Senior Network Engineer

City of Concord; Concord (NC); On-site; USD 95,000 - 140,000; Full time

Job summary

City of Concord is seeking an experienced network architect to design, deploy, and maintain the City’s enterprise networks. You will oversee routers, firewalls, switches, VPN hardware, and wireless infrastructure to ensure secure, scalable operations.

You will develop standards, diagrams and documentation, evaluate new technologies, and lead disaster recovery planning. The role emphasizes security audits, incident response, and reliable network performance.

Qualifications

• Enterprise network architecture and design principles including redundancy and DR planning.
• Networking methods, materials and equipment.
• Enterprise switching and routing platforms.
• Enterprise firewall administration, VPN, security policy management.
• Network protocols including BGP, QoS, data center networking, cloud/hybrid connectivity and monitoring software.

Responsibilities

• Architects and administers the City’s enterprise networks, including routers, firewalls, switches, VPN hardware, and wireless.
• Develops architecture standards, diagrams and design docs for scalability, resiliency, and disaster recovery.
• Evaluates new networking and security technologies and makes upgrade recommendations.
• Aids in the design and administration of the City’s server environment.
• Provides support to ensure secure operation and performance of the enterprise network.
• Performs device configuration maintenance, firewall management and troubleshooting.
• Monitors devices/traffic and analyzes performance issues.
• Develops security metrics to detect abnormal activity.
• Oversees network security, including penetration testing and audits.
• Investigates security incidents and remediates vulnerabilities.

Skills

Enterprise network architecture

Redundancy planning

Security policy management

BGP/QoS

Data center networking

Network monitoring

Firewall administration

VPN and secure connectivity

Education

CCNP or CCDP/CCDE preferred

NSE4/NSE7 preferred

CEH or CND preferred

Valid North Carolina Driver’s License

Tools

NAC/802.1X authentication

Enterprise monitoring software

Job description

Essential Duties and Responsibilities:

• Architects and administers all of the City’s enterprise networks, including infrastructure design, implementation, configuration, and maintenance of routers, firewalls, switches, VPN hardware, and wireless.
• Develops and maintains network architecture standards, logical/physical diagrams, and design documentation to support scalability, resiliency, and disaster recovery planning.
• Evaluates emerging networking and security technologies and makes recommendations on architecture upgrades, hardware refresh cycles, and capacity planning.
• Aids in the design and administration of the City’s server environment.
• Provides support of network infrastructure to ensure successful performance and secure operation of the enterprise network.
• Performs device configuration maintenance, firewall management & troubleshooting.
• Performs device and traffic monitoring, analysis, management and troubleshooting.
• Develops usage and security metrics to allow for the detection of abnormal activities.
• Administers overall network security, including planning and oversight of penetration and vulnerability testing performed internally or by third-party assessors.
• Performs security audits from internal and external parties.
• Investigates security incidents and researches and implements solutions.
• Identifies and remediates network vulnerabilities.

Supplemental Functions:

• Performs other similar duties as required.

Job Specifications and Qualifications:

Knowledge:

• Enterprise network architecture and design principles, including redundancy, segmentation, and disaster recovery
• Networking methods, materials and equipment
• Enterprise switching and routing platforms
• Enterprise firewall administration, VPN, and security policy management
• Network protocols, including BGP, QoS policy design, data center networking, NAC/ 802.1X port-based authentication, cloud/hybrid connectivity and enterprise monitoring software

Licensing and Certifications:

• Cisco Certified Network Professional (CCNP) preferred
• Cisco Certified Design Professional (CCDP) or Cisco Certified Design Expert (CCDE) preferred
• Fortinet Network Security Expert 4 (NSE 4) – Network Security Professional preferred
• Fortinet Network Security Expert 7 (NSE 7) preferred
• EC-Council Certified Ethical Hacker (CEH) preferred
• EC-Council Certified Network Defender (CND) preferred
• Valid North Carolina Driver’s License

PLEASE NOTE: Applicants must meet the City’s criteria for an acceptable driving record.

Working Conditions / Physical Requirements:

• Positions in this class require: vision, hearing, fine dexterity, sitting, talking, standing, walking, lifting, carrying, reaching, handling, kneeling, crawling, pushing/pulling, climbing, foot controls, balancing, crouching, twisting.
• Sedentary Work: Exerting up to 10 pounds occasionally or negligible weights frequently; sitting most of the time.

The intent of this job description is to provide a representative summary of the types of duties and responsibilities that will be required of the positions given this title and shall not be construed as a declaration of the specific duties and responsibilities of any particular position. Employees may be requested to perform job-related tasks other than those specifically presented in this description. Fair Labor Standards Act (exempt/non-exempt) is designated by position. The employer actively supports Americans with Disabilities Act and will consider reasonable accommodations.