Sr. Network & Infrastructure Engineer - US

SUMMARY

The Senior Network & Infrastructure Engineer owns the network that connects Kids2's US offices, the Suwanee data center, Azure, Hong Kong, mainland China and Mexico. This is a senior, hands-on role on a small Global IT team, owning network architecture and the roadmap as well as firewalls, WAN and site-to-site tunnels, remote access VPN, and Meraki wired and wireless networks.

PRIMARY RESPONSIBILITIES AND ESSENTIAL FUNCTIONS:

• Own the network architecture, design standards and roadmap across all sites.
• Lead network projects such as China connectivity and WAN and firewall refreshes, from design through cutover.
• Manage carriers and network vendors, and give input on the network budget.
• Administer FortiGate and Cisco ASA/FTD (FMC) firewalls, including rules, policies, upgrades and change requests.
• Review firewall rules and logs, and keep configurations backed up and documented.
• Operate the IPsec tunnels and carrier-managed WAN (DTNaaS) between the US, Azure, Hong Kong and China.
• Troubleshoot tunnel, routing and circuit issues, and work with carriers on outages and changes.
• Own Cisco Secure Client and Meraki client VPN, including configuration, client deployment, upgrades and user issues.
• Administer Cisco Meraki MX, MS and MR across all sites, including SSIDs, VLANs, switching, alerts and inventory.
• Operate certificate-based Wi-Fi (SCEPman, RADIUS/NPS) and work with the endpoint team on the device profiles that deliver certificates.
• Plan and lead office network buildouts and moves with the manager and regional IT staff.
• Renew public and internal certificates, including SAP system certificates.
• Manage internal and external DNS.
• Submit changes through Jira Service Management, review other network changes before they go through, and write runbooks for every system owned.
• Serve as the final technical escalation point for network issues.
• Mentor the help desk and regional IT staff on network work.
• Take part in after-hours maintenance windows across US and Asia business hours.

 QUALIFICATIONS & EXPERIENCE

• 7 or more years of network engineering experience in a multi-site company.
• Production experience administering FortiGate or Cisco firewalls, site-to-site IPsec VPN and WAN routing.
• Experience with Cisco Meraki (MX, MS and MR) and remote access VPN such as Cisco Secure Client.
• Experience with network connectivity into mainland China and Azure networking.
• Experience leading network projects and managing carriers and vendors is preferred.

EDUCATION & SKILLS

• Education: Bachelor's degree in Information Technology, Computer Science or a related field, or equivalent experience.
• Certificate lifecycle and DNS administration; 802.1X wireless with RADIUS and certificate-based authentication.
• Clear written documentation and the ability to work with regional IT staff across time zones.

CERTIFICATES, LICENSES, REGISTRATIONS

• CCNP, Fortinet NSE 6 or NSE 7 preferred.

COMPUTER/TECHNICAL SKILLS

• Must be proficient with FortiGate, Cisco ASA/FTD and FMC, Cisco Meraki, Cisco Secure Client and IPsec VPN. Working knowledge of RADIUS/NPS, SCEPman, DNS, Azure networking, Jira Service Management, and PowerShell or Python for network tasks.

PHYSICAL DEMANDS

• While performing the duties of this job, the team member is regularly required to talk or hear.
• The team member frequently is required to sit; have flexible use of hands; reach with hands and arms; and stoop, kneel, crouch, or crawl.
• The team member is occasionally required to stand and walk.
• The team member must regularly lift and/or move up to 10 pounds and occasionally lift and/or move up to 50 pounds, including racking network hardware.
• Specific vision abilities required by this job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus.

WORK ENVIRONMENT

• General office environment in Atlanta, GA (hybrid)
• Regular on-site work at the Suwanee data center
• After-hours maintenance windows across US and Asia business hours