Network Engineer

Cigars International; Bethlehem (Northampton County); On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

Comprehensive Health Care, Vision & Dental Plan

Flexible Spending Account

Paid Vacation

401(k) Retirement Savings Plan

Job summary

Cigars International is seeking a Senior Network Engineer to design, implement, and maintain a secure and scalable network infrastructure. The ideal candidate will have extensive experience with Fortinet and Zscaler technologies, and possess strong troubleshooting skills in complex environments. This position offers a dynamic work environment with opportunities for travel.

Key responsibilities include managing enterprise network architectures, leading security initiatives, and mentoring junior engineers. Benefits include health care plans, PTO, and a 401(k) with company match.

Qualifications

• 5+ years of experience in enterprise networking and infrastructure engineering.
• In-depth knowledge of TCP/IP, DNS, DHCP, BGP.
• Strong hands-on experience with Fortinet technologies, especially FortiGate firewalls.

Responsibilities

• Design, deploy, and maintain enterprise network architectures.
• Lead implementation of Fortinet solutions.
• Architect and administer Zscaler solutions.

Skills

Enterprise networking

Security architecture

Fortinet solutions

Zscaler cloud security platforms

TCP/IP

BGP

Hybrid networking

Troubleshooting skills

Tools

FortiGate

ZIA

ZPA

Job description

Senior Network Engineer

Posting Start Date: 4/13/26

Location: Bethlehem, Pennsylvania 18015

About the Role

We are seeking a Senior Network Engineer with deep expertise in enterprise networking and security architecture. This role will serve as a senior technical contributor responsible for the design, implementation, optimization, and support of a modern, secure, and scalable network infrastructure. The ideal candidate has strong hands‑on experience with Fortinet solutions and Zscaler cloud security platforms and is comfortable operating in a hybrid on‑premises and cloud environment.

• Requires occasional domestic travel to retail sites and international travel to production facilities in Latin America and Europe.

What Will You Be Responsible For?

• Design, deploy, and maintain enterprise network architectures, including LAN, WAN, SD‑WAN, and cloud connectivity.
• Lead implementation and ongoing management of Fortinet solutions (FortiGate, FortiManager, FortiAnalyzer, FortiSwitch, FortiAP).
• Architect and administer Zscaler solutions (ZIA, ZPA, ZDX) to support zero trust, secure access, and cloud‑first strategies.
• Act as a senior escalation point for complex network and security incidents; perform root cause analysis and drive remediation.
• Develop and enforce network security standards, best practices, and operational procedures.
• Partner with security and systems teams to align networking solutions with business and security requirements.
• Lead network modernization initiatives, including migration from legacy perimeter models to Zero Trust architectures.
• Perform capacity planning, performance tuning, and continuous optimization of network environments.
• Evaluate new technologies and provide technical recommendations aligned with business strategy.
• Create and maintain detailed network documentation, diagrams, and operational runbooks.
• Mentor junior engineers and provide technical leadership across projects.

Required Qualifications

• 5+ years of experience in enterprise networking and infrastructure engineering.
• In‑depth knowledge of TCP/IP, DNS, DHCP, BGP.
• Strong hands‑on experience with Fortinet technologies, especially FortiGate firewalls and SD‑WAN.
• Proven experience implementing and operating Zscaler (ZIA and ZPA required).
• Experience with VPN technologies (IPsec, SSL).
• Experience with hybrid networking (on‑prem, data center, and public cloud environments such as Azure).
• Strong troubleshooting skills in complex, multi‑vendor environments.
• Ability to clearly communicate technical concepts to both technical and non‑technical stakeholders.

Preferred Qualifications

• Fortinet certifications (NSE 4–7) and/or Zscaler certifications.
• Experience with SASE and Zero Trust network architectures.
• Experience supporting global or multi‑region enterprise networks.
• Background working in regulated or security‑sensitive environments.

Core Competencies

• Strategic thinking and problem‑solving.
• Strong documentation and process discipline.
• Ability to lead by influence and technical expertise.
• Customer‑focused, service‑oriented mindset.
• Comfortable operating in fast‑paced, evolving environments.

Benefits

• Comprehensive Health Care, Vision & Dental Plan
• Flexible Spending Account
• Disability Plans
• Basic & Supplemental Life Insurance
• Additional Supplemental Benefits
• Paid Vacation, Paid Time Off (PTO) days, Holidays
• 401(k) Retirement Savings Plan including a generous company match

Our company uses E-Verify to confirm the employment eligibility of all newly hired employees. To learn more about E-Verify, including your rights and responsibilities, please visit www.e-verify.gov.

Please be informed that this Direct Search is conducted exclusively by the Scandinavian Tobacco Group. We do not accept applications from agencies, and we will not provide compensation for unsolicited CVs.