Principal Network Engineer

Sun Life; Wellesley (MA); On-site; USD 28,700 - 37,000; Full time

Job summary

Sun Life is seeking a Senior Network Engineer to lead the design and implementation of enterprise network infrastructure. The role demands advanced technical expertise and ownership in documentation and improvement of network solutions across both on-premises and cloud environments.

The ideal candidate will have strong experience in Cisco technologies and AWS networking services. This position provides Tier 3 support and responsibility for maintaining network reliability and performance.

Qualifications

• 5+ years of experience in network engineering within enterprise environments.
• Current AWS Certified Advanced Networking – Specialty certification.
• Hands-on experience with Cisco routers and switches.

Responsibilities

• Provide Tier 3 support for enterprise LAN/WAN environments.
• Design, implement, and maintain network infrastructure solutions.
• Troubleshoot complex network issues.

Skills

AWS Cloud Networking

Cisco Routing and Switching

Infrastructure as Code (IaC)

Network Security

Troubleshooting

Education

Bachelor's degree or equivalent experience

Tools

Terraform

AWS CloudFormation

WatchGuard firewalls

Job description

Job Description

Owner's mindset - architecture, design, continuous improvement, documentation.

The Senior Network Engineer is responsible for the design, implementation, maintenance, and optimization of enterprise network infrastructure. This role provides advanced (Tier 3) technical support and leads the delivery of complex network solutions across LAN/WAN environments.

Operating as a senior individual contributor, this role applies deep technical expertise to solve complex problems, improve system performance, and has an owner's mindset to the architecture, documentation, delivery, and continuous improvement of infrastructure initiatives. The role works independently within established standards and actively contributes to day-to-day activities and managed projects.

The ideal candidate will have strong experience designing, implementing, and supporting enterprise network infrastructure, with expertise in Cisco routing and switching technologies, WatchGuard firewalls, AWS networking services, Infrastructure as Code, and utilizing Generative Developer tools. This role will be responsible for maintaining network reliability, security, and performance across both on‑premises and cloud environments.

Candidates who possess experience with certificate lifecycle management platforms, particularly Venafi, will be given additional consideration.

Key Responsibilities

• Provide Tier 3 support for enterprise LAN/WAN environments, including routers, switches, firewalls, and network security devices
• Design, implement, and maintain network infrastructure solutions aligned with established architectural standards
• Troubleshoot complex network issues and drive timely resolution to ensure service stability and performance
• Execute network changes, upgrades, and patching activities through formal change management processes
• Optimize network performance, reliability, and cost efficiency across infrastructure components
• Contribute to the delivery of moderately to highly complex projects, including planning, implementation, and validation
• Partner with internal teams (e.g., security, infrastructure, application teams) to support integrated solutions
• Design and support AWS networking solutions, including:
  • Amazon VPCs
  • Transit Gateway
  • Direct Connect
  • Site-to-Site VPN
  • Route Tables and Network ACLs
  • Security Groups
  • Load Balancing and Hybrid Connectivity
• Document network designs, configurations, procedures, and support models to ensure operational continuity
• Provide technical guidance and mentorship to junior team members and support knowledge sharing within the team

Qualifications

Required

• 5+ years of experience in network engineering within enterprise environments
• Current AWS Certified Advanced Networking – Specialty certification
• Strong hands‑on experience with:
  • Cisco routing and switching (IOS, Nexus, enterprise hardware platforms)
  • Network protocols (e.g., BGP, MPLS, EIGRP)
  • Administering and troubleshooting WatchGuard firewall solutions, VPNs, and network security technologies
• Advanced proficiency in Infrastructure as Code (IaC) using Terraform or AWS CloudFormation, paired with experience utilizing Generative AI developer tools (e.g., Amazon Q, Amazon Bedrock, or AI coding assistants) to accelerate code generation, automate network compliance validation, and scale CI/CD network deployment pipelines
• Deep expertise designing and optimizing high‑performance AWS cloud network architectures tailored for AI/ML workloads.
  • Demonstrated ability to configure and scale data‑transfer pipelines to Amazon S3 and compute clusters, managing high‑bandwidth, ultra‑low‑latency traffic patterns.
  • Knowledge of advanced networking protocols and mechanisms for AI data clusters (e.g., congestion control protocols, minimizing packet loss, and maximizing throughput) to support seamless Large Language Model (LLM) training and inference deployments
• Experience supporting and maintaining large‑scale LAN/WAN environments
• Strong troubleshooting, diagnostic, and problem‑solving capabilities
• Knowledge of Zero Trust and modern network security architectures
• Experience with change management and operational support processes
• Strong written and verbal communication skills
• Bachelor's degree or equivalent experience

Preferred

• Cisco or security certifications (e.g., CCNP, CCIE, CCSE)
• Experience with network security tools (IDS/IPS, SIEM, proxies, etc.)
• Experience with Venafi certificate lifecycle management and PKI administration.
• Exposure to virtualization environments (e.g., VMware)

Salary Range

Salary Range: 28,700 - 37,000

EEO & Equal Opportunity Information

We will make reasonable accommodations to the known physical or mental limitation of otherwise‑qualified individuals with disabilities or special disabled veterans, unless the accommodation would impose an undue hardship on the operation of our business. Please email [e-mail] to request an accommodation.

For applicants residing in California, please read our employee California Privacy Policy and Notice.

We do not require or administer lie detector tests as a condition of employment or continued employment.

Sun Life will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws, including applicable fair chance ordinances.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.