4/13/26

Bethlehem, Pennsylvania, 18015,

Senior Network Engineer

ABOUT THE ROLE...

We are seeking a Senior Network Engineer with deep expertise in enterprise networking and security architecture. This role will serve as a senior technical contributor responsible for the design, implementation, optimization, and support of a modern, secure, and scalable network infrastructure. The ideal candidate has strong hands-on experience with Fortinet solutions and Zscaler cloud security platforms and is comfortable operating in a hybrid on-premises and cloud environment.

* Requires occasional domestic travel to retail sites and international travel to production facilities in Latin America and Europe.
WHAT WILL YOU BE RESPONSIBLE FOR?

- Design, deploy, and maintain enterprise network architectures, including LAN, WAN, SD-WAN, and cloud connectivity.
- Lead implementation and ongoing management of Fortinet solutions (FortiGate, FortiManager, FortiAnalyzer, FortiSwitch, FortiAP).
- Architect and administer Zscaler solutions (ZIA, ZPA, ZDX) to support zero trust, secure access, and cloud-first strategies.
- Act as a senior escalation point for complex network and security incidents; perform root cause analysis and drive remediation.
- Develop and enforce network security standards, best practices, and operational procedures.
- Partner with security and systems teams to align networking solutions with business and security requirements.
- Lead network modernization initiatives, including migration from legacy perimeter models to Zero Trust architectures.
- Perform capacity planning, performance tuning, and continuous optimization of network environments.
- Evaluate new technologies and provide technical recommendations aligned with business strategy.
- Create and maintain detailed network documentation, diagrams, and operational runbooks.
- Mentor junior engineers and provide technical leadership across projects.

REQUIRED QUALIFICATIONS:

- 5+ years of experience in enterprise networking and infrastructure engineering.

- In-depth knowledge of TCP/IP, DNS, DHCP, BGP.
- Strong hands-on experience with Fortinet technologies, especially FortiGate firewalls and SD-WAN.
- Proven experience implementing and operating Zscaler (ZIA and ZPA required).
- Experience with VPN technologies (IPsec, SSL).
- Experience with hybrid networking (on-prem, data center, and public cloud environments such as Azure).
- Strong troubleshooting skills in complex, multi-vendor environments.
- Ability to clearly communicate technical concepts to both technical and non-technical stakeholders.

PREFERRED QUALIFICATIONS

- Fortinet certifications (NSE 4-7) and/or Zscaler certifications.
- Experience with SASE and Zero Trust network architectures.
- Experience supporting global or multi-region enterprise networks.
- Background working in regulated or security-sensitive environments.

CORE COMPETENCIES

- Strategic thinking and problem-solving.
- Strong documentation and process discipline.
- Ability to lead by influence and technical expertise.
- Customer-focused, service-oriented mindset.
- Comfortable operating in fast-paced, evolving environments.

WHAT IS ON OFFER?

As a colleague at Scandinavian Tobacco Group, you will receive a comprehensive compensation package as a generous benefits package.
• Comprehensive Health Care, Vision & Dental Plan
• Flexible Spending Account
• Disability Plans
• Basic & Supplemental Life Insurance
• Additional Supplemental Benefits
• Paid Vacation, Paid Time Off (PTO) days, Holidays
• 401(k) Retirement Saving Plan including a generous Company match

*Please be informed that this Direct Search is conducted exclusively by the Scandinavian Tobacco Group. We do not accept applications from agencies, and we will not provide compensation for unsolicited CVs.

If you are currently working in STG, please click on Emloyee Login to apply to our internal positions