Senior Network Engineer

Sonny's Enterprises; Town of Florida (NY); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Employer-paid medical plan

401(k) match

Job summary

Sonny’s Enterprises is seeking a Senior Network Engineer to own the reliability, security, and continuous improvement of our company network across offices, manufacturing sites, and cloud environments. The role is hands-on, with design, implementation, monitoring, incident response, and documentation responsibilities.

You will collaborate with Cybersecurity, Technology Operations, and application teams to ensure secure connectivity to Azure and other cloud services, while supporting on-call

Qualifications

• Strong hands-on knowledge of TCP/IP, routing, switching, VLANs, wireless, DHCP, DNS, NAT, VPN, firewalls, segmentation, network monitoring, and troubleshooting.
• Experience administering enterprise firewalls, switches, wireless platforms, SD-WAN or cellular connectivity, and network management tools.
• Working knowledge of Azure, AWS networking including VNets, subnets, NSGs, route tables, DNS, peering, private endpoints, hybrid connectivity, and edge services.
• Experience with network change management, incident response, root-cause analysis, diagrams, configuration standards, and lifecycle maintenance.

Responsibilities

• Enterprise Network Engineering and Operations

Skills

TCP/IP

Routing & Switching

Firewall management

Azure/AWS networking

Scripting - PowerShell/Python

On-call support

Education

Bachelor’s degree in IT, CS, Engineering

Tools

DNS/DHCP

Network monitoring tools

Job description

Overview

The Senior Network Engineer owns the reliability, security, supportability, and continuous improvement of the company network across corporate offices, manufacturing and field locations, internet services, remote access, and cloud environments. The role is hands-on and responsible for network design, implementation, monitoring, lifecycle maintenance, incident response, vendor coordination, documentation, and secure connectivity to Azure and other cloud services. The position partners closely with Global Platform Engineering, Cybersecurity, Technology Operations, application teams, and business stakeholders.

Responsibilities

• Enterprise Network Engineering and Operations
• Design, implement, configure, support, and optimize LAN, WAN, wireless, internet, SD-WAN, routing, switching, DHCP, DNS, NAT, and site connectivity services.
• Administer and maintain firewalls, network switches, wireless access points, cellular or Cradlepoint connectivity, VPN services, and related network appliances.
• Plan and execute firmware, operating system, configuration, certificate, and hardware lifecycle maintenance using approved change practices.
• Monitor availability, performance, capacity, configuration health, and security events; investigate alerts and remediate conditions before they become business-impacting incidents.
• Maintain resilient connectivity for offices, manufacturing, customer-facing services, remote users, and critical business systems.
• Network Security and Access
• Design, review, implement, and document firewall policies, access control lists, segmentation, secure remote access, site-to-site VPNs, and network security standards.
• Process and validate VPN access, firewall exception, DNS filtering, corporate domains, customer domain, and connectivity requests with appropriate approvals and least privilege controls.
• Partners with Cybersecurity on network threat response, vulnerability remediation, logging, monitoring, privileged access, configuration standards, and audit evidence.
• Investigate connectivity, authentication, certificate, and policy issues across users, devices, applications, locations, and cloud services.
• Cloud Networking and Hybrid Infrastructure
• Design and support Azure/AWS virtual networks, subnets, route tables, network security groups, private endpoints, DNS, peering, hub-and-spoke patterns, VPN or private connectivity, and hybrid network services.
• Coordinate cloud network changes with Global Platform Engineering, application teams, and security teams to ensure availability, supportability, and controlled access.
• Support Azure Front Door or comparable edge services, external DNS, Cloudflare, domain registrars, and customer-facing domain mappings within assigned ownership.
• Troubleshoot Azure/AWS networking, access-list, name-resolution, service endpoint, and hybrid connectivity issues using structured diagnostics.
• Incident, Change, and Problem Management
• Lead or support restoration for network outages and performance events, including stakeholder updates, vendor escalation, service validation, and after-action documentation.
• Create implementation plans, risk assessments, validation steps, rollback plans, and post-change evidence for network changes.
• Perform root-cause analysis for recurring or high-impact network incidents and drive corrective actions through completion.
• Participate in an on-call rotation and planned after-hours maintenance as required.
• Documentation, Automation, and Lifecycle Planning
• Maintain accurate network diagrams, inventories, IP address documentation, circuit records, configurations, standards, runbooks, support procedures, and vendor contacts.
• Automate repeatable network tasks, configuration validation, reporting, backups, or compliance checks using PowerShell, Python, APIs, or network automation tools where appropriate.
• Manage ISP and carrier relationships, circuit inventory, outage coordination, renewals, implementation schedules, and escalation paths.
• Plan refreshes, capacity improvements, cost savings, standards, spares, licensing, and technical debt remediation based on risk and business need.
• Project and Cross-Functional Delivery
• Provide network engineering for new sites, site moves, acquisitions, manufacturing or IoT deployments, application migrations, cloud projects, and infrastructure modernization.
• Gather requirements, develop designs and estimate, coordinate implementation, test end-to-end connectivity, and transition solutions into support.
• Communicate technical constraints, risks, dependencies, and recommendations to technical and non-technical stakeholders.

Qualifications

• General
• Communicates clearly, succinctly, and professionally with technical and non-technical audiences.
• Service Takes accountability for outcomes, follows through, and keeps stakeholders informed until work is complete.
• Critical Uses evidence, structured troubleshooting, and sound judgment to identify root causes and select effective solutions.
• Works productively across teams, shares knowledge, accepts feedback, and raises issues that limit service effectiveness.
• Balances incidents, requests, recurring operations, and project commitments against business impact and agreed service levels.
• Continuous Looks for repeatable work that can be documented, standardized, automated, or shifted to the appropriate support level.
• Technical Skills
• Strong hands-on knowledge of TCP/IP, routing, switching, VLANs, wireless, DHCP, DNS, NAT, VPN, firewalls, segmentation, network monitoring, and troubleshooting.
• Experience administering enterprise firewalls, switches, wireless platforms, SD-WAN or cellular connectivity, and network management tools.
• Working knowledge of Azure, AWS networking including VNets, subnets, NSGs, route tables, DNS, peering, private endpoints, hybrid connectivity, and edge services.
• Experience with network change management, incident response, root-cause analysis, diagrams, configuration standards, and lifecycle maintenance.
• Scripting or automation experience using PowerShell, Python, APIs, infrastructure as code, or network automation frameworks.
• Ability to travel to company locations and participate in on-call or after-hours work.

Education Requirements

• Minimum 4 Year / Bachelors Degree
• Bachelor’s degree in information technology, Computer Science, Engineering, or related field, or equivalent experience.
• Preferred 4 Year / Bachelors Degree
• 5-8 years of progressive enterprise network engineering or network operations experience; candidates with strong mid-level experience and demonstrated senior-level capability may be considered.
• Experience supporting multi-site environments and cloud or hybrid network connectivity.

Years Of Experience

• CCNA, CCNP, Azure Network Engineer Associate, firewall vendor, security, or equivalent certifications.
• Experience with Cloudflare, Azure Front Door, AWS internet circuit management, manufacturing networks, IoT, or network observability platforms.

Working Conditions

Office-based and remote technology support environment. Regularly required to sit, stand, and move about office or facility locations. May require occasional travel and work outside normal business hours for incidents, maintenance, projects, or location support.

Company Information

Sonny's Enterprises is the world's largest manufacturer of conveyorized car wash equipment, parts, and supplies. We are the industry leader, recognized and awarded by the International Car Wash Association for innovating new technologies to advance the industry with products proudly designed and built in the USA. Our culture thrives on finding new and better ways to accelerate what’s next. We embrace change and the opportunity it produces to maximize the potential of our most valuable resource — our PEOPLE! We invite you to explore our opportunities and grow your career with us. We offer 100% employer paid medical plan. Other optional benefit programs are available to our employees and their families which include: 401(k) match, additional medical plans, dental, vision, flex spending account, short-term and long-term disability & life insurance coverage.

EEO Statement

Equal Opportunity Employer Sonny’s is proud to be an equal opportunity employer and is committed to maintaining a diverse and inclusive work environment. All qualified applicants will receive considerations for employment without regard to race, color, religion, sex, age, disability, marital status, familial status, sexual orientation, pregnancy, genetic information, gender identity, gender expression, national origin, ancestry, citizenship status, veteran status, and any other legally protected status under federal, state, or local anti-discrimination laws.