IT Engineer - Network

Greatjob; Chicago (IL); Hybrid; USD 111,000 - 136,000; Full time

Job summary

Vivmark Residential is seeking an IT Network Engineer to design, secure, and operate a hybrid network across datacenters, offices, residential properties, and public cloud environments. You will manage routing, switching, security controls, and edge services with Cisco, Meraki, Arista, and Juniper platforms.

The role includes cloud networking (Azure, AWS), IPAM with Infoblox, and network monitoring. A strong emphasis on security, SASE/zero trust, and collaboration with Security Operations is

Qualifications

• Bachelor's degree in Computer Science, Engineering, or related field; equivalent experience considered.
• 7+ years in enterprise IT networks focusing on design, implementation and management.
• CCNA is required; CCNP Enterprise preferred.
• Minimum 1 year of project management experience.

Responsibilities

• Designs, configures, and maintains enterprise routing and switching across datacenters, offices, and properties using Cisco, Meraki, Arista, and Juniper.
• Manages BGP, iBGP, OSPF, and EIGRP for multihomed connectivity and datacenter interconnects.
• Maintains wireless networks with JBL/Mist and Meraki WLCs; ensures 802.1X auth with Identity team.
• Oversees application delivery via F5 Distributed Cloud and Cloudflare; TLS, DNS, WAF management.

Skills

Enterprise routing & switching

BGP / OSPF / EIGRP

Security-first design

Network monitoring & capacity planning

Automation scripting (Python, PowerCLI

Education

Bachelor's degree in CS/Engineering

CCNA certification (CCNP Enterprise preferred)

Project management experience

Tools

Infoblox

Meraki, Cisco WLC

Arista, Juniper

F5 Distributed Cloud / Cloudflare

Job description

Position Overview

The IT Network Engineer designs, secures, implements, and maintains a reliable, highly available hybrid network across Vivmark Residential's datacenters, corporate offices, residential properties, and public cloud environments. This role requires extensive expertise in enterprise routing and switching across Cisco (including Meraki), Juniper, and Arista platforms, along with working knowledge of Palo Alto firewalls, application delivery technologies (F5 Distributed Cloud and Cloudflare), cloud networking (Azure and AWS), and DDI (DNS, DHCP, and IP address management).

The IT Network Engineer incorporates security into network designs and operational decisions, partnering closely with Security Operations to implement network segmentation, traffic inspection, encryption, and access controls. This role also leads assigned infrastructure initiatives, manages load balancing and edge technologies, supports enterprise-wide infrastructure operations, and collaborates with technical counterparts across the merged organization. The engineer anticipates emerging technology trends, including SASE and zero trust networking, and recommends solutions that support current and future business requirements.

Salary

Salary: $111,000 $136,000 per year. In addition to base salary, this position is eligible for a discretionary annual bonus of 10.5%.

Work Schedule

This position requires onsite attendance Monday through Thursday, with remote work permitted on Fridays.

Essential Functions

Network Design and Operations

Designs, configures, and maintains enterprise routing and switching infrastructure across datacenters, corporate offices, and residential properties using Cisco (including Meraki), Arista, and Juniper platforms. Manages internal and external routing protocols, including BGP, iBGP, OSPF, and EIGRP, to support multihomed internet connectivity, VRF-based segmentation, and datacenter interconnects. Administers wired and wireless networks across corporate offices and residential properties using Juniper Mist, Cisco wireless LAN controllers (WLCs), and Meraki, supporting platform transitions as needed. Maintains 802.1X wireless authentication in partnership with the Identity team. Administers DNS, DHCP, and IP address management (IPAM) services through Infoblox and supports external DNS services. Maintains network monitoring, alerting, and capacity reporting using SolarWinds Orion or equivalent tools, identifying trends and addressing potential issues proactively.

Application Delivery and Edge Services

Manages internal and internet-facing application delivery, including load balancing through F5 Distributed Cloud (Customer Edge) and application protection and traffic management through Cloudflare, including DNS, WAF, TLS, and tunnels. Manages TLS configurations and certificate lifecycles for load-balanced and proxied services in coordination with the Identity team. Troubleshoots application delivery issues across edge services, perimeter firewalls, load balancers, and server environments.

Cloud and Hybrid Networking

Designs, implements, and supports hybrid connectivity between on-premises infrastructure and public cloud environments, including Azure ExpressRoute, VPN gateways, hub-and-spoke virtual networks, Private Link, AWS Direct Connect, and Transit Gateway. Configures and maintains BGP routing policies and network segmentation to support secure, reliable hybrid connectivity. Supports cloud network security configurations, including network security groups, virtual firewalls, private endpoints, and hybrid DNS resolution. Uses automation and infrastructure-as-code tools, including Ansible, Terraform, Python, and PowerShell, to deploy, audit, maintain, and back up network configurations.

Network Security and Cybersecurity Awareness

Applies current cybersecurity threat intelligence to network design and operations and partners with Security Operations to implement network segmentation, Palo Alto firewall policies through Panorama, TLS inspection, VPN security, and zero trust access controls. Hardens network devices and maintains current firmware and software, supporting vulnerability remediation, patching, and technology lifecycle planning. Supports security incident response through traffic analysis, log reviews, packet captures, and network-level containment activities. Secures the network management plane through appropriate authentication, authorization, and accounting (AAA), multifactor authentication (MFA), configuration backups, and change controls. Supports security audits and compliance requests related to network controls.

Projects and Continuous Improvement Plans

Coordinates and manages the implementation of hardware, software, and infrastructure components assigned to the role. Participates in IT projects focused on improving, upgrading, and optimizing infrastructure, including evaluating technologies that address business needs and improve cost efficiency. Manages assigned projects through completion, providing accurate and timely status updates and reporting on progress, risks, and outcomes. Collaborates with project teams and Infrastructure Group members to align project scope, deliverables, and implementation plans with organizational objectives. Researches emerging technologies, evaluates potential solutions, and recommends infrastructure improvements that meet business and technical requirements. Oversees infrastructure maintenance and ensures compatibility with applicable regulations, contractual obligations, and licensing agreements. Develops and maintains network documentation, including diagrams, procedures, runbooks, and installation and operational records. Contributes to the development and maintenance of technical standards, procedures, and infrastructure guidelines. Participates in network disaster recovery planning, design, and testing activities.

Collaboration and Technical Support

Provides third-level technical support to IT personnel and end users, resolving complex network and infrastructure issues as needed. Collaborates with network engineering counterparts across the merged organization to support integration, coexistence, consolidation, technical alignment, and knowledge transfer. Coordinates technical activities across team members, mentors colleagues, and promotes cross-technology knowledge sharing within the Enterprise Infrastructure Operations team. Serves as a technical liaison between Vivmark Residential and external vendors, service providers, and network carriers as needed. Analyzes technical issues, identifies root causes, and recommends effective solutions. Monitors enterprise-wide network performance, proactively identifies potential issues, and implements solutions to maintain a stable and reliable operating environment. Represents Vivmark Residential professionally and maintains a courteous, service-oriented approach when interacting with residents, coworkers, vendors, and the general public. Performs other duties as assigned.

Job Qualification Requirements

Education and Experience

Bachelor's degree in Computer Science, Engineering, or a related discipline; equivalent relevant experience may be considered. Minimum of seven years of related experience in enterprise IT environments, with a primary focus on network engineering, infrastructure planning, implementation, and management. Cisco CCNA certification or equivalent demonstrated knowledge required; CCNP Enterprise certification preferred. Minimum of one year of project management experience, including coordinating cross‑functional initiatives, making project-related decisions, monitoring progress, and reporting results.

Technical Knowledge and Skills

Expert knowledge of enterprise routing and switching, including BGP, OSPF or EIGRP, VRFs, VLANs, and high-availability design, using Cisco platforms (NX-OS, IOS-XE, traditional WLCs, and Meraki) and at least one additional vendor, such as Arista or Juniper. Strong cybersecurity awareness and a security-first approach to network design and change management, including working knowledge of firewalls (Palo Alto preferred), segmentation, TLS inspection, VPN, DDoS mitigation, zero trust, and SASE concepts. Working knowledge of load balancing and application delivery, including TLS and PKI concepts; hands-on experience with F5 Distributed Cloud or BIG-IP and Cloudflare strongly preferred. Working knowledge of Azure cloud networking required and AWS cloud networking preferred, including virtual networks, private connectivity, ExpressRoute, Direct Connect, VPN, hybrid DNS, and routing. Experience with DDI technologies, preferably Infoblox; wireless networking technologies, including Cisco WLC and Meraki, with Juniper Mist preferred; and network monitoring tools. Experience with scripting and automation tools, including Python, PowerShell, Ansible, or Terraform. Ability to independently translate ambiguous business and technical requirements into documented, implemented, and supportable network designs. Strong technical knowledge of network architecture, topologies, advanced troubleshooting, performance management, and capacity planning. Ability to anticipate infrastructure needs two to four years in advance and evaluate emerging technologies in alignment with evolving business requirements. Ability to conduct feasibility studies, estimate project costs, timelines, and resource requirements, and perform cost-benefit analyses.

Communication and Professional Competencies

Strong communication and interpersonal skills, with the ability to work effectively with end users, technical teams, vendors, and multiple levels of management. Ability to explain complex technical issues and recommended solutions clearly to technical and nontechnical audiences. Strong analytical skills, sound judgment, and effective problem-solving abilities. Strong organizational skills, attention to detail, and consistent follow-through. Demonstrated ability to collaborate across teams, manage competing priorities, and deliver results in a cross-functional environment.

Other Requirements

Maintains a professional appearance consistent with Vivmark Residential's business environment and applicable Grooming Standards and Dress Code Guidelines. Employees assigned a property uniform are expected to wear it as required. Maintains flexibility to provide after-hours and weekend support for scheduled maintenance windows and incident response, including participation in an on-call rotation. Available to travel to Chicago-area datacenters and other company locations as needed.

Physical and Visual Activities

Ability to hear and speak well enough to converse verbally over the phone and in-person (expressing or exchanging ideas by means of the spoken or written word). Ability to interpret, evaluate and communicate detailed written or verbal instructions to others accurately and easily. Able to see well enough to use the computer effectively and read written communications. Ability to lift, push, pull or carry up to 15 pounds for the dissemination of documents, supplies, materials, etc. to various locations throughout the office/facility. May be required to climb stairs depending on the property structure. The above describes the physical and visual activities that are commonly associated with the performance of the essential functions of this job. Commonly associated is not intended to mean always or only. Reasonable accommodation will be provided as required by law to enable otherwise qualified employees with a known disability to perform the essential functions of the job.