Network Engineer

Thomas Jefferson Foundation; Charlottesville (VA); On-site; USD 69,000 - 82,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) retirement with match

Gym discount

Café discounts

Employee Assistance Program (EAP)

Referral bonus

Quarterly events

Job summary

The Thomas Jefferson Foundation in Charlottesville, VA, is seeking a Network Engineer to design, secure, and maintain Monticello's IT network across properties. You will lead firewall, VPN, and wireless deployments, support change control, and assist in incident response, audits, and cyber risk remediation.

A 3+ year background in multi-site network engineering is required. The role is full-time, on-site, with on-call duties and occasional after-hours work, including events like July 4th.

Qualifications

• 3+ years of hands-on network engineering or administration in a multi-site production environment.
• Strong knowledge of Layer 2/3 routing, VLANs, trunking, spanning tree, and routing protocols (static, OSPF, BGP).
• Experience administering next-generation firewalls, VPNs, and enterprise wireless with RF planning.

Responsibilities

• Design, configure, and maintain routers, switches, firewalls, wireless controllers, and access points across Foundation properties.
• Architect and administer network segmentation to keep traffic separate and secure.
• Manage firewall policy, VPN, and remote access with regular rule reviews.
• Plan upgrades, patches, and lifecycle replacements with change control and outages communication.
• Monitor network availability and performance and turn data into planning reports.
• Plan wireless coverage for staff, guests, and events, including historic structures.
• Maintain relationships with ISPs and MSPs and enforce SLAs.
• Keep topology diagrams, IP plans, VLANs, and circuit inventories current.
• Serve as Service Desk escalation point for network issues and lead root cause analysis.
• Administer and tune security tools (EDR, DNS filtering, SIEM), triage alerts, and remediation.

Skills

Network engineering

Firewall administration

Wireless administration

DNS & IP management

Security tooling (SIEM)

Documentation

Change control procedures

Cloud networking (Azure/AWS)

Education

Bachelor's degree in computer science or related field

Tools

Next-gen firewalls

VPN

SIEM

DNS tools

Job description

The Thomas Jefferson Foundation has a twofold mission of preservation and education, and was incorporated in 1923 to preserve Monticello, the home of Thomas Jefferson, in Charlottesville, Virginia. Today, the Foundation seeks to bring history forward into national and global dialogues by engaging audiences with Jefferson's world and ideas and sharing the history of everyone who lived and labored at Monticello. Monticello is recognized as a National Historic Landmark, a United Nations World Heritage Site and a Site of Conscience.

Purpose:

The Network Engineer designs, secures, and maintains the wired, wireless, and wide-area networks that connect every Foundation property, from administrative offices to point-of-sale systems, guest Wi-Fi, and building systems across a mountaintop historic site. Reporting to the Director of Information Technology, you will also serve as a primary technical resource for cybersecurity monitoring and incident response, working alongside the Systems Administrator to keep Monticello's operations and visitor experience running 363 days a year.

Compensation:

$68,500 - $82,000

We will look to you to:

• Design, configure, and maintain routers, switches, firewalls, wireless controllers and access points, and the cabling and fiber that connect them across Foundation properties.
• Architect and administer network segmentation that keeps administrative, point-of-sale, guest, and building-system traffic separate and secure.
• Manage firewall policy, VPN, and remote access, including periodic rule reviews to remove stale or overly permissive rules.
• Plan and deliver upgrades, patches, and hardware lifecycle replacements through change control, communicating outages clearly to stakeholders.
• Monitor network availability, performance, and capacity, and turn that data into reports that support planning and budgeting.
• Plan and support wireless coverage for staff, guests, and events, including installations in historic structures and outdoor terrain.
• Manage relationships with ISPs, circuit providers, and network-related MSPs, and hold them to contracted service levels.
• Keep network documentation current: topology diagrams, IP address plans, VLAN and subnet assignments, circuit inventory, and configuration backups.
• Serve as the Service Desk's escalation point for network issues and lead root cause analysis on complex, multi-vendor problems.
• Administer and tune security tools (endpoint detection and response, DNS filtering, SIEM, vulnerability scanning), triage alerts, and drive risk-based remediation.
• Participate in incident response from detection and containment through post-incident review, support audits, and cyber insurance evidence.
• Advise colleagues on the network needs of their projects, including VoIP, audio/visual, physical security, and building systems, and help plan future network direction.
• Provide backup coverage for server, virtualization, and Microsoft 365 administration, with reciprocal support from the Systems Administrator.
• Respond promptly to emergencies, both during and outside normal business hours.

Knowledge, Skills and Abilities:

• Three or more years of hands-on network engineering or administration in a multi-site production environment, including firewall and wireless administration.
• Strong working knowledge of Layer 2/3 routing and switching, VLANs, trunking, spanning tree, and routing protocols (static, OSPF, BGP).
• Experience administering next-generation firewalls, VPN and secure remote access, and enterprise wireless, including RF planning and current 802.11 standards.
• Solid grasp of DNS, DHCP, IP address management, and network monitoring tools (SNMP, syslog, flow analysis).
• Familiarity with security tooling such as SIEM and log aggregation, EDR, DNS-layer filtering, and vulnerability scanning, as well as network access control (802.1X) and MFA.
• Working knowledge of a security framework such as the NIST Cybersecurity Framework or CIS Controls, and of PCI DSS segmentation requirements.
• Understanding of Active Directory and Entra ID, including conditional access.
• Strong documentation discipline and comfort working within a change control process.
• Ability to explain technical risk and network conditions in clear, plain language to non-technical colleagues and leadership.
• Good customer service attitude, strong organizational skills, and the ability to keep multiple projects moving at once.
• Not required, but the following would be helpful additional skills:
  • Scripting or automation for configuration, monitoring, or reporting (PowerShell, Python, Ansible).
  • Certifications such as CCNA/CCNP, JNCIA, Network+, Security+, or vendor-specific firewall and wireless certifications.
  • Experience with SD-WAN, ZTNA/SASE, cloud networking (Azure, AWS), VoIP and QoS, structured cabling and PoE, or virtualization.
  • Experience working with nonprofits and/or historic sites.

Education

• Bachelor's degree or equivalent combination of education, training, and related experience in computer science, management information systems, computer engineering, or a related discipline.

Physical Demands and Work Considerations:

• The Foundation relies on its network 363 days a year. This role requires some non-traditional hours for maintenance and troubleshooting, participation in an on-call rotation, and support during key events such as July 4th, large festivals, and annual board meetings.
• Lifting and carrying 50 lbs. with or without assistance.
• Bending, stooping, kneeling, and crawling may be required, including work in network closets, ceilings, and crawl spaces.
• Must be comfortable working in enclosed and tight spaces.
• Must be comfortable working on ladders and lifts.
• Monticello is located on a mountaintop; walking on inclines and uneven terrain is required.
• Personal use of a car is required to transport equipment and to travel to and from various Foundation locations.

We provide the following benefits for our full-time employees:

• Excellent benefits package (including medical, dental, vision, 401(k) retirement savings plan plus 6% match, life insurance, and more!).
• Fitness club membership discount.
• Discount (25 - 45% off) in the Monticello Café, gift shop, and Monticello online catalog.
• Employee Assistance Program (EAP) – free for employee and dependents.
• $500 employee referral bonus.
• Exciting quarterly social events for all employees.