Senior Network Engineer

Teal Drones; Salt Lake City (UT); On-site; USD 120,000 - 180,000; Full time

Job summary

Teal Drones in Salt Lake City is seeking a Senior Network Engineer to design, secure, operate, and improve the company’s enterprise network across offices, data centers, and cloud environments.

This hands‑on role owns network architecture, availability, performance, security, and lifecycle management, standardizing Fortinet, Cisco Meraki, Zscaler, and Microsoft Azure networking while guiding incident resolution.

Qualifications

• Must qualify as a U.S. Person under export-control laws.
• Bachelor’s degree in Computer Science, IT, Engineering, or related field.
• At least 8 years of progressive enterprise network engineering experience; 3+ in senior roles.
• Advanced knowledge of TCP/IP, routing, switching, VLANs, DNS, NAT, VPNs, and network segmentation.
• Strong hands-on experience with Fortinet, Meraki, 802.1X, and enterprise Wi‑Fi.
• Experience with Azure hybrid connectivity, site-to-site VPNs, and Zscaler or similar.
• Ability to diagnose complex network issues and document solutions; cross‑platform support.

Responsibilities

• Design, implement, and maintain enterprise LAN/WAN/WLAN, SD-WAN, VPN, and cloud networking.
• Configure switching, VLANs, STP, LAG, port security, QoS, and uplink resiliency.
• Administer Fortinet firewalls with policies, VPNs, logging, and high availability.
• Support Aruba Meraki switching/wireless networks with standardized SSIDs and 802.1X.
• Implement Zscaler-based secure connectivity and zero-trust networking principles.
• Design resilient site-to-site connectivity between locations and Azure/cloud services.

Skills

Network engineering

Leadership

Troubleshooting

Education

Bachelor’s degree in Computer Science / Information Technology / Engineering

Tools

Fortinet firewalls

Cisco Meraki

Zscaler

Microsoft Azure networking

Job description

Position Summary

The Senior Network Engineer designs, secures, operates, and improves the company’s enterprise network infrastructure across distributed offices, on-premises systems, and cloud environments. This hands‑on role owns network architecture, availability, performance, security, documentation, and lifecycle management.

The position will lead the standardization and modernization of Fortinet, Cisco Meraki, Zscaler, and Microsoft Azure networking while serving as the senior escalation point for complex network incidents. Success requires strong technical ownership, effective cross‑functional collaboration, and a focus on delivering secure, resilient, and consistent connectivity across the enterprise.

Essential Duties And Responsibilities

Network Engineering and Administration

• Design, implement, and maintain enterprise LAN, WAN, WLAN, SD-WAN, VPN, Internet-edge, and cloud network services.
• Configure and optimize enterprise switching, including VLANs, trunks, Spanning Tree Protocol, link aggregation, port security, Quality of Service, and resilient uplinks.
• Administer Fortinet firewalls, including routing, NAT, security policies, VPNs, logging, high availability, and configuration standards.
• Design and support Cisco Meraki switching and wireless networks, including standardized SSIDs, RF settings, roaming, and WPA2/WPA3-Enterprise authentication.
• Implement and maintain Zscaler-based secure connectivity, network segmentation, identity‑aware access policies, and zero‑trust networking principles.
• Design resilient connectivity between company locations, on‑premises infrastructure, Microsoft Azure, and other cloud services, including site‑to‑site VPNs and ISP failover.

Operations, Security, and Reliability

• Serve as the senior escalation point for complex network, firewall, wireless, VPN, ISP, DNS, DHCP, and cloud‑connectivity incidents.
• Troubleshoot issues using packet captures, traffic analysis, logs, routing data, wireless metrics, and structured root‑cause analysis.
• Deploy and maintain network monitoring, scanning, discovery, configuration‑management, and performance‑analysis capabilities.
• Plan and execute network upgrades, hardware refreshes, migrations, maintenance, and cutovers using documented testing and rollback procedures.
• Partner with Cybersecurity to remediate vulnerabilities, obsolete configurations, excessive access, unsupported firmware, and unnecessary firewall rules.

Documentation and Leadership

• Maintain network diagrams, enterprise topologies, IP address management, VLAN records, port maps, circuit inventories, firewall rules, VPN documentation, and configuration standards.
• Manage incidents, problems, and changes through Jira and Jira Service Management, and maintain technical standards and procedures in Confluence.
• Lead technical design reviews, coordinate vendors and carriers, mentor technical staff, and identify opportunities to improve resilience, standardization, and automation.

Required Qualifications

• Must qualify as a U.S. Person under applicable U.S. export‑control laws and regulations.
• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field, or an equivalent combination of education, certifications, and experience.
• At least 8 years of progressive enterprise network engineering experience, including at least 3 years in a senior, lead, or Tier 3 engineering role.
• Advanced knowledge of TCP/IP, IPv4 subnetting, routing, switching, VLANs, trunking, Spanning Tree Protocol, link aggregation, DNS, DHCP, NAT, VPNs, and network segmentation.
• Strong hands‑on experience with Fortinet firewalls, Cisco Meraki switching and wireless infrastructure, enterprise Wi‑Fi, RF troubleshooting, and 802.1X authentication.
• Experience implementing Azure hybrid connectivity, site‑to‑site VPNs, redundant ISP services, and Zscaler or a comparable SASE or zero‑trust platform.
• Demonstrated ability to diagnose complex network issues, maintain accurate technical documentation, and support Windows, macOS, and Linux environments.
• Experience leading network projects and changes, managing critical incidents, and communicating technical risks and recommendations to technical and nontechnical stakeholders.

Desired Additional Qualifications

• Cisco CCNP, Cisco Meraki, Fortinet, Zscaler, or Microsoft Azure networking certification.
• Experience with advanced Azure networking, AWS networking, ExpressRoute, Virtual WAN, Transit Gateway, or Direct Connect.
• Experience supporting Microsoft GCC High, Microsoft Commercial, or environments governed by CMMC, NIST SP 800-171, or ITAR requirements.
• Familiarity with Active Directory, Microsoft Entra ID, RADIUS, Microsoft NPS, Cisco ISE, certificate‑based authentication, and network access control.
• Experience automating network administration using Python, PowerShell, or APIs.
• Experience with FortiManager, FortiAnalyzer, SolarWinds, PRTG, LogicMonitor, NetBox, Infoblox, or comparable monitoring and IP address management platforms.