Sign upLog in

Sr Network and Systems Engineer

HR Elements

CrestView Hills, KY

Apply
JOB DETAILS
JOB TYPE
Full-time
SKILLS
802.1, Administrative Skills, Amazon Web Services (AWS), BGP, Cisco ASA (Adaptive Security Appliance), Cloud Computing, Collocation, Computer Firmware, DHCP (Dynamic Host Configuration Protocol), DNS (Domain Name System), Data Recovery, Disaster Recovery, Document Change Management, Documentation, EIGRP (Enhanced IGRP), Engineering, File and Print Sharing, Firewall Administration, Firewalls, HIPAA (Health Insurance Portability and Accountability Act), High Availability, Hybrid Cloud, IP (Internet Protocol), IPsec (IP Security), Identify Issues, Intrusion Detection Systems, Intrusion Prevention Systems, Knowledge Base, Layer 3 Protocols, Maintain Compliance, Mentoring, Microsoft Active Directory, Microsoft Hyper-V, Microsoft Windows Azure, Microsoft Windows Server, Microsoft Windows System Administration, NAT (Network Address Translation), Network Administration/Management, Network Architecture/Engineering, Network Connectivity, Network Design, Network Monitoring, Network Routing, Network Security, Network Switching, Network Systems, On Call, Open Shortest Path First Protocol (OSPF), PCI, Presentation/Verbal Skills, Problem Solving Skills, Project/Program Management, QoS (Quality of Service), Radio Frequency, Remote Access, Replication and Remote Mirroring, Risk, SSL-TLS (Secure Socket Layer - Transport Layer Security), Scripting (Scripting Languages), Security Information and Event Management (SIEM), Security Monitoring, SonicWALL, Systems Administration/Management, Systems Engineering, Team Lead/Manager, Team Player, Telemetry, Time Management, U.S. National Institute of Standards and Technology (NIST), VLAN (Virtual Local Area Network), VMWare, VPN (Virtual Private Network), Virtual Machine (VM), Virtualization, Wi-Fi, Wide Area Network (WAN), Willing to Travel, Wireless Communications, Writing Skills
LOCATION
CrestView Hills, KY
POSTED
Today

Job Description

We are seeking a highly skilled Senior Network and Systems Engineer to lead the architecture, implementation, and ongoing support of complex client network environments. This role is ideal for a seasoned professional who thrives on designing resilient networks, troubleshooting critical issues, hardening security at the edge, and producing exceptional documentation that drives consistency and compliance.
You will join a collaborative team supporting multi-client, multi-server environments where clarity, repeatability, and technical excellence are key. The ideal candidate combines deep networking expertise with strong firewall, VPN, wireless, and SD-WAN experience and a methodical approach to change management and documentation.
While the primary focus is networking, the successful candidate brings solid Windows Server and virtualization fundamentals — enough to confidently handle routine systems administration tasks and contribute on server-side work as needed.

Key Responsibilities

Network Architecture & Operations
  • Design secure, scalable L2/L3 network architectures — routing, switching, VLAN segmentation, QoS, SD-WAN, and high availability.
  • Configure, deploy, and manage enterprise routing and switching environments — ensuring performance, reliability, and security across multi-site client networks.
  • Lead network design discussions across multi-client environments, including HLD/LLD diagrams, IP schemes, and VLAN plans.
  • Troubleshoot complex network issues using packet analysis, telemetry tools, and structured root-cause methodology.
  • Standardize configurations and rollout templates for repeatable, low-risk deployments.
  • Plan and execute network change windows, firmware upgrades, and configuration backups.
Firewalls, VPN & Edge Security
  • Design, deploy, and harden Fortinet firewalls (required), as well as other firewall platforms (Palo Alto, SonicWall, Cisco ASA) where present — policy management, NAT, IPsec/SSL VPN, IDS/IPS, segmentation, and identity-aware policies.
  • Implement and maintain site-to-site VPN, client/remote-access VPN, and hybrid connectivity to Azure and AWS (ExpressRoute / Direct Connect concepts).
  • Manage SIEM integrations, log forwarding, and security monitoring for network devices.
  • Support compliance with frameworks such as HIPAA, CMMC, and PCI through proper hardening, logging, and documentation.
Wireless, SD-WAN & Network Access
  • Design and manage enterprise Wi-Fi environments — wireless controllers, access points, SSIDs, and RF planning (primarily Ubiquiti, with some Meraki and other platforms as needed).
  • Deploy and operate SD-WAN solutions (primarily Fortinet, with other platforms as needed) across client sites.
  • Implement NAC / 802.1X and identity-aware network policies.
Server & Systems (Solid Secondary Skill Set)
  • Comfortably handle routine Windows Server administration tasks — Active Directory user/group management, DNS, DHCP, Group Policy, and file/print services.
  • Perform basic virtualization administration (VMware and/or Hyper-V) including VM provisioning, snapshots, and routine host checks.
  • Support backup and disaster recovery operations — monitor BDR appliances and cloud replication jobs, triage failures, and assist with restores when needed.
  • Contribute to cloud migration projects (primarily Azure, secondarily AWS and Zimcom-hosted environments) from the network and connectivity side.
Documentation & Compliance
  • Produce detailed HLD/LLD diagrams, MOPs (methods of procedure), runbooks, and as-built documentation.
  • Maintain configuration baselines, device inventories, change records, and standardized rollout templates.
  • Use documentation tools to keep client environments current and auditable.
Collaboration & Support
  • Partner with project managers, account teams, and the broader engineering team to deliver client outcomes on schedule.
  • Serve as a senior escalation point for complex network, firewall, VPN, and wireless issues, and as a competent owner of routine server administration work.
  • Participate in rotating on-call coverage and planned maintenance windows.
  • Mentor junior engineers and contribute to internal standards, runbooks, and knowledge base.

Qualifications – Must-Haves

  • 8+ years of hands-on network engineering experience (design + operations) in multi-site, multi-client environments.
  • Deep proficiency in routing (BGP, OSPF, EIGRP), switching (L2/L3), VLANs, trunking, QoS, and inter-VLAN routing.
  • Hands-on Fortinet firewall expertise (required) — policy management, NAT, IPsec/SSL VPN, segmentation, and IDS/IPS. Experience with Palo Alto, SonicWall, or Cisco ASA is a plus.
  • Strong wireless experience — controllers, access points, and SSID design (Ubiquiti, Meraki, or similar).
  • Working knowledge of hybrid cloud connectivity to Azure and AWS (site-to-site VPN, ExpressRoute / Direct Connect).
  • Solid Windows Server and Active Directory fundamentals — ability to independently handle routine administration tasks (users, groups, DNS, DHCP, GPO, file/print).
  • Basic virtualization administration with VMware and/or Hyper-V (VM provisioning, snapshots, routine host operations).
  • Awareness of backup/disaster recovery concepts and BDR appliance-based backup with cloud replication, with the ability to support and triage routine backup issues.
  • Strong troubleshooting, root-cause analysis, and diagnostic skills.
  • Exceptional documentation skills and clear written/verbal communication.
  • Ability to work onsite daily in Crestview Hills, KY.
  • Willingness and ability to travel to client sites as needed for installations, troubleshooting, and project work.

Preferred

  • Industry-recognized networking certifications.
  • Experience with enterprise SD-WAN, wireless, and routing/switching platforms.
  • Experience with identity-aware firewall policies.
  • Microsoft Server or Azure certifications are a plus.
  • Familiarity with VMware and/or Hyper-V.
  • Experience with colocation/cloud providers.
  • Familiarity with common IT documentation tools.
  • Exposure to network monitoring and SIEM tools.
  • Exposure to compliance/security frameworks (HIPAA, CMMC, PCI, NIST).
  • Scripting and automation experience.

Benefits

  • 401(k)
  • 401(k) matching
  • Dental insurance
  • Health insurance
  • Health savings account
  • Life insurance
  • Paid time off
  • Parental leave
  • Vision insurance

Experience

  • Network administration: 8 years (Required)
  • Firewall administration (Fortinet or comparable): 5 years (Required)
  • Server / systems administration: 3 years (Required)
  • Virtualization (VMware/Hyper-V): 2 years (Required)

Ability to Commute / Relocate

  • Crestview Hills, KY 41017 (Required)
  • Must relocate to Crestview Hills, KY 41017 BEFORE starting work, if not already local (Required)
Work Location: In person
 

Powered by JazzHR

About the Company

H

HR Elements

Resume Resources

Free Resume TemplatesFree Resume Builder