Senior Network Engineer

About the role

The Senior Network Engineer is responsible for designing, operating, and continuously improving the enterprise network that spans Safe-Guard's multi-site business, data center, and cloud environments. This role involves partnering with engineering, security, and infrastructure teams to enable the next generation of Safe-Guard’s technology platform.

Responsibilities

• Architect, deploy, and operate enterprise network infrastructure across corporate offices, data centers, and our cloud environments, including routing, switching, firewalls, VPN, and SD-WAN.
• Own WAN design and operations across multiple Safe-Guard sites, including dynamic routing (BGP, OSPF), traffic engineering, performance tuning, and resiliency.
• Design and implement cloud networking in AWS – VPC architecture, Transit Gateway, Direct Connect, hybrid connectivity, route tables, security groups, and segmentation – to support secure, scalable workloads.
• Configure, manage, and tune Palo Alto firewalls (including Panorama and/or Prisma Access) to enforce segmentation, secure remote access, and policy across on-prem and cloud environments.
• Operate and evolve a heterogeneous network built on Cisco and Juniper platforms, including routers, switches, and SD-WAN edge devices.
• Build and maintain network infrastructure using infrastructure-as-code (Terraform, CloudFormation or equivalent), with version control, peer review, and automated deployment pipelines.
• Lead network changes through Safe-Guard’s change management process, including design documentation, peer review, risk assessment, implementation, validation, and rollback planning.
• Troubleshoot complex, cross-domain network issues spanning on-prem and cloud environments, and drive root-cause analysis and permanent fixes.
• Develop and maintain network monitoring, alerting, and observability so issues are detected and resolved before they impact the business.
• Partner with the Information Security team to implement and maintain network security controls, support audits, and remediate findings.
• Document network architecture, standards, runbooks, and operational procedures, and keep that documentation current as the environment evolves.
• Mentor junior network and infrastructure engineers, conduct design and configuration reviews, and help raise the technical bar across the team.
• Evaluate new networking technologies, vendors, and approaches, and make clear recommendations on where Safe-Guard should invest.

Requirements

• 10+ years of progressive experience designing and operating enterprise networks in a mid-to-large environment.
• Deep, hands-on expertise with enterprise routing and switching on Cisco and Juniper platforms, including BGP, OSPF, MPLS, VLANs, spanning tree, QoS, and high-availability designs.
• Proven experience designing and operating multi-site WAN environments, including SD-WAN.
• Strong experience designing, configuring, and operating Palo Alto firewalls, including security policy, NAT, VPN (site-to-site and remote access), and centralized management.
• Hands-on experience designing and operating cloud networking, with the ability to translate enterprise networking concepts into cloud-native designs.
• Demonstrated ability to lead network projects end-to-end – from requirements and design through implementation, validation, and operational handoff.
• Strong troubleshooting skills, including packet capture and analysis, with the discipline to drive issues to root cause.
• Experience operating in a formal change management environment and writing clear, professional design and operational documentation.
• Excellent written and verbal communication skills, with the ability to explain complex networking concepts to technical and non-technical audiences.
• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent professional experience.

Preferred Experience

• Hands-on experience designing and operating networking in AWS, including VPCs, Transit Gateway, Direct Connect, VPN, Route 53, and hybrid connectivity patterns.
• Experience building and managing network infrastructure as code using Terraform, CloudFormation, or similar tooling, with Git-based workflows and CI/CD pipelines.
• Experience with Palo Alto Panorama for centralized firewall management for SASE / cloud-delivered security.
• Scripting and automation skills in Python (or similar) for network operations, configuration, and reporting.
• Experience integrating network operations with monitoring and observability platforms (e.g., Datadog, SolarWinds, ThousandEyes, Splunk).
• Experience supporting a regulated business environment (e.g., PCI, SOC, GLBA) and partnering with information security and audit functions.
• Industry certifications such as Cisco CCNP / CCIE, Juniper JNCIP / JNCIE, Palo Alto PCNSE, or AWS Advanced Networking – Specialty.
• Experience mentoring engineers and influencing technical direction without formal management authority.

Company Benefits

• Medical, Dental, and Vision Insurance
• Flexible Spending Account Health Savings Account
• 401(k) Plan with Company Match
• Company-paid Short-Term and Long-Term Disability
• Company-paid Life Insurance
• Paid Holidays and Vacation
• Employee Referral Program
• Employee Assistance Program
• Wellness Programs
• Paid Community Service Opportunities
• Tuition Reimbursement
• Ongoing Training & Personal Development