Network Engineer

Network Engineer

Perm Role

Hybrid, Lewisville, TX

The Network Engineer is responsible for designing, implementing, and operating a large-scale, multi-site enterprise network supporting ~1,800–2,000 locations, corporate sites, and data-center/cloud connectivity.

This role owns day-to-day network reliability and serves as a Tier 3 escalation point, leading incident response, root cause analysis, and permanent remediation to improve uptime and reduce repeat issues.

The Network Engineer also drives modernization efforts across SD-WAN, Wi-Fi, security edge, and cloud connectivity, partnering closely with carriers, Cisco/Meraki, and third-party field services to plan and execute changes at scale with strong standards, documentation, and change control discipline.

Responsibilities:

• Design, implement, and support enterprise firewall/security platforms (Cisco Firepower/FTD preferred), including access control policies, NAT, HA/failover, and upgrade planning.
• Design and operate hybrid cloud connectivity, including Azure ExpressRoute and Megaport, supporting multi-carrier interconnects, BGP peering, route advertisements, and validated failover across diverse transport providers.
• Engineer and maintain resilient routing and traffic-path control across the enterprise network using OSPF, BGP, route filtering, summarization, and redistribution best practices.
• Administer and support Cisco Meraki environments (MX, MR, MS, MG) at scale, including templates, configuration standards, firmware lifecycle planning, and large-scale troubleshooting.
• Design, support, and optimize SD-WAN / AutoVPN connectivity, including resiliency models, hub/spoke architectures, routing behavior, and tunnel health validation.
• Own WAN circuit lifecycle and carrier/vendor coordination, including turn-ups, outage escalation, demarcation troubleshooting, and restoration verification.
• Implement and maintain network segmentation and security controls aligned to least-privilege principles across corporate, guest, and IoT environments.
• Design, validate, and troubleshoot wireless solutions for indoor and outdoor deployments, applying RF fundamentals and performance optimization practices.
• Lead complex incident troubleshooting using packet captures and log/event analysis; perform root cause analysis and drive permanent corrective actions.
• Develop and maintain network automation using Python and/or PowerShell, leveraging APIs (e.g., Meraki Dashboard API) to improve reporting, compliance checks, and bulk-change efficiency.
• Execute production network changes using formal change management practices, including implementation plans, rollback procedures, risk assessments, and pre/post validation.
• Create and maintain network documentation, standards, diagrams, and runbooks; communicate technical updates clearly to both technical and non-technical stakeholders.
• Serve as a Tier 3 escalation point, providing technical leadership, mentoring, and guidance to other engineers and operational teams.
• Performs other duties as assigned.

Experience:

• Advanced proficiency in enterprise network design and operations across large, distributed environments.
• Strong expertise in network security and firewall technologies (Cisco Firepower/FTD preferred).
• Advanced proficiency in Azure network connectivity including ExpressRoute, with strong understanding of Megaport interconnect models.
• Strong understanding of resilient routing design (BGP/OSPF) and traffic-path control.
• Proven ability to troubleshoot complex network issues using packet captures and log correlation.
• Strong organizational, documentation, and communication skills; proficiency in Microsoft Office including Visio.
• Bachelor’s degree (BA/BS) in Computer Science or related field from four-year college or university; or 7 years related experience and/or training; or equivalent combination of education and experience in a large enterprise network environment.
• 7 years of experience in network engineering, including design and operational support of enterprise WAN/LAN/Wi-Fi environments.
• 5 years of hands-on experience supporting Cisco networking solutions, with preference for Meraki-based distributed networks.
• Experience supporting enterprise firewall platforms, including policy management and troubleshooting.
• Experience supporting cloud connectivity and hybrid network designs, including ExpressRoute and third-party connectivity providers (e.g., Megaport, Equinix).
• CCIE Enterprise Infrastructure (required)
• AZ-700 Microsoft Azure Network Engineer Associate (preferred)