Senior Network Engineer

About the Role

The local parent company behind five of the West Coast's most beloved grocery brands operates 50+ locations across WA, OR, and CA, with a commitment to give 10% of after‑tax profits to local non‑profits. You will join a lean infrastructure team alongside a Senior Network Engineer and Systems Engineer, working on a hands‑on individual contributor role that splits roughly 70% project engineering and 30% operations support. Your work will keep community grocers serving neighborhoods up and down the coast by maintaining the network backbone, supporting hybrid identity (Microsoft Entra ID), cloud connectivity (AWS), and enterprise systems in a collaborative, non‑siloed environment.

Responsibilities

• FortiNAC Rollout — Work alongside the Senior Network Engineer to deploy FortiNAC across all 50+ locations — device profiling, posture assessment, and 802.1X policy enforcement.
• Zero Trust Implementation — Help build out identity‑based 802.1X authentication, dynamic VLAN steering, and micro‑segmentation across corporate assets, retail IoT, and store hardware.
• Network Consolidation — Audit, migrate, and standardize our distributed multi‑banner environments into a centralized FortiManager‑orchestrated architecture.
• Hybrid Cloud Connectivity — Maintain secure network pathways — VPN tunnels, SD‑WAN, Transit Gateways — connecting 50+ physical locations to our AWS environment.
• Firewall & Policy Management — Support FortiGate policy management, rule‑set hygiene, and change control. Maintain FortiAnalyzer for centralized logging and compliance visibility.
• Cross‑Team Contribution — Pitch in on hybrid identity and Entra ID‑adjacent work alongside the Systems Engineer when the team needs an extra set of skilled hands.
• On‑Call & After‑Hours Maintenance — Participate in a shared on‑call rotation with overnight and weekend maintenance windows to protect store uptime.
• Tier 3 Escalation — Senior escalation point for complex routing, switching, firewall, VPN, and connectivity issues across the retail and corporate estate.
• Monitoring & Incident Response — Maintain network visibility through FortiAnalyzer and monitoring tooling. Own network incident response from detection through resolution.

What You'll Bring

• Enterprise networking depth — Hands‑on experience configuring and troubleshooting firewalls, routing, switching, and VPN across a complex multi‑site environment.
• Fortinet (FortiGate, FortiManager) is strongly preferred; equivalent depth in Palo Alto, Cisco, Check Point, or similar enterprise platforms will be considered.
• 3+ years of multi‑site network operations — Supporting routing, switching, and firewall policy across a distributed footprint of multiple locations.
• Network security fundamentals — Firewall policy design, segmentation, and least‑privilege access.
• PCI‑DSS experience in a retail environment is a plus.
• Zero Trust / NAC exposure — Familiarity with 802.1X and Network Access Control concepts.
• Hands‑on experience with FortiNAC, Cisco ISE, Aruba ClearPass, or any NAC platform is a meaningful differentiator.
• Hybrid cloud connectivity — Experience supporting secure connectivity between physical infrastructure and cloud environments, AWS preferred.
• Preferred: Fortinet specifically — FortiGate, FortiManager, FortiNAC, or FortiAnalyzer operational experience.
• Preferred