.
• 3+ years of hands-on network experience, or strong fundamentals paired with a relevant certification.
• Solid working knowledge of switching and VLANs, plus practical routing fundamentals.
• Hands-on experience deploying and configuring network hardware-switches, access points, and firewalls.
• Comfortable making network changes carefully and following a change process.
• Familiarity with firewalls (Palo Alto a plus) and core network security concepts.
• Willing and able to travel to H&V sites for deployments-including the OT firewall rollout-and to participate in an after-hours/on-call rotation.
• Customer-first mindset and a genuine willingness to learn and grow.
• Strong communicator-you can keep the infrastructure team, the wider IT organization, and business stakeholders clearly informed, in terms that fit each audience.
• Working comfort with AI tools in day-to-day work.

Preferred

• CCNA (or actively working toward it); CCNP a bonus.
• Exposure to our stack-Cato SASE and Palo Alto NGFW-or close equivalents.
• Experience in manufacturing, OT/industrial, or distributed site environments.
• Familiarity with UPS/power monitoring and structured cabling.
• Bachelor's degree in a related field, or equivalent work experience.