Multisite Network Engineer — Secure, Scalable IT

Thomas Jefferson Foundation; Charlottesville (VA); On-site; USD 69,000 - 82,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) retirement with match

Gym discount

Café discounts

Employee Assistance Program (EAP)

Referral bonus

Quarterly events

Job summary

The Thomas Jefferson Foundation in Charlottesville, VA, is seeking a Network Engineer to design, secure, and maintain Monticello's IT network across properties. You will lead firewall, VPN, and wireless deployments, support change control, and assist in incident response, audits, and cyber risk remediation.

A 3+ year background in multi-site network engineering is required. The role is full-time, on-site, with on-call duties and occasional after-hours work, including events like July 4th.

Qualifications

• 3+ years of hands-on network engineering or administration in a multi-site production environment.
• Strong knowledge of Layer 2/3 routing, VLANs, trunking, spanning tree, and routing protocols (static, OSPF, BGP).
• Experience administering next-generation firewalls, VPNs, and enterprise wireless with RF planning.

Responsibilities

• Design, configure, and maintain routers, switches, firewalls, wireless controllers, and access points across Foundation properties.
• Architect and administer network segmentation to keep traffic separate and secure.
• Manage firewall policy, VPN, and remote access with regular rule reviews.
• Plan upgrades, patches, and lifecycle replacements with change control and outages communication.
• Monitor network availability and performance and turn data into planning reports.
• Plan wireless coverage for staff, guests, and events, including historic structures.
• Maintain relationships with ISPs and MSPs and enforce SLAs.
• Keep topology diagrams, IP plans, VLANs, and circuit inventories current.
• Serve as Service Desk escalation point for network issues and lead root cause analysis.
• Administer and tune security tools (EDR, DNS filtering, SIEM), triage alerts, and remediation.

Skills

Network engineering

Firewall administration

Wireless administration

DNS & IP management

Security tooling (SIEM)

Documentation

Change control procedures

Cloud networking (Azure/AWS)

Education

Bachelor's degree in computer science or related field

Tools

Next-gen firewalls

VPN

SIEM

DNS tools

Job description

The Thomas Jefferson Foundation in Charlottesville, VA, is seeking a Network Engineer to design, secure, and maintain Monticello's IT network across properties. You will lead firewall, VPN, and wireless deployments, support change control, and assist in incident response, audits, and cyber risk remediation.

A 3+ year background in multi-site network engineering is required. The role is full-time, on-site, with on-call duties and occasional after-hours work, including events like July 4th.