POSITION PURPOSEThe Senior Network Administrator designs, implements, secures, and supports Metromont's enterprise network infrastructure across multiple manufacturing and corporate locations. This position maintains reliable and scalable voice, data, wireless, cloud, and security services and serves as the primary networking subject matter expert for Cisco routing, Meraki switching and wireless, Palo Alto firewalls, SD-WAN, VoIP, cloud networking, and cybersecurity.
RESPONSIBILITIES- Design, implement, and maintain enterprise LAN, WAN, wireless, cloud, and hybrid network connectivity across multiple locations.
- Administer Cisco routers and related routing technologies, including BGP, OSPF, and EIGRP.
- Configure, monitor, and troubleshoot Meraki switching and wireless platforms, VLANs, access points, and network segmentation.
- Manage Palo Alto Networks firewalls, security policies, NAT policies, VPNs, threat prevention services, and secure remote access.
- Design, deploy, and support SD-WAN connectivity between corporate offices, manufacturing sites, remote facilities, and cloud services.
- Monitor network availability, performance, capacity, application traffic, circuit health, routing, failover, and site resiliency.
- Design and support Microsoft Azure and Microsoft 365 networking, including virtual networks, VPN connectivity, network security groups, cloud security, and hybrid architectures.
- Administer enterprise VoIP and unified communications systems, including SIP, call routing, auto-attendant, presence, voicemail, device configuration, redundancy, and load sharing.
- Troubleshoot call quality, jitter, latency, one-way audio, packet loss, and QoS issues affecting voice services.
- Implement and maintain cybersecurity controls, including network segmentation, intrusion prevention, vulnerability remediation, security monitoring, least privilege, network access control, and Zero Trust principles.
- Monitor firewall and network security events and participate in incident response, disaster recovery, and business continuity activities.
- Provide Tier III support for complex network, security, cloud connectivity, VPN, wireless, and VoIP issues.
- Develop and maintain accurate network diagrams, configurations, standards, inventories, operating procedures, and support documentation.
- Lead network infrastructure projects, technology evaluations, vendor engagements, upgrades, expansions, and new-site implementations.
- Provide technical mentorship and guidance to IT staff and communicate technical issues and recommendations to non-technical stakeholders.
- Participate in an on-call support rotation and perform planned maintenance outside normal business hours when required.
- Must adhere to all Metromont and OSHA safety rules and regulations.
- Housekeeping as necessary to maintain work area, tools, and equipment in a clean and orderly manner.
SCOPE OF AUTHORITY- This position interfaces frequently with outside vendors, service providers, cybersecurity partners, and internal business and IT teams.
- This position is under the direct supervision of the Director of Information Technology.
- This position has no direct supervisory responsibilities but provides technical leadership and mentorship to other IT staff.
- This position may recommend network, security, cloud, voice, hardware, software, and vendor solutions within established approval and change-management processes.
CHARACTERISTICS (Knowledge, Skills, and Abilities)- Demonstrates ability to analyze complex systems, isolate root causes, and resolve issues across multiple sites and technology platforms.
- Strong analytical, diagnostic, organizational, project management, and documentation skills.
- Excellent customer service, interpersonal, verbal, and written communication skills.
- Ability to communicate technical risks, incidents, designs, and recommendations to both technical and non-technical audiences.
- Self-motivated and capable of working independently while collaborating effectively across infrastructure, security, applications, vendors, and business teams.
- Ability to manage multiple priorities, critical outages, planned projects, and competing business needs in a fast-paced environment.
- Ability to maintain confidentiality and protect company, customer, and associate information.
- Commitment to continuous learning, professional development, security best practices, and operational excellence.
- Flexible work approach; maintenance, upgrades, incident response, and implementations may require off-peak, evening, or weekend work.
EDUCATION AND TECHNOLOGY- Bachelor's degree in Information Technology, Computer Science, Network Engineering, or a related field, or equivalent professional experience.
- At least 7 years of enterprise network administration or engineering experience.
- Extensive hands-on experience administering Cisco routers and enterprise routing technologies.
- Strong hands-on experience with Meraki switches and wireless solutions.
- Hands-on experience managing Palo Alto Networks firewalls and security platforms.
- Experience deploying, administering, and supporting SD-WAN solutions.
- Experience supporting enterprise VoIP and unified communications platforms.
- Experience designing and supporting Microsoft Azure and Microsoft 365 networking, including hybrid connectivity, VPNs, virtual networks, network security groups, and cloud security.
- Experience implementing cybersecurity controls, network segmentation, intrusion prevention, vulnerability remediation, security monitoring, and incident response.
- Strong knowledge of TCP/IP, DNS, DHCP, VLANs, VPN technologies, BGP, OSPF, EIGRP, NAC, Zero Trust, and network security best practices.
- Experience troubleshooting complex network, security, voice, wireless, and cloud connectivity issues across multiple locations.
- Cisco CCNP Enterprise certification or equivalent experience preferred.
- Palo Alto PCNSA or PCNSE certification or equivalent experience preferred.
- Cisco Meraki certification preferred.
- Microsoft Azure Network Engineer Associate certification preferred.
- CISSP, Security+, or equivalent cybersecurity certification preferred.
- Experience supporting manufacturing or industrial environments preferred.
- Experience with network monitoring, SIEM, and security management platforms.
- Experience with automation and scripting using PowerShell, Python, or similar tools preferred.
- Experience supporting highly available, multi-site enterprise environments preferred.
WORK ENVIRONMENT / SCHEDULE- Monday-Friday
- 8 AM-5 PM
- Unscheduled overtime may be required depending on business needs; must be flexible
- Typically works in an open (cubicle) office environment
- Travel to Metromont corporate and manufacturing locations is required as needed.
PERSONAL PROTECTION EQUIPMENT (PPE)- PPE is required when working in the plant.
PHYSICAL REQUIREMENTS- This position requires sitting, standing, walking, bending, reaching, and use of a computer and telephone.
- Must be able to access network closets, equipment rooms, offices, and plant areas as required.
- Must be able to lift, carry, install, or move network and telecommunications equipment consistent with company safety practices.
Disclaimer:This job description is not intended to be all-inclusive. Other duties as assigned may be required. All associates are expected to conduct themselves in a manner that is consistent with Metromont's core values and to actively participate in all company safety, training, and observation programs.
