Senior Network Engineer

Customized Energy Solutions; Philadelphia (Philadelphia County); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Performance bonus

Profit-sharing

Medical Savings Account

Health insurance

401(k) matching

Tuition reimbursement

Job summary

Customized Energy Solutions (CES) is seeking a Senior Network Engineer to design, secure, and support our enterprise network across North America, India, Vietnam, and Japan. You will own on-prem routing, switching, firewall, and security platforms and drive integration with cloud and hybrid environments.

The role requires leading complex projects, managing priorities, and communicating with technical and non-technical audiences.

Qualifications

• Bachelor's degree in IT, CS, Network Engineering, or related field.
• 7+ years of hands-on enterprise network engineering in multi-site, multi-vendor environments.
• Experience supporting globally distributed networks across hybrid on-premises and cloud.
• Advanced experience with Cisco ASA and Cisco Firepower/FMC, including policy management, NAT, IPS/IDS, and SSL inspection.
• Advanced experience with Cisco ISE, including 802.1X, NAC, RADIUS/TACACS+, endpoint profiling.
• Hands-on experience with F5 BIG-IP (LTM/ASM/WAF); AFM experience preferred.

Responsibilities

• Design, implement, upgrade, and maintain routing and switching infrastructure across CES locations.
• Manage multi-site WAN with redundancy, failover, and SLA adherence.
• Configure and troubleshoot BGP, OSPF, and EIGRP.
• Establish and maintain network standards, configuration baselines, and change management procedures.
• Lead network projects from requirements and planning through implementation, validation, and post-implementation review.
• Collaborate with Cloud and IS teams on secure and scalable hybrid network architecture.
• Provide Tier 3 incident support, root cause analysis, and permanent corrective actions.
• Mentor junior team members on networking technologies and operational practices.

Skills

Network engineering

BGP

OSPF

EIGRP

Cisco ASA/Firepower

Cisco ISE

F5 BIG-IP

WAN design

Security policy

Education

Bachelor's degree in IT/CS/Network Engineering

Tools

Cisco ASA

Cisco Firepower/FMC

Cisco ISE

F5 BIG-IP

Palo Alto Networks

Fortinet

AWS/Azure/GCP

Job description

Customized Energy Solutions (CES) is a global energy services and technology company that helps market participants operate, comply, and compete in deregulated electricity and natural gas markets. Founded in 1998 and headquartered in Philadelphia, CES works with utilities, independent power producers, energy suppliers, developers, asset owners, and investors across North America and globally.

CES delivers market intelligence, regulatory and market design support, asset and portfolio management, retail market operations, and energy technology solutions. Our teams track and interpret ISO/RTO rules and policy developments, support resource planning and market participation, manage operational and settlement processes, and develop proprietary software platforms—including CES BLUE, GOLD, RED, GRIDBOOST, and CoMETS—that help clients manage risk, optimize performance, and respond effectively to market change.

CES is committed to advancing transparent, efficient, and non-discriminatory energy markets while delivering practical, high-quality solutions marked by integrity, rigor, and long-term client value.

CES has been nationally and regionally recognized for sustained growth and innovation, including listings on the Inc. 500|5000 and Philadelphia Business Journal’s Top 100 Companies, as well as a Best Places to Work designation with Hall of Fame status for five or more consecutive years.

With headquarters in Philadelphia and offices across the U.S., Canada, Japan, India, and Vietnam, CES offers a collaborative, flexible, and globally connected work environment for professionals passionate about the future of energy.

Job Description

The Senior Network Engineer is a hands‑on technical leader responsible for designing, implementing, securing, and supporting CES’s enterprise network infrastructure across North America, India, Vietnam, and Japan. This position reports to the Senior Cloud and Network Security Architect.

The role serves as the primary owner of on‑premises routing, switching, firewall, and network security platforms and supports their integration with CES’s cloud and hybrid environments. The successful candidate must be able to manage competing priorities, lead complex network projects, and maintain reliable day‑to‑day operations.

This position works directly with internal stakeholders and external clients to address connectivity requirements, resolve service‑impacting issues, and communicate clearly with both technical and non‑technical audiences.

This is an on‑site position based at CES’s Philadelphia headquarters. A hybrid work arrangement may be considered in the future based on operational needs and demonstrated performance.

Key Responsibilities

• Design, implement, upgrade, and maintain routing and switching infrastructure across CES locations.
• Manage a multi‑site, multi‑circuit WAN environment with appropriate redundancy, availability, and failover.
• Configure and support advanced routing protocols, including BGP, OSPF, and EIGRP.
• Establish and maintain network standards, configuration baselines, and change management procedures.
• Lead network projects from requirements and planning through implementation, validation, and post‑implementation review.
• Evaluate and recommend network technologies, vendors, and platforms based on business, security, and growth requirements.

Network Security

• Manage Cisco ASA, Cisco Firepower/FMC, Palo Alto Networks, and other network security platforms.
• Administer Cisco ISE, including 802.1X, NAC, RADIUS/TACACS+, guest access, and endpoint profiling.
• Configure and maintain F5 BIG‑IP load balancers and web application firewalls.
• Develop and maintain firewall rules, access control policies, and network segmentation strategies.
• Serve as the senior escalation point for firewall and network security incidents.

WAN and Cloud Connectivity

• Manage primary and failover circuits, carrier relationships, SLA performance, and connectivity issues.
• Design and maintain site‑to‑site, DMVPN, and remote‑access VPN infrastructure.
• Implement QoS policies for business‑critical traffic.
• Integrate on‑premises networks with AWS, Azure, and other cloud environments using Direct Connect, ExpressRoute, Transit Gateway, and IPsec VPN technologies.
• Configure and support VPCs, VNets, security groups, routing tables, and network ACLs.
• Collaborate with Cloud and IS teams on secure and scalable hybrid network architecture.

Operations and Support

• Monitor network availability, performance, and capacity and proactively address potential issues.
• Provide Tier 3 incident support, root cause analysis, and permanent corrective actions.
• Maintain network diagrams, IP address records, runbooks, configuration documentation, and change history.
• Coordinate with internal teams and external clients regarding connectivity and service‑impacting incidents.
• Manage multiple concurrent priorities and communicate status, risks, and recommendations to stakeholders.
• Participate in a rotating on‑call schedule supporting 24x7 network operations.
• Mentor junior team members on networking technologies and operational practices.

Qualifications

Required Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Network Engineering, or a related field preferred; equivalent professional experience will be considered.
• 7+ years of hands‑on enterprise network engineering experience in a multi‑site, multi‑vendor environment.
• Experience supporting globally distributed networks across remote locations and hybrid on‑premises and cloud infrastructure.
• Advanced experience administering Cisco ASA and Cisco Firepower/FMC, including policy management, NAT, IPS/IDS, and SSL inspection.
• Advanced experience with Cisco ISE, including 802.1X, NAC, RADIUS/TACACS+, endpoint profiling, and posture assessment.
• Hands‑on experience with F5 BIG‑IP, including LTM and ASM/WAF; AFM experience is strongly preferred.
• Advanced proficiency configuring and troubleshooting BGP, OSPF, and EIGRP in complex, multi‑path environments.
• Strong knowledge of WAN architecture, multi‑circuit connectivity, redundancy, failover, and fault‑tolerant design.
• Hands‑on experience integrating on‑premises networks with AWS, Azure, or GCP, including hybrid routing, connectivity, and security.
• Experience supporting physical network equipment across multiple vendors. Experience with Palo Alto Networks or Fortinet is preferred.
• Ability to manage multiple projects and operational priorities in a fast‑paced environment.
• Excellent written and verbal communication skills, including the ability to communicate with technical and non‑technical audiences.
• Demonstrated client‑facing experience coordinating solutions, explaining service impact, and managing high‑pressure incidents

Preferred Experience

• SD‑WAN platforms such as Cisco Viptela, Meraki, Palo Alto Prisma, or comparable technologies.
• Network automation and infrastructure‑as‑code tools such as Python, Ansible, or Terraform.
• Regulated or compliance‑driven environments, including SOC 2 or NERC CIP.
• Enterprise monitoring and observability platforms such as SolarWinds, PRTG, or Kentik.
• Zero‑trust network access or Secure Service Edge frameworks.

Preferred Certifications

• CCNP Enterprise or Security
• CCIE
• Cisco security or Firepower certification
• F5-CA or F5-CTS
• Fortinet certification

Additional Information

CES offers a competitive salary commensurate with experience, plus a performance bonus, profit‑sharing, a Medical Savings Account, comprehensive health insurance, disability and life insurance, 401(k) matching, and tuition reimbursement.

Beyond the package, here’s what you can expect at CES:

• Meaningful responsibility and the opportunity to make a real impact in dynamic energy markets.
• The chance to learn from and collaborate with experienced professionals across global teams.
• Ongoing opportunities to strengthen your technical, analytical, and leadership skills.
• A supportive culture that values initiative, accountability, and continuous professional growth.

Customized Energy Solutions provides equal employment opportunities to all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Customized Energy Solutions provides equal employment opportunities to all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.