Senior Network Engineer

Sonny's Enterprises Inc. - Conveyorized Car Wash Equipment Leader; Town of Florida (NY); On-site; USD 120,000 - 160,000; Full time

Job summary

Sonny's Enterprises Inc. is seeking a Senior Network Engineer to own the reliability, security, and lifecycle maintenance of the corporate network across offices, manufacturing, and field locations.

The role requires hands-on design, implementation, and monitoring of LAN/WAN, VPNs, SD-WAN, and cloud connectivity with Azure and other cloud services. The engineer partners with Cybersecurity, Platform Engineering, and application teams to ensure secure connectivity and robust operation.

Qualifications

• Strong hands-on knowledge of core networking fundamentals and security.
• Experience with enterprise firewalls, switches, and SD-WAN or cellular connectivity.
• Working knowledge of Azure/AWS networking and hybrid connectivity.
• Experience with change management, incident response, and lifecycle maintenance.

Responsibilities

• Own reliability, security, and continuous improvement of the company network across offices, manufacturing, and field locations.
• Design, implement, monitor, and maintain LAN/WAN, wireless, VPNs, and site connectivity services.
• Manage firewall policies, ACLs, DNS filtering, and secure remote access with least privilege controls.
• Coordinate cloud networking across Azure/AWS and hybrid environments; troubleshoot cloud networking issues.
• Lead incident response, post-change documentation, and root-cause analysis for network events.
• Automate repeatable tasks using PowerShell, Python, and network automation tools.

Skills

TCP/IP

Routing

Switching

VLANs

Wireless

DHCP

DNS

VPN

Firewalls

Segmentation

Monitoring

Troubleshooting

Tools

PowerShell

Python

APIs

Automation tools

Job description

The Senior Network Engineer owns the reliability, security, supportability, and continuous improvement of the company network across corporate offices, manufacturing and field locations, internet services, remote access, and cloud environments. The role is hands-on and responsible for network design, implementation, monitoring, lifecycle maintenance, incident response, vendor coordination, documentation, and secure connectivity to Azure and other cloud services. The position partners closely with Global Platform Engineering, Cybersecurity, Technology Operations, application teams, and business stakeholders.

Responsibilities

• Enterprise Network Engineering and Operations
• Design, implement, configure, support, and optimize LAN, WAN, wireless, internet, SD-WAN, routing, switching, DHCP, DNS, NAT, and site connectivity services.
• Administer and maintain firewalls, network switches, wireless access points, cellular or Cradlepoint connectivity, VPN services, and related network appliances.
• Plan and execute firmware, operating system, configuration, certificate, and hardware lifecycle maintenance using approved change practices.
• Monitor availability, performance, capacity, configuration health, and security events; investigate alerts and remediate conditions before they become business-impacting incidents.
• Maintain resilient connectivity for offices, manufacturing, customer-facing services, remote users, and critical business systems.
• Network Security and Access
• Design, review, implement, and document firewall policies, access control lists, segmentation, secure remote access, site-to-site VPNs, and network security standards.
• Process and validate VPN access, firewall exception, DNS filtering, corporate domains, customer domain, and connectivity requests with appropriate approvals and least privilege controls.
• Partners with Cybersecurity on network threat response, vulnerability remediation, logging, monitoring, privileged access, configuration standards, and audit evidence.
• Investigate connectivity, authentication, certificate, and policy issues across users, devices, applications, locations, and cloud services.
• Cloud Networking and Hybrid Infrastructure
• Design and support Azure/AWS virtual networks, subnets, route tables, network security groups, private endpoints, DNS, peering, hub-and-spoke patterns, VPN or private connectivity, and hybrid network services.
• Coordinate cloud network changes with Global Platform Engineering, application teams, and security teams to ensure availability, supportability, and controlled access.
• Support Azure Front Door or comparable edge services, external DNS, Cloudflare, domain registrars, and customer-facing domain mappings within assigned ownership.
• Troubleshoot Azure/AWS networking, access-list, name-resolution, service endpoint, and hybrid connectivity issues using structured diagnostics.
• Incident, Change, and Problem Management
• Lead or support restoration for network outages and performance events, including stakeholder updates, vendor escalation, service validation, and after-action documentation.
• Create implementation plans, risk assessments, validation steps, rollback plans, and post-change evidence for network changes.
• Perform root-cause analysis for recurring or high-impact network incidents and drive corrective actions through completion.
• Participate in an on-call rotation and planned after-hours maintenance as required.
• Documentation, Automation, and Lifecycle Planning
• Maintain accurate network diagrams, inventories, IP address documentation, circuit records, configurations, standards, runbooks, support procedures, and vendor contacts.
• Automate repeatable network tasks, configuration validation, reporting, backups, or compliance checks using PowerShell, Python, APIs, or network automation tools where appropriate.
• Manage ISP and carrier relationships, circuit inventory, outage coordination, renewals, implementation schedules, and escalation paths.
• Plan refreshes, capacity improvements, cost savings, standards, spares, licensing, and technical debt remediation based on risk and business need.
• Project and Cross-Functional Delivery
• Provide network engineering for new sites, site moves, acquisitions, manufacturing or IoT deployments, application migrations, cloud projects, and infrastructure modernization.
• Gather requirements, develop designs and estimate, coordinate implementation, test end-to-end connectivity, and transition solutions into support.
• Communicate technical constraints, risks, dependencies, and recommendations to technical and non-technical stakeholders.

Qualifications

Required Skills & Qualifications

• General
• Communicates clearly, succinctly, and professionally with technical and non-technical audiences.
• Service Takes accountability for outcomes, follows through, and keeps stakeholders informed until work is complete.
• Critical Uses evidence, structured troubleshooting, and sound judgment to identify root causes and select effective solutions.
• Works productively across teams, shares knowledge, accepts feedback, and raises issues that limit service effectiveness.
• Balances incidents, requests, recurring operations, and project commitments against business impact and agreed service levels.
• Continuous Looks for repeatable work that can be documented, standardized, automated, or shifted to the appropriate support level.
• Technical Skills
• Strong hands-on knowledge of TCP/IP, routing, switching, VLANs, wireless, DHCP, DNS, NAT, VPN, firewalls, segmentation, network monitoring, and troubleshooting.
• Experience administering enterprise firewalls, switches, wireless platforms, SD-WAN or cellular connectivity, and network management tools.
• Working knowledge of Azure, AWS networking including VNets, subnets, NSGs, route tables, DNS, peering, private endpoints, hybrid connectivity, and edge services.
• Experience with network change management, incident response, root-cause analysis, diagrams, configuration standards, and lifecycle maintenance.
• Scripting or automation experience using PowerShell, Python, APIs, infrastructure as code, or network automation frameworks.
• Ability to travel to company