Network Engineer

Network Engineer

The Network Engineer plays a critical role in building and maintaining a secure, reliable, and scalable technology infrastructure that supports teaching, learning, and school operations across the district. This role ensures the stability and integrity of district-wide data, voice, video, wireless, and cloud network services.

The Network Engineer is responsible for designing, deploying, and maintaining LAN/WAN architectures; optimizing wired and wireless performance in high-density learning environments; supporting cloud-first initiatives; and ensuring strong cybersecurity safeguards aligned with K-12 data privacy requirements and CIS Controls.

This position supports the full lifecycle of network operations—from planning and implementation to monitoring, incident response, and continuous improvement—ensuring that students, teachers, and staff have dependable access to the systems essential for learning and district operations.

Essential Responsibilities

Strategy & Planning

• Collaborate with Technology leadership to assess network capacity, future needs, and cloud readiness across all school sites.
• Maintain thorough documentation for network diagrams, configurations, standards, and procedures.
• Develop and maintain policies for network use, cloud services, identity management, and disaster recovery/business continuity.
• Contribute to long-term roadmaps for data center modernization, cloud adoption, and Azure-hosted services.
• Evaluate network impacts of K-12 instructional technology initiatives, including 1:1 programs, online testing, and e-learning platforms.
• Assess cybersecurity risks and support district-wide strategies aligned to FERPA, COPPA, CIPA, and CIS Controls.

Acquisition & Deployment

• Design, deploy, and manage LAN, WAN, WLAN, and cloud-connected architectures across district sites, including routing, switching, firewalls, load balancers, servers, and security appliances.
• Architect, deploy, and maintain Azure cloud networking environments, including VNets, ExpressRoute/VPN gateways, Azure Firewall, NSGs, ASGs, and Azure Monitor.
• Lead network infrastructure upgrades, hardware refresh cycles, and transitions toward cloud-first ecosystems.
• Research and evaluate emerging network technologies, cloud capabilities, and industry best practices relevant to K-12 environments.
• Partner with vendors, E-Rate providers, and service partners to procure cost-effective technology solutions aligned to district goals.

Operational Management

• Configure, optimize, and maintain district networks to ensure uptime and performance that support instructional and administrative needs.
• Manage VMware virtual infrastructure.
• Monitor on-premises and cloud networks using network management and security tools such as Azure Monitor, Meraki Dashboard, and SolarWinds.
• Support connectivity and integration of servers, endpoints, classroom technologies, web filters, VoIP systems, security systems, and IoT/AV equipment.
• Manage and maintain Azure AD, identity integrations, and hybrid infrastructure.
• Ensure adherence to cybersecurity best practices, including MFA, conditional access, identity governance, least privilege, and zero-trust principles.
• Perform system backups, disaster recovery testing, audit logging, and compliance reporting.
• Maintain inventory of network components, licensing, warranties, and cloud resource usage.
• Provide mentorship and technical guidance to junior team members and school site technicians.
• Respond to incidents and outages with urgency, professionalism, and strong communication.

Additional Responsibilities

• Participate in an on-call rotation.
• Inspect and service network equipment, including cabling and network closets.
• Lift and transport moderate equipment such as servers, switches, APs, UPS units, and related hardware.
• Travel frequently to school sites as needed.

Qualifications

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field, or equivalent professional experience (5+ years).
• Proven experience designing and maintaining LAN/WAN/WLAN environments across multiple sites.
• Strong knowledge of TCP/IP, VLANs, DHCP/DNS, routing protocols (OSPF/BGP), QoS, authentication systems (RADIUS/TACACS/AAA), and load balancing.
• Experience managing enterprise wireless environments in high-density settings such as classrooms, auditoriums, and testing labs.
• Experience with Azure networking, identity management, and hybrid infrastructure, including Azure AD, Azure Firewall, VPN gateways, virtual networks, NSGs, and conditional access.
• Working knowledge of cybersecurity best practices, including firewalls, IDS/IPS, endpoint security, SSL certificates, authentication systems, and system hardening.
• Experience supporting Active Directory, Windows Server, and Microsoft 365.
• Understanding of K-12 data privacy requirements, including FERPA, COPPA, and CIPA.
• Experience with cloud migration, network automation, IEEE 802.1X, and Zero Trust security principles.
• Experience with VoIP systems and SIP trunking.
• Experience with cabling infrastructure, network testing tools, and structured wiring standards.
• Strong communication and customer service skills with the ability to explain technical concepts to non-technical stakeholders.
• Ability to collaborate effectively within a school-centered environment.

Preferred Qualifications

• Cisco certifications such as CCNA or CCNP.
• Microsoft Azure certifications such as AZ-104 or AZ-700.
• Security+ or equivalent cybersecurity certification.

Compensation

The starting salary for this position is $90,000–$100,000 annually. We also offer a comprehensive benefits package and the opportunity to contribute to a growing, mission-driven organization committed to the success of Los Angeles students.