Network Engineer

Deseret First Credit Union is seeking an experienced Network Engineer to help design, implement, maintain, and improve the network and telecommunications infrastructure supporting our corporate offices, branch locations, data centers, voice services, and member-facing systems.

This position is part of DFCU's Network & Telecommunications career track and is intended for an experienced networking professional who can operate beyond routine network administration. The Network Engineer will lead complex infrastructure changes, improve network resilience and performance, support network security and segmentation, and provide engineering-level ownership for routing, switching, firewalls, SD-WAN, wireless, carrier connectivity, and Cisco voice/contact-center infrastructure.

The successful candidate will work closely with Information Security, Systems Engineering, managed service providers, carriers, vendors, and business teams in a regulated financial-services environment.

Duties and Responsibilities:

• Design, implement, maintain, and optimize enterprise LAN, WAN, wireless, VPN, firewall, and SD-WAN infrastructure.
• Support reliable network connectivity across DFCU branch locations, corporate offices, and data centers.
• Engineer solutions for performance, capacity, high availability, redundancy, segmentation, monitoring, and secure connectivity.
• Administer and support Cisco and Meraki networking technologies.
• Support Palo Alto firewalls and Panorama, including troubleshooting, secure configurations, segmentation, VPN connectivity, logging, and approved firewall changes.
• Support and improve SD-WAN infrastructure, branch connectivity, circuit redundancy, and carrier services.
• Support DFCU's Cisco phone and telecommunications platforms, including Cisco Unified Communications, UCCX/contact-center services, SIP connectivity, call routing, QoS, and related integrations. Transitioning to a cloud-based phone and meeting platform (UCaaS or VoIP) within 6 to 9 months.
• Troubleshoot complex network and voice issues using packet captures, logs, monitoring tools, performance data, and structured root-cause analysis.
• Lead network upgrades, migrations, hardware refreshes, carrier changes, firewall changes, branch deployments, and other infrastructure projects.
• Develop detailed implementation plans, test procedures, validation criteria, communication plans, and rollback procedures.
• Participate in DFCU's formal CAB/change-management process for production changes.
• Maintain current network diagrams, IP addressing records, circuit inventories, configuration standards, recovery procedures, and technical runbooks.
• Coordinate with carriers, MSPs, hardware vendors, telecommunications providers, and cabling contractors, and validate vendor recommendations and deliverables.
• Participate in network-related incident response, root-cause analysis, and permanent corrective-action planning.
• Partner with Information Security on segmentation, firewall governance, vulnerability remediation, logging, investigations, audit evidence, and secure architecture.
• Support disaster-recovery and business-continuity testing involving branch, corporate, data-center, and telecommunications connectivity.
• Assist with network capacity planning, lifecycle management, equipment refresh planning, and infrastructure modernization.
• Provide technical guidance and mentoring to Network Administrators and other IT staff.
• Identify opportunities for automation, standardization, improved monitoring, and reduction of operational risk.
• This is not an exhaustive list of all job duties. Other duties may be assigned at any time.

Required

• Approximately 5-8 years of progressive enterprise networking experience, including network administration or network engineering responsibilities.
• Strong hands-on knowledge of enterprise routing, switching, wireless networking, firewalls, VPNs, and WAN connectivity.
• Experience designing and implementing production network changes.
• Demonstrated ability to troubleshoot complex network problems involving multiple technologies, vendors, and application dependencies.
• Experience preparing implementation, testing, validation, and rollback plans for production changes.
• Strong documentation and technical communication skills.
• Ability to work effectively with internal teams, managed service providers, carriers, and technology vendors.
• Ability to participate in planned after-hours maintenance and critical incident response when necessary.
• Bachelor's degree in Information Technology, Computer Science, Networking, or a related discipline preferred; equivalent relevant experience will be considered.

Preferred

• Financial services, credit unions, banking, or another regulated environment
• Multi-site or branch-based enterprise networks
• Palo Alto firewall administration and Panorama
• Cisco/Meraki enterprise infrastructure and SD-WAN implementation or migration
• Cisco CUCM, UCCX, SIP, QoS, or enterprise voice/contact-center environments
• Zoom & Teams platform administration.
• Network segmentation and Zero Trust concepts
• Carrier circuit management and vendor escalation
• Disaster recovery and network-resiliency testing
• Network automation and formal CAB/change-management processes
• Supporting audit or regulatory examination requests

Preferred Competencies:

• Network design and engineering
• Network security and risk management
• Troubleshooting and problem-solving
• Network reliability and disaster recovery
• Voice and communications systems
• Project and change management
• Technical documentation
• Teamwork and vendor coordination
• Technical leadership and mentoring
• Continuous improvement and automation

Preferred Computer Skills:

• Cisco enterprise routing and switching; Cisco Meraki
• Palo Alto Networks firewalls and Panorama
• SD-WAN, enterprise wireless, VPN technologies, MPLS, and internet circuits
• TCP/IP, IPv4/IPv6, VLANs, trunks, STP, link aggregation, NAT, DNS, DHCP, NTP, SNMP, and syslog
• Cisco Unified Communications / Cisco phone platforms; Cisco UCCX / contact-center technologies
• SIP, call-routing dependencies, and QoS for voice and critical applications
• High availability and failover, network monitoring, configuration management, and packet-analysis tools
• VMware and Microsoft infrastructure dependencies, cloud/hybrid network connectivity, and network automation or scripting

DOE