174423 - Senior Network Engineer

Piper Companies; Frederick (MD); Hybrid; USD 140,000 - 160,000; Full time

Benefits offered by this job

Medical, Dental, Vision Insurance

401k with ADP

PTO & Holidays

Sick Leave as required by law

Job summary

Piper Companies is seeking a Senior Network Engineer to join a thriving insurance client in a hybrid role that requires onsite presence three days per week in Frederick, MD. The position emphasizes network modernization, SD-WAN, SASE, and Zero Trust.

Qualified candidates have 7–10+ years in enterprise networking, Azure networking experience, and strong routing/switching skills. A Bachelor's degree is preferred but not required; a comprehensive benefits package is included.

Qualifications

• 7–10+ years of enterprise networking experience.
• Bachelor's degree preferred but not required.
• Hands-on experience with Azure networking and hybrid cloud connectivity.
• Expertise in routing and switching, LAN/WAN design, and high availability environments.
• Exposure to SD-WAN, SASE, or modern edge networking.

Responsibilities

• Lead network modernization and transformation initiatives (cloud, SD-WAN, SASE, Zero Trust).
• Engineer scalable LAN/WAN and routing/switching environments.
• Build and enhance network automation and Infrastructure-as-Code (IaC) capabilities.
• Provide Tier 3 escalation support and perform complex root cause analysis (RCA).

Skills

Enterprise networking

Azure networking

SD-WAN

SASE

Zero Trust

Routing & switching

IaC

Education

Bachelor's degree preferred but not required

Tools

Ansible

REST API

Wireshark

Job description

Piper Companies is looking for aSenior Network Engineerto join a thriving insurance company. This is ahybrid position and requires the candidate to be onsite 3 days a week.

Essential Duties of theSenior Network Engineer:

• Lead network modernization and transformation initiatives (cloud, SD-WAN, SASE, Zero Trust)
• Engineer scalable LAN/WAN and routing/switching environments
• Build and enhance network automation and Infrastructure-as-Code (IaC) capabilities
• Provide Tier 3 escalation support and perform complex root cause analysis (RCA)

Qualifications of theSenior Network Engineer:

• Bachelor's degree preferred but not required
• 7–10+ years of enterprise networking experience
• Hands-on experience with Azure networking and hybrid cloud connectivity
• Expertise in routing and switching, LAN/WAN design, and high availability environments
• Exposure to SD-WAN, SASE, or modern edge networking

Compensation for theSenior Network Engineer:

• $140,000 - $160,000 (based on experience)
• Comprehensive benefit package; Cigna Medical, Cigna Dental, Vision, 401k w/ ADP, PTO, paid holidays, sick Leave as required by law

This job opens for applications on 7/17/26. Applications for this job will be accepted for at least 30 days from the posting date

LAN, WAN, SD-WAN, Secure SD-WAN, Zero Trust, Zero Trust Architecture (ZTA), Zero Trust Network Access (ZTNA), Software-Defined Networking (SDN), Network Engineering, Enterprise Networking, Campus Network, Branch Networking, Core Network, Distribution Layer, Access Layer, Network Segmentation, Microsegmentation, Macro Segmentation, East-West Traffic, North-South Traffic, Network Access Control (NAC), Identity-Based Access Control, Least Privilege Access, Continuous Authentication, Adaptive Access, Context-Aware Access, Policy Enforcement Point (PEP), Policy Decision Point (PDP), Identity Provider (IdP), Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, Device Posture Assessment, Endpoint Compliance, Secure Access Service Edge (SASE), Security Service Edge (SSE), Cloud Access Security Broker (CASB), Secure Web Gateway (SWG), Firewall-as-a-Service (FWaaS), Remote Access VPN, Site-to-Site VPN, IPsec VPN, SSL VPN, GRE Tunnel, DMVPN, MPLS, MPLS VPN, BGP, OSPF, EIGRP, IS-IS, Static Routing, Dynamic Routing, Route Redistribution, Route Summarization, ECMP, Network Convergence, WAN Optimization, Path Selection, Application-Aware Routing, Traffic Steering, Link Aggregation, Load Balancing, Redundancy, High Availability (HA), Failover, Fast Reroute, QoS, Traffic Shaping, Traffic Policing, Packet Marking, DSCP, Class of Service (CoS), Latency, Jitter, Packet Loss, Throughput, Bandwidth Management, SLA Monitoring, Performance Monitoring, Network Telemetry, NetFlow, IPFIX, SNMP, Syslog, Network Analytics, Deep Packet Inspection (DPI), Packet Capture, Wireshark, Network Visibility, Application Visibility, Service Chaining, Overlay Network, Underlay Network, VXLAN, EVPN, MPLS Transport, Broadband Internet, DIA (Dedicated Internet Access), LTE Backup, 5G WAN, Hybrid WAN, Internet Breakout, Local Internet Breakout, Cloud Connectivity, Cloud On-Ramp, Multi-Cloud Networking, AWS Direct Connect, Azure ExpressRoute, Google Cloud Interconnect, Virtual WAN, Cloud WAN, SD-Branch, Branch Office Connectivity, Edge Computing, Edge Router, WAN Edge, Customer Premises Equipment (CPE), Universal CPE (uCPE), Virtual Network Function (VNF), Network Function Virtualization (NFV), Virtual Router, Virtual Firewall, DNS Security, Secure DNS, DHCP, DHCP Snooping, Dynamic ARP Inspection (DAI), IP Source Guard, ARP, TCP/IP, IPv4, IPv6, Dual Stack, NAT, PAT, DNS, NTP, VLAN, Private VLAN, Trunking, 802.1Q, STP, RSTP, MSTP, PortFast, EtherChannel, LACP, LLDP, CDP, Access Control List (ACL), Extended ACL, Prefix List, Route Map, Security Group, Trust Boundary, Network Policy, Segmentation Policy, Identity-Based Networking, Software-Defined Access (SDA), Cisco DNA Center, Network Automation, Infrastructure as Code (IaC), Ansible, Python Automation, REST API, NETCONF, RESTCONF, YANG Models, Intent-Based Networking (IBN), Network Orchestration, Configuration Management, Change Management, Network Assurance, Digital Experience Monitoring (DEM), Synthetic Monitoring, Real User Monitoring (RUM), Endpoint Security, Extended Detection and Response (XDR), Security Information and Event Management (SIEM), Security Orchestration Automation and Response (SOAR), Threat Intelligence, Threat Hunting, Risk Assessment, Compliance Monitoring, NIST 800-207, NIST Cybersecurity Framework, Defense in Depth, Cyber Resilience, Insider Threat Protection, Lateral Movement Prevention, Data Loss Prevention (DLP), Encryption in Transit, TLS, PKI, Certificate Management, Identity Governance, Privileged Access Management (PAM), Remote Workforce Security, Secure Remote Access, Enterprise Firewall, Next-Generation Firewall (NGFW), Unified Threat Management (UTM), Intrusion Detection System (IDS), Intrusion Prevention System (IPS), Secure Network Design, Network Hardening, Attack Surface Reduction, Continuous Verification, Explicit Trust Verification, Zero Implicit Trust, Device Identity, User Identity, Workload Identity, Application Identity, Cloud Security, Hybrid Network Architecture, Secure Connectivity, Network Resilience, Business Continuity, Disaster Recovery Networking