Senior Network Engineer

TEAL DRONES INC; Salt Lake City (UT); On-site; USD 120,000 - 160,000; Full time

Job summary

TEAL DRONES INC. is seeking a Senior Network Engineer to design, secure, operate, and optimize the company’s enterprise network across distributed offices, on-premises infrastructure, and cloud environments.

You will own network architecture, availability, performance, security, and lifecycle management, lead standardization of Fortinet, Cisco Meraki, Zscaler, and Microsoft Azure networking, and serve as the senior escalation point for complex incidents.

Qualifications

• 8+ years progressive enterprise network engineering experience, incl. senior/lead roles.
• Experience with Fortinet, Meraki, and Azure networking.

Responsibilities

• Design, implement, and maintain enterprise LAN, WAN, WLAN, SD-WAN, VPN, Internet-edge, and cloud network services.
• Configure and optimize switching: VLANs, trunks, STP, link aggregation, port security, QoS, uplinks.
• Administer Fortinet firewalls: routing, NAT, security policies, VPNs, logging, high availability.
• Design/Support Cisco Meraki switching and wireless networks: SSIDs, RF settings, roaming, 802.1X.
• Implement/maintain Zscaler-based secure connectivity and zero-trust networking.
• Design connectivity between locations, on-premises, Azure, and cloud services; site-to-site VPNs, ISP failover.
• Senior escalation point for network incidents; troubleshoot via captures, logs, metrics; root-cause analysis.
• Deploy/maintain network monitoring, discovery, configuration-management, performance-analysis.
• Plan upgrades, hardware refreshes, migrations, cutovers with tests/rollbacks.
• Partner with Cybersecurity to remediate vulnerabilities and optimize firewall rules.
• Maintain diagrams, IPAM, VLAN records, firewall rules, VPN docs; Jira/Confluence standards.
• Lead technical design reviews, coordinate vendors, mentor staff, improve resilience/automation.

Skills

TCP/IP

IPv4 subnetting

Routing

Switching

VLANs

Spanning Tree Protocol

Link aggregation

DNS

DHCP

NAT

VPNs

Network segmentation

Fortinet firewalls

Cisco Meraki (switching and wireless)

802.1X authentication

Azure networking

Zscaler / SASE

Zero-trust networking

Documentation

Jira Service Management

Confluence

Leadership / mentoring

Education

Bachelor’s degree in Computer Science, Information Technology, Engineering, or related field

Tools

Fortinet FortiGate

Cisco Meraki

Zscaler

Azure Networking

FortiManager

FortiAnalyzer

SolarWinds

PRTG

LogicMonitor

NetBox

Infoblox

Jira Service Management

Confluence

Active Directory

Microsoft Entra ID

Job description

Senior Network EngineerPosition SummaryThe Senior Network Engineer designs, secures, operates, and improves the company’s enterprise network infrastructure across distributed offices, on-premises systems, and cloud environments. This hands-on role owns network architecture, availability, performance, security, documentation, and lifecycle management.The position will lead the standardization and modernization of Fortinet, Cisco Meraki, Zscaler, and Microsoft Azure networking while serving as the senior escalation point for complex network incidents. Success requires strong technical ownership, effective cross-functional collaboration, and a focus on delivering secure, resilient, and consistent connectivity across the enterprise.Essential Duties and ResponsibilitiesNetwork Engineering and AdministrationDesign, implement, and maintain enterprise LAN, WAN, WLAN, SD-WAN, VPN, Internet-edge, and cloud network services.Configure and optimize enterprise switching, including VLANs, trunks, Spanning Tree Protocol, link aggregation, port security, Quality of Service, and resilient uplinks.Administer Fortinet firewalls, including routing, NAT, security policies, VPNs, logging, high availability, and configuration standards.Design and support Cisco Meraki switching and wireless networks, including standardized SSIDs, RF settings, roaming, and WPA2/WPA3-Enterprise authentication.Implement and maintain Zscaler-based secure connectivity, network segmentation, identity-aware access policies, and zero-trust networking principles.Design resilient connectivity between company locations, on-premises infrastructure, Microsoft Azure, and other cloud services, including site-to-site VPNs and ISP failover.Operations, Security, and ReliabilityServe as the senior escalation point for complex network, firewall, wireless, VPN, ISP, DNS, DHCP, and cloud-connectivity incidents.Troubleshoot issues using packet captures, traffic analysis, logs, routing data, wireless metrics, and structured root-cause analysis.Deploy and maintain network monitoring, scanning, discovery, configuration-management, and performance-analysis capabilities.Plan and execute network upgrades, hardware refreshes, migrations, maintenance, and cutovers using documented testing and rollback procedures.Partner with Cybersecurity to remediate vulnerabilities, obsolete configurations, excessive access, unsupported firmware, and unnecessary firewall rules.Documentation and LeadershipMaintain network diagrams, enterprise topologies, IP address management, VLAN records, port maps, circuit inventories, firewall rules, VPN documentation, and configuration standards.Manage incidents, problems, and changes through Jira and Jira Service Management, and maintain technical standards and procedures in Confluence.Lead technical design reviews, coordinate vendors and carriers, mentor technical staff, and identify opportunities to improve resilience, standardization, and automation.Required QualificationsMust qualify as a U.S. Person under applicable U.S. export-control laws and regulations.Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field, or an equivalent combination of education, certifications, and experience.At least 8 years of progressive enterprise network engineering experience, including at least 3 years in a senior, lead, or Tier 3 engineering role.Advanced knowledge of TCP/IP, IPv4 subnetting, routing, switching, VLANs, trunking, Spanning Tree Protocol, link aggregation, DNS, DHCP, NAT, VPNs, and network segmentation.Strong hands-on experience with Fortinet firewalls, Cisco Meraki switching and wireless infrastructure, enterprise Wi-Fi, RF troubleshooting, and 802.1X authentication.Experience implementing Azure hybrid connectivity, site-to-site VPNs, redundant ISP services, and Zscaler or a comparable SASE or zero-trust platform.Demonstrated ability to diagnose complex network issues, maintain accurate technical documentation, and support Windows, macOS, and Linux environments.Experience leading network projects and changes, managing critical incidents, and communicating technical risks and recommendations to technical and nontechnical stakeholders.Desired Additional QualificationsCisco CCNP, Cisco Meraki, Fortinet, Zscaler, or Microsoft Azure networking certification.Experience with advanced Azure networking, AWS networking, ExpressRoute, Virtual WAN, Transit Gateway, or Direct Connect.Experience supporting Microsoft GCC High, Microsoft Commercial, or environments governed by CMMC, NIST SP 800-171, or ITAR requirements.Familiarity with Active Directory, Microsoft Entra ID, RADIUS, Microsoft NPS, Cisco ISE, certificate-based authentication, and network access control.Experience automating network administration using Python, PowerShell, or APIs.Experience with FortiManager, FortiAnalyzer, SolarWinds, PRTG, LogicMonitor, NetBox, Infoblox, or comparable monitoring and IP address management platforms.