Network Engineer - Onsite

POSITION DESCRIPTION

Network Engineer Department: Information Technology | FLSA Classification: Non-Exempt | Employment Type: Full Time

The Network Engineer is responsible for providing advanced L2/L3 support for enterprise and Operational Technology (OT) network environments, ensuring high availability, reliability, and security of critical infrastructure. This role focuses on network operations, firewall administration, network security, vulnerability management, and compliance adherence across IT and OT environments. The Network Engineer will design, implement, and maintain secure network architectures, manage firewall policies, support routing and switching infrastructure, and collaborate with Cybersecurity, Infrastructure, and Operations teams to strengthen the organization's security posture. The ideal candidate will possess strong troubleshooting skills, extensive networking knowledge, and experience supporting enterprise network environments with a focus on security and compliance.

ESSENTIAL FUNCTIONS AND RESPONSIBILITIES

• Primary duties are listed below. This list is illustrative, not exhaustive; additional duties may be assigned as business needs require. Network Operations & Support
• Provide L2/L3 support for enterprise and OT network infrastructure, ensuring high availability and operational stability.
• Troubleshoot and resolve complex network incidents aAecting routing, switching, firewalls, and connectivity services.
• Support network provisioning and deprovisioning activities, including device configuration and deployment.
• Monitor network performance and proactively identify potential issues impacting business operations. Participate in incident response activities and provide root cause analysis for network related outages. Support enterprise and industrial networking environments across multiple locations. Firewall Administration & Network Security
• Design, implement, and manage firewall architectures and security policies across IT and OT environments. Administer Palo Alto firewalls and related security technologies. Configure, maintain, and optimize firewall rules, NAT policies, VPNs, and security zones.
• Perform firewall operating system upgrades, patching, hardening, and maintenance activities.
• Implement security controls aligned with organizational cybersecurity standards and guardrails.
• Collaborate with Cybersecurity teams to improve overall network security posture Routing, Switching & Infrastructure Management
• Configure and support enterprise routing and switching environments.
• Manage network segmentation and micro-segmentation strategies to protect critical infrastructure and industrial control systems.
• Support LAN, WAN, VLAN, and network connectivity services.
• Perform configuration management and lifecycle support for switches, routers, and related network devices.
• Maintain network documentation, diagrams, standards, and operational procedures Vulnerability Management & Compliance
• Drive vulnerability remediation eAorts across network and security infrastructure.
• Track, manage, and ensure timely closure of security findings within established SLAs.
• Ensure compliance with Information Risk Management (IRM) policies and cybersecurity requirements. Support security audits, compliance reviews, and regulatory assessments.
• Maintain documentation supporting network security controls and compliance requirements.
• Participate in risk assessments and remediation planning activities. Security Monitoring & Incident Response
• Monitor network security posture and identify threats, vulnerabilities, and configuration risks.
• Investigate and resolve network security incidents across enterprise and OT environments.
• Analyze logs, alerts, and security events to identify potential risks and operational issues.
• Support implementation of security monitoring and threat detection capabilities.
• Coordinate with Security Operations and Incident Response teams during investigations. Collaboration & Continuous Improvement
• Collaborate with Cybersecurity, Infrastructure, and Operations teams to improve network reliability and security.
• Participate in network modernization and infrastructure improvement initiatives.
• Develop and maintain technical documentation, operational procedures, and knowledge articles. Recommend enhancements to network architecture, security controls, and operational processes. Support project implementation activities and provide technical expertise during deployments.

MINIMUM QUALIFICATIONS

Education Bachelor's or Master's degree in Information Technology, Cybersecurity, Information Systems, Risk Management, Business Administration, Computer Science, or a related field; OR Equivalent combination of education, training, and relevant work experience.

Experience

• 5+ years of experience supporting enterprise network infrastructure and network security environments. Experience providing L2/L3 network support in enterprise environments. Strong experience with firewall administration, preferably Palo Alto Networks.
• Experience supporting routing, switching, and network security technologies.
• Experience working in industrial, manufacturing, energy, utilities, or OT environments is highly preferred.

Certifications (Preferred)

• Palo Alto Certified Network Security Engineer (PCNSE)
• Cisco Certified Network Associate (CCNA)  Cisco Certified Network Professional (CCNP)
• CompTIA Network+
• CompTIA Security+
• Certified Information Systems Security Professional (CISSP)

REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES

Technical Skills

• Strong understanding of TCP/IP, DNS, DHCP, VLANs, routing, switching, and network protocols.
• Expertise in Palo Alto firewall administration and security policy management.
• Knowledge of VPN technologies, NAT, network segmentation, and micro-segmentation.
• Experience with firewall hardening, patching, and vulnerability remediation.
• Familiarity with industrial networking and Operational Technology (OT) environments.
• Understanding of cybersecurity frameworks, risk management, and compliance requirements.
• Experience monitoring and troubleshooting enterprise network infrastructure.  Knowledge of network performance monitoring and security tools.

Professional Skills

• Strong analytical and troubleshooting skills.
• Ability to diagnose and resolve complex network and security issues.
• Excellent communication and documentation skills.
• Strong organizational and time-management abilities.
• Ability to manage multiple priorities in a fast-paced environment.
• Ability to work independently and collaboratively across cross-functional teams.  Strong customer service and stakeholder management skills.

PHYSICAL REQUIREMENTS AND WORK ENVIRONMENT

• The demands below are representative of those required to perform this role's essential functions. Reasonable accommodations will be made for qualified individuals with disabilities in accordance with applicable laws.
• Regularly required to sit, stand, walk, and use computers and office equipment.
• Work is performed primarily in an office or hybrid work environment.
• May require occasional travel between office locations or client sites.
• Ability to participate in audit meetings, compliance reviews, and cross-functional workshops.
• May occasionally support after-hours compliance activities related to audits, assessments, or remediation efforts.

EQUAL EMPLOYMENT OPPORTUNITY

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, colour, religion, sex (including pregnancy and related conditions), gender identity, sexual orientation, national origin, age, disability, genetic information, veteran status, or any other characteristic protected under applicable law. Applicants requiring reasonable accommodation during the hiring process should contact Human Resources in advance.

DISCLAIMER

This job description outlines the general nature and scope of the role and is not intended to be an exhaustive list of all duties, responsibilities, or qualifications. Management reserves the right to modify responsibilities as business needs evolve.