Information Technology Network Engineer

Excelligence Learning Corporation; Olathe (KS); On-site; USD 90,000 - 130,000; Full time

Job summary

Excelligence Learning Corporation is seeking a senior network engineer to design, deploy, and maintain enterprise network infrastructure across multiple U.S. sites.

You will manage Palo Alto firewalls, Cisco routers/switches, and Meraki wireless while owning circuit procurement, vendor relations, and security controls. The ideal candidate has 5+ years of hands-on experience in multi-site environments, supports PCI DSS requirements, and can translate complex concepts to site stakeholders.

Qualifications

• 5+ years of progressive, hands-on network engineering across multi-site environments.
• Direct experience with Palo Alto next‑gen firewalls, Panorama preferred.
• Cisco routers/switches in multi-site contexts with BGP/OSPF/EIGRP.

Responsibilities

• Design, configure, deploy, and maintain network infrastructure across multiple sites.
• Administer Palo Alto firewalls: policy design, rule base, threat prevention, NAT, firmware lifecycle.
• Configure Cisco routers/switches: routing protocols, VLANs, STP, QoS, ACLs.
• Manage Cisco Meraki wireless: AP deployment, RF planning, SSID config, performance monitoring.
• Own circuit procurement and vendor relationships for WAN connectivity; manage SLAs.
• Maintain network uptime, monitor health, and implement corrective actions proactively.
• Design and enforce security controls: segmentation, VPN, zero-trust principles.
• Support PCI DSS network requirements: segmentation, firewall review, audits.
• Manage DNS and Active Directory integration across sites.
• Perform root cause analysis and document permanent fixes; share findings.
• Develop network documentation: topology, IPAM, inventories, runbooks.
• Evaluate emerging technologies and present findings to IT leadership.
• Provide escalation support and act as SME for network incidents and projects.
• Collaborate with site operations and business stakeholders; translate tech to non-technical audiences.

Skills

Palo Alto firewalls

Cisco routing

Meraki wireless

Network security

VPN architecture

PCI DSS knowledge

DNS/AD integration

Documentation

Troubleshooting

Vendor management

Education

Bachelor's degree in Network Engineering, IT, CS

Tools

Panorama

Meraki Dashboard

SolarWinds

PRTG

Ansible

Netmiko

Job description

Key Responsibilities

The following responsibilities reflect the primary duties of this role. Independent judgment, network design analysis, and multi-site technical ownership are central to the performance of each.

• Design, configure, deploy, and maintain network infrastructure across multiple sites, including LAN, WAN, SD-WAN, and wireless environments, exercising independent judgment on topology, hardware selection, and configuration standards.
• Administer and maintain Palo Alto next-generation firewalls, including security policy design, rule base management, threat prevention profiles, NAT configurations, and firmware lifecycle management across all sites.
• Configure and manage Cisco routers and switches, including routing protocol configuration (BGP, OSPF, EIGRP), VLAN segmentation, STP, QoS, and access control, ensuring consistent and reliable connectivity across the enterprise.
• Administer Cisco Meraki wireless infrastructure, including access point deployment, RF planning, SSID configuration, client policy enforcement, and ongoing performance monitoring and optimization across distributed sites.
• Own circuit procurement, contract management, and vendor relationships for all WAN connectivity, including MPLS, broadband, dedicated fiber, and cellular backup circuits - managing SLAs, renewals, and escalations with carriers.
• Maintain and optimize network uptime across all sites, proactively monitoring infrastructure health, identifying degradation trends, and independently determining and implementing corrective actions before failures impact operations.
• Design, implement, and enforce network security controls, including firewall policy governance, network segmentation, intrusion prevention, VPN architecture (site-to-site and remote access), and zero-trust access principles.
• Working with the Information Security team, support PCI DSS network compliance requirements, including scoped network segmentation design, firewall rule review, quarterly network scans, and documentation to support audit and assessment activities.
• Manage DNS and Active Directory integration, including DNS zone administration, DHCP scope management, and ensuring reliable name resolution and authentication services across all network sites.
• Perform root cause analysis on network incidents, developing and documenting permanent corrective actions and sharing findings across the IT team to prevent recurrence.
• Develop and maintain network documentation, including topology diagrams, IP address management (IPAM), circuit inventories, hardware inventories, configuration standards, and runbooks.
• Evaluate and recommend emerging network technologies and vendor solutions, independently assessing fit against organizational requirements and presenting findings to IT leadership.
• Provide escalation support and technical guidance to site IT staff and support teams, serving as the internal subject matter expert for network-related incidents and projects.
• Partner closely with site operations, facilities, and business stakeholders at each location, maintaining a strong customer-service mindset and communicating network decisions and impacts clearly to non-technical audiences.

Required Qualifications

• 5+ years of progressive, hands-on network engineering experience supporting multi-site enterprise environments, including demonstrated ownership of network infrastructure design and operational decisions.
• Direct, hands‑on experience administering Palo Alto Networks next‑generation firewalls, including security policy management, Panorama (preferred), and threat prevention configuration.
• Proven experience configuring and supporting Cisco routers and switches in a multi‑site enterprise environment, including routing protocols (BGP, OSPF), VLANs, and access layer design.
• Hands‑on experience with Cisco Meraki wireless platform, including AP deployment, dashboard administration, and multi‑site wireless management.
• Experience with circuit contract ownership and carrier management, including WAN circuit procurement, SLA management, and vendor escalation.
• Solid understanding of network security principles, including firewall policy governance, network segmentation, VPN architecture, and defense‑in‑depth design.
• Working knowledge of PCI DSS network requirements, including scoped segmentation, firewall rule review, and audit support.
• Experience with DNS administration and Active Directory integration, including DHCP management and multi‑site name resolution.
• Strong analytical and troubleshooting skills, with the ability to independently diagnose and resolve complex, multi‑layer network issues across geographically distributed sites.
• Excellent communication and customer‑service skills, with the ability to translate technical network concepts for non-technical site stakeholders and to take clear ownership of issue resolution.
• Strong documentation discipline, including network diagrams, IPAM, configuration standards, and change management records.

Preferred Qualifications

• Relevant professional certifications such as CCNA, CCNP, Palo Alto PCNSE, Meraki ECMS, or equivalent.
• Experience with SD‑WAN platforms, network monitoring tools (e.g., SolarWinds, PRTG, Meraki Dashboard), or SIEM/log aggregation solutions.
• Familiarity with cloud networking concepts (AWS, Azure, or GCP virtual networking, VPN gateways, and hybrid connectivity).
• Experience supporting network infrastructure in distribution center, warehouse, retail, or similarly operationally demanding multi‑site environments.
• Exposure to network automation and configuration management tools (e.g., Ansible, Python/Netmiko, Terraform).
• Bachelor's degree in Network Engineering, Information Technology, Computer Science, or a related field, or equivalent demonstrated expertise through progressive work experience.

Physical & Work Environment Requirements

• Must be available and willing to travel to multiple company sites as needed to perform on‑site network installations, assessments, hardware deployments, and troubleshooting.
• Ability to work in varied operational environments across sites, including distribution centers, office locations, and data center/MDF/IDF spaces.
• Must be available to respond to critical network incidents outside standard business hours, including evenings, weekends, and during planned maintenance windows, to minimize impact on business operations.
• Ability to rack, cable, and position network hardware as required during infrastructure deployments and upgrades.

What We're Looking For

We need a network engineer who takes genuine ownership; someone who treats every site like it's their own and understands that a network outage at any location isn't just a technical event, it's people who can't work and customers who feel the impact. The right person is proactive, not reactive: they know their infrastructure, they catch problems before they become incidents, and they bring clear, confident communication to every stakeholder they support. Deep technical skill matters here, but so does the ability to show up at a site, understand what the people there actually need, and solve it in a way that earns their trust.

Why Join Excelligence?

At Excelligence, you'll be part of a mission‑driven organization dedicated to supporting educators and helping children succeed. You'll have the opportunity to make a meaningful impact on our logistics and supply chain operations while working alongside talented professionals in a collaborative and growth‑oriented environment.

Equal Employment Opportunity

Excelligence Learning Corporation is an Equal Employment Opportunity (EEO) Employer. We are committed to providing equal employment opportunities to all employees, applicants, and other covered persons without regard to race, color, religion, creed, sex, pregnancy, gender identity or expression, sexual orientation, marital status, national origin, ancestry, ethnicity, citizenship status, genetic information, military or veteran status, age, physical or mental disability, or any other characteristic protected by applicable federal, state, or local law.