Senior IT Network Engineer

Spire; Boulder (CO); On-site; USD 110,000 - 150,000; Full time

Job summary

Spire is seeking an experienced Senior IT Network Engineer to own and support our corporate and back-office network environment in Boulder, Colorado. Reporting to the Global IT Director, this hands-on role designs, implements, operates, and lifecycle-manages networking for offices, remote users, and cloud services, while collaborating with Security, Infrastructure, Facilities and other teams.

The ideal candidate brings strong fundamentals in routing, switching, VPNs, DNS, wireless, and network

Qualifications

• 5+ years in network engineering or similar hands-on role.
• Strong knowledge of TCP/IP, routing, switching, DNS, DHCP, NAT, VPNs, firewalls, VLANs, and segmentation.
• Hands-on design, operation, and troubleshooting of enterprise routing and switching.
• Experience administering enterprise firewalls.

Responsibilities

• Own architecture, implementation, operation, and reliability of corporate network.
• Design, configure, troubleshoot VPNs, routing, switching, firewalls, and office-to-office connectivity.
• Own remote-access environment, including VPN architecture and authentication integration.
• Manage corporate firewall platforms and policies; lifecycle management and troubleshooting.
• Design and maintain network segmentation and routing between offices, cloud services, and remote sites.
• Own corporate DNS operations and related services supporting identity, email, SaaS, endpoints, etc.
• Maintain office-to-office and site-to-site VPN connectivity, including IPsec tunnels.
• Support cloud networking for IT-owned systems, including routing and security controls.
• Maintain wireless networking and network-authentication services.
• Serve as senior escalation point for complex outages and connectivity issues.
• Collaborate with Security on firewall policy, segmentation, PKI, and security controls.
• Coordinate connectivity between corporate and engineering environments with secure boundaries.
• Maintain accurate network diagrams, configurations, and recovery procedures.
• Develop scripts and automation for deployment, monitoring, and management of network services.
• Implement monitoring and alerting to identify availability, reliability, capacity, and performance issues.

Skills

TCP/IP

Routing

Switching

DNS

DHCP

NAT

VPNs

Firewalls

VLANs

Network segmentation

Job description

We are looking for an experienced Senior IT Network Engineer to own and support Spire's corporate and back-office network environment.

Reporting to the Global IT Director, this is a hands‑on role with primary responsibility for the design, implementation, operation, reliability, and lifecycle management of the corporate network. You will own the networking that supports Spire's offices, remote users, corporate services, and back‑office systems, while working closely with Security, Infrastructure, Facilities, and other technical teams.

The role includes responsibility for corporate routing, firewalls, VPN and remote access, office‑to‑office connectivity, DNS, wireless networking, network authentication, and related network infrastructure. You will also help modernize legacy and bespoke network services, improve resiliency, and reduce operational dependency on individual subject‑matter experts.

We are looking for someone who is proactive, self‑directed, and comfortable owning complex technical problems from architecture through implementation and ongoing operation. The right person will combine strong network‑engineering fundamentals with disciplined operational practices, including documentation, change management, monitoring, lifecycle management, and follow‑through.

Role & Responsibilities

• Own the architecture, implementation, operation, and reliability of Spire's corporate and back‑office network environment.
• Design, configure, maintain , and troubleshoot corporate routing, switching, wired and wireless networking, firewalls, VPNs, and office‑to‑office connectivity.
• Own the corporate remote‑access environment, including VPN architecture, operation, authentication integration, user connectivity, and troubleshooting.
• Manage corporate firewall platforms and policies in partnership with Security, including implementation, rule changes, lifecycle management, and troubleshooting.
• Design and maintain network segmentation and routing between corporate offices, corporate cloud services, remote‑access environments, and approved external connections.
• Own corporate DNS operations and related network services supporting identity, email, SaaS, endpoints, and other business systems.
• Manage office‑to‑office and corporate site‑to‑site VPN connectivity, including IPsec tunnels and related routing.
• Support corporate cloud networking for IT‑owned systems and services, including routing, connectivity, security controls, and integration with office and remote‑access networks.
• Maintain and improve corporate wireless networking and network‑authentication services.
• Serve as the senior technical escalation point for complex corporate network outages and connectivity issues.
• Troubleshoot difficult problems involving routing, VPNs, firewalls, DNS, authentication, certificates, wireless networking, cloud connectivity, and interdependent network services.
• Partner closely with Security on network‑security architecture, firewall policy, segmentation, secure‑access requirements, PKI, and other security controls.
• Partner with Infrastructure and Engineering teams on connectivity between corporate and engineering environments, ensuring secure, reliable, and well‑defined network boundaries.
• Maintain accurate network diagrams, configurations, IP addressing, circuit information, operating procedures, and recovery documentation.
• Develop and maintain scripts, infrastructure‑as‑code, and automation used to deploy, configure, monitor , or manage corporate network services.
• Implement and maintain monitoring and alerting to identify network availability, reliability, capacity, and performance issues.
• Plan and execute network hardware, software, certificate, circuit, and service lifecycle activities.
• Support office openings, moves, expansions, consolidations, closures, and network infrastructure changes in partnership with End User Technology, Facilities, carriers, and vendors.
• Manage or coordinate ISP, carrier, circuit, and network‑vendor relationships where required .
• Follow disciplined change‑management practices, including planning, peer review, testing, documentation, rollback planning, and post‑change validation.
• Proactively identify architectural, reliability, lifecycle, capacity, and operational risks and drive them through resolution.
• Participate in after‑hours escalation or on‑call support for critical corporate network incidents when required .
• Contribute to broader IT initiatives involving infrastructure modernization, reliability, automation, cloud services, workplace technology, and security.

Basic Qualifications

• 5+ years of experience in network engineering, network operations, infrastructure engineering, or a similar hands‑on technical role.
• Strong knowledge of TCP/IP, routing, switching, DNS, DHCP, NAT, VPNs, firewalls, VLANs, and network segmentation.
• Hands‑on experience designing, operating , and troubleshooting enterprise routing and switching environments.
• Experience administering enterprise firewa