Network Engineer / Senior Infrastructure Engineer

Full-Time | Multi-Site Environment | Periodic On-Site Visits

Position Overview

We are seeking a highly skilled Network Engineer to lead the design, remediation, security hardening, and long-term modernization of our multi-site IT infrastructure environment. This role is responsible for defining technical standards, architecting secure network and identity solutions, developing IT and cybersecurity policies, and directing operational execution performed by the on-site Junior Systems Administrator.

This is a hands-on technical leadership role requiring strong expertise in network security, firewall management, Active Directory architecture, vulnerability remediation, VPN access control, and enterprise infrastructure governance.

The successful candidate must be highly responsive, organized, and capable of independently driving infrastructure and cybersecurity initiatives across multiple concurrent workstreams.

Key Responsibilities

Network Infrastructure & Security

Design, configure, and maintain secure network infrastructure across multiple business locations
Lead firewall modernization initiatives including Fortinet and Palo Alto environments
Configure and manage:
Security policies
VPN infrastructure
NAT rules
Threat prevention profiles
URL filtering
Access control policies
Design and implement secure VLAN segmentation and firewall zoning strategies
Eliminate insecure network configurations and improve overall network architecture
Architect secure enterprise Wi-Fi authentication using 802.1X and credential-based access controls

Firewall & VPN Administration

Manage Fortinet and Palo Alto firewall environments including firmware upgrades and security remediation
Design secure VPN access models using Active Directory Security Groups and least-privilege principles
Replace legacy or end-of-life network infrastructure with modern secure solutions
Maintain and improve remote access security and network segmentation policies

Active Directory & Identity Governance

Design and maintain Active Directory architecture and Group Policy standards
Develop tiered administrative access models and privileged access controls
Architect and deploy MFA across administrative and remote access systems
Design and document formal joiner/mover/leaver identity governance processes
Eliminate shared administrative accounts and implement secure role-based access controls

Vulnerability & Patch Management

Own vulnerability management and remediation programs using Qualys, Tenable, or equivalent tools
Define patching standards, remediation SLAs, and compliance reporting processes
Design and maintain formal patch management policies and operational procedures
Direct remediation priorities and provide technical guidance to the Junior Systems Administrator

Security Hardening & Compliance

Design and deploy enterprise security hardening standards using Group Policy Objects (GPOs)
Enforce organization-wide controls including:
SMB signing
TLS hardening
Weak cipher removal
NLA enforcement for RDP
Automatic screen lock policies
Lead SSL/TLS certificate lifecycle remediation and management initiatives
Improve endpoint, network, and identity security posture across the organization

Documentation & Policy Development

Write and maintain:
IT security policies
Infrastructure standards
Technical runbooks
Architecture documentation
Operational procedures
Develop core policies including:
Acceptable Use Policy
Password Policy
Access Control Policy
Incident Response Policy
Data Handling Policy
Provide clear technical documentation for both IT teams and business leadership

Leadership & Technical Direction

Provide technical leadership and operational guidance to the Junior Systems Administrator
Break down projects into actionable implementation tasks
Prioritize remediation initiatives and manage multiple concurrent infrastructure projects
Act as the primary technical escalation point for complex infrastructure and security issues

Required Qualifications

3–6 years of experience in network engineering, infrastructure engineering, or senior systems administration
Strong hands-on experience with Fortinet and Palo Alto firewall environments
Advanced knowledge of:
Network segmentation
VLANs
VPNs
Active Directory
Group Policy
MFA implementation
Windows Server environments
Experience designing secure infrastructure and identity governance frameworks
Strong understanding of SSL/TLS, certificate lifecycle management, and security hardening
Experience with vulnerability management and patch governance programs
Strong technical documentation and policy writing skills
Ability to work independently across multiple sites and priorities

Nice-to-Have Skills

SIEM and centralized log management experience
Penetration testing coordination and remediation planning
Azure / Entra ID and hybrid identity environments
Managed Detection & Response (MDR) vendor experience
PowerShell scripting and automation
Virtualization and cloud infrastructure exposure

Preferred Certifications

Palo Alto PCNSA or PCNSE
Fortinet NSE 4 or higher
CompTIA Security+
Cisco CCNA
Microsoft AZ-500 or SC-200

Soft Skills & Culture Fit

Strong written and verbal communication skills
Highly organized and detail-oriented
Responsive and dependable while working remotely or across multiple locations
Strong prioritization and project ownership capabilities
Calm and solution-focused under pressure
Able to clearly delegate and mentor junior technical staff
Comfortable making recommendations and owning technical outcomes

Work Environment

Full-time permanent role
Shared resource supporting multiple locations
Hybrid / remote-capable with periodic on-site visits
High-impact technical leadership position
Immediate hiring priority

Professional Staffing

New Jobs

Network Engineer