Network Engineer

Kforce Inc; Olathe (KS); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Medical/dental/vision insurance

HSA/FSA

401(k)

Paid time off

Life and disability insurance

Job summary

Kforce is seeking a Network Engineer in Olathe, KS for a fully onsite, direct-hire role. You will design, deploy, and maintain multi-site network infrastructure including LAN, WAN, SD-WAN, and wireless, while administering Palo Alto firewalls and Cisco devices across all sites.

You will lead circuit procurement, vendor management, and ensure uptime with strong focus on network security, VPN, and PCI DSS compliance across distributed locations.

Qualifications

• 5+ years of progressive, hands-on network engineering experience in multi-site environments.

Responsibilities

• Design, configure, deploy, and maintain network infrastructure across multiple sites (LAN, WAN, SD-WAN, wireless).
• Administer Palo Alto next-gen firewalls: policy design, rule base, threat prevention, NAT, firmware lifecycle.
• Configure and manage Cisco routers/switches: BGP/OSPF/EIGRP, VLANs, STP, QoS, ACLs.
• Administer Cisco Meraki wireless: AP deployment, RF planning, SSID, client policy, performance monitoring.
• Own WAN circuit procurement and vendor relationships: MPLS, broadband, fiber, cellular backup, SLAs.
• Maintain network uptime, monitor health, preempt issues before failures.
• Design and enforce network security controls: firewall governance, segmentation, VPN, zero-trust.
• Support PCI DSS network requirements.
• Document network segmentation and audits for compliance.

Skills

Palo Alto firewalls

Cisco routers/switches

Meraki wireless

WAN procurement

VPN architecture

Network security

PCI DSS knowledge

Firewall policy management

Routing protocols

Tools

Panorama

Active Directory

Job description

Responsibilities

Kforce has a client in Olathe, KS that is looking for a Network Engineer for a fully onsite, direct hire opportunity. Responsibilities:

• Design, configure, deploy, and maintain network infrastructure across multiple sites, including LAN, WAN, SD-WAN, and wireless environments, exercising independent judgment on topology, hardware selection, and configuration standards
• Administer and maintain Palo Alto next-generation firewalls, including security policy design, rule base management, threat prevention profiles, NAT configurations, and firmware lifecycle management across all sites
• Configure and manage Cisco routers and switches, including routing protocol configuration (BGP, OSPF, EIGRP), VLAN segmentation, STP, QoS, and access control, ensuring consistent and reliable connectivity across the enterprise
• Administer Cisco Meraki wireless infrastructure, including access point deployment, RF planning, SSID configuration, client policy enforcement, and ongoing performance monitoring and optimization across distributed sites
• Own circuit procurement, contract management, and vendor relationships for all WAN connectivity, including MPLS, broadband, dedicated fiber, and cellular backup circuits - managing SLAs, renewals, and escalations with carriers
• Maintain and optimize network uptime across all sites, proactively monitoring infrastructure health, identifying degradation trends, and independently determining and implementing corrective actions before failures impact operations
• Design, implement, and enforce network security controls, including firewall policy governance, network segmentation, intrusion prevention, VPN architecture (site-to-site and remote access), and zero-trust access principles
• Working with the Information Security team, support PCI
• DSS network compliance requirements, including scoped network segmentation design, firewall rule review, quarterly network scans, and documentation to support audit and assessment activities

Responsibilities

Kforce has a client in Olathe, KS that is looking for a Network Engineer for a fully onsite, direct hire opportunity. Responsibilities:

• Design, configure, deploy, and maintain network infrastructure across multiple sites, including LAN, WAN, SD-WAN, and wireless environments, exercising independent judgment on topology, hardware selection, and configuration standards
• Administer and maintain Palo Alto next-generation firewalls, including security policy design, rule base management, threat prevention profiles, NAT configurations, and firmware lifecycle management across all sites
• Configure and manage Cisco routers and switches, including routing protocol configuration (BGP, OSPF, EIGRP), VLAN segmentation, STP, QoS, and access control, ensuring consistent and reliable connectivity across the enterprise
• Administer Cisco Meraki wireless infrastructure, including access point deployment, RF planning, SSID configuration, client policy enforcement, and ongoing performance monitoring and optimization across distributed sites
• Own circuit procurement, contract management, and vendor relationships for all WAN connectivity, including MPLS, broadband, dedicated fiber, and cellular backup circuits - managing SLAs, renewals, and escalations with carriers
• Maintain and optimize network uptime across all sites, proactively monitoring infrastructure health, identifying degradation trends, and independently determining and implementing corrective actions before failures impact operations
• Design, implement, and enforce network security controls, including firewall policy governance, network segmentation, intrusion prevention, VPN architecture (site-to-site and remote access), and zero-trust access principles
• Working with the Information Security team, support PCI
• DSS network compliance requirements, including scoped network segmentation design, firewall rule review, quarterly network scans, and documentation to support audit and assessment activities

Requirements

• 5+ years of progressive, hands-on network engineering experience supporting multi-site enterprise environments, including demonstrated ownership of network infrastructure design and operational decisions
• Direct, hands-on experience administering Palo Alto Networks next-generation firewalls, including security policy management, Panorama (preferred), and threat prevention configuration
• Proven experience configuring and supporting Cisco routers and switches in a multi-site enterprise environment, including routing protocols (BGP, OSPF), VLANs, and access layer design
• Hands-on experience with Cisco Meraki wireless platform, including AP deployment, dashboard administration, and multi-site wireless management
• Experience with circuit contract ownership and carrier management, including WAN circuit procurement, SLA management, and vendor escalation
• Experience with DNS administration and Active Directory integration, including DHCP management and multi-site name resolution
• Solid understanding of network security principles, including firewall policy governance, network segmentation, VPN architecture, and defense-in-depth design
• Working knowledge of PCI DSS network requirements, including scoped segmentation, firewall rule review, and audit support
• Strong analytical and troubleshooting skills, with the ability to independently diagnose and resolve complex, multi-layer network issues across geographically distributed sites
• Excellent communication and customer-service skills, with the ability to translate technical network concepts for non-technical site stakeholders and to take clear ownership of issue resolution

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

• We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees.
• Salaried personnel receive paid time off.
• Hourly employees are not eligible for paid time off unless required by law.
• Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.