Remote Enterprise Network Engineer — Design & Secure

Internal; Wisconsin; Hybrid; USD 75,000 - 95,000; Full time

Benefits offered by this job

Medical premiums paid

Disability insurance

Life insurance

401(k) match

Employee discounts

Job summary

Metronet seeks an Enterprise Network Engineer to design, deploy, and secure our enterprise network infrastructure across multiple sites. You will manage WAN, data center, cloud-connected networks and lead security initiatives including firewall policy, zero-trust controls, and VPN architectures.

Ideal candidates have hands-on experience with NGFW firewalls (Cisco Firepower, Palo Alto, FortiGate), Cisco Nexus/ISE, and SD-WAN, plus the ability to work independently while coordinating with vendors

Qualifications

• Bachelor’s degree or better in related field or 4+ years of related network engineering and network security experience minimum.
• Strong experience with NGFW firewalls such as Cisco Firepower, Palo Alto, or FortiGate, including firewall policy management, NAT, VPN, logging, troubleshooting, rule review, and problem resolution.
• Experience with enterprise networking technologies and management platforms such as Arista, Juniper, Cisco Nexus, Cisco ISE, Cisco ACI, NDFC, or similar enterprise networking and infrastructure management solutions preferred.
• Experience designing, deploying, and supporting enterprise-scale network infrastructure within medium-to-large multi-site business environments.
• Strong understanding of networking architectures, standards, and protocols, including routing, switching, VLANs, spanning tree, wireless, WAN, VPN, DNS, DHCP, NAT, QoS, and high availability concepts.
• Experience with network security concepts including segmentation, ACLs, least privilege access, secure remote access, zero trust principles, logging, monitoring, and incident response support.
• Experience with Cisco Catalyst 9000 switching platforms and enterprise wireless solutions such as Cisco Catalyst Wireless or Meraki preferred.
• Experience with dynamic routing protocols such as BGP, OSPF, or EIGRP, including route filtering, redistribution, and troubleshooting preferred.
• Experience with SD‑WAN technologies, VPN technologies, WAN provider coordination, and remote‑site connectivity preferred.
• Experience configuring, deploying, and maintaining Cisco network devices in enterprise LAN, WAN, wireless, security, and data center environments.
• Understanding of cloud networking and hybrid network connectivity concepts, including public cloud platforms such as AWS or Azure and related security controls.
• Experience with network monitoring, firewall logging, NetFlow, SNMP, Syslog, packet analysis, and performance troubleshooting tools preferred.
• Demonstrated ability to independently manage complex network engineering projects, troubleshoot advanced technical issues, and drive solutions with minimal supervision.
• Ability to communicate technical and security matters clearly to peers, leadership, vendors, contractors, and non‑technical counterparts.
• Good oral and written communication skills with the ability to document technical designs, changes, security decisions, and operational procedures.
• Detail‑oriented organizational skills with the ability to manage multiple priorities, projects, operational issues, and security‑related requests.
• Dependability, adaptability, flexibility, creativity, professional attitude, and the ability to understand complex issues, drive troubleshooting efforts, escalation appropriately when needed.
• Willingness to work as a team and independently.
• Must be legally authorized to work in the U.S.

Responsibilities

• Lead the design, deployment, maintenance, and ongoing optimization of enterprise network infrastructure and network security platforms, including routers, switches, firewalls, wireless access points, WAN circuits, VPNs, and related technologies.
• Independently manage assigned network engineering projects from planning and design through implementation, documentation, testing, and operational support.
• Design and maintain enterprise LAN, WAN, wireless, data center, and cloud-connected network architectures to support business requirements, remote site connectivity, resiliency, performance, security, and future growth.
• Develop, maintain, and evolve network and network security standards, reference architectures, implementation practices, and engineering best practices that support scalability, security, and operational excellence across the enterprise.
• Design, implement, review, and maintain network security controls including firewall policies, ACLs, segmentation, VPN access, NAT, secure management access, zero trust‑aligned controls, and access control frameworks.
• Serve as an escalation resource for complex network and network security incidents, including routing, switching, wireless, firewall, VPN, DNS, DHCP, WAN, cloud connectivity, performance, availability, and policy-related issues.
• Perform firewall rule reviews, network access reviews, security policy cleanup, and assist with vulnerability remediation efforts related to network infrastructure.
• Develop and maintain network and security documentation including diagrams, standards, configurations, procedures, support records, implementation plans, firewall rule documentation, and maintenance window documentation.
• Respond to, document, update, and resolve assigned network and security operations tickets in accordance with established service levels, escalation procedures, and change management practices.
• Drive network growth initiatives, capacity planning, infrastructure refresh projects, technology standardization efforts, and network security platform modernization across the enterprise.
• Lead and collaborate with vendors, service providers, contractors, security teams, and internal stakeholders to successfully deliver network projects, site deployments, migrations, cutovers, and infrastructure upgrades.
• Occasional travel to Evansville, IN for team meetings and collaboration events (approximately twice per year).
• All other duties as assigned

Skills

NGFW firewalls

Firewall policy management

VPN & NAT

Security incident support

Cloud networking concepts

Data center networks

Remote-site connectivity

Education

Bachelor's degree or 4+ years related field

Tools

Arista

Juniper

Cisco Nexus

Cisco ISE

Cisco ACI

NDFC

Job description

Metronet seeks an Enterprise Network Engineer to design, deploy, and secure our enterprise network infrastructure across multiple sites. You will manage WAN, data center, cloud-connected networks and lead security initiatives including firewall policy, zero-trust controls, and VPN architectures.

Ideal candidates have hands-on experience with NGFW firewalls (Cisco Firepower, Palo Alto, FortiGate), Cisco Nexus/ISE, and SD-WAN, plus the ability to work independently while coordinating with vendors