Senior Network Engineer

Business Data Links, Inc.; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

BDL (Business Data Links) is a managed service provider serving wholesale distributors using Eclipse ERP. The Network Engineer role covers Meraki and UniFi networks, firewalls, VPNs, datacenter health, virtualization, backup, and security across client sites.

You will work hands-on with the CEO and support team, including remote support, projects and occasional onsite visits. Responsibilities include daily network monitoring, VPN and firewall administration, switching and wireless management,

Qualifications

• 3+ years in network administration or engineering, ideally at an MSP or multi-site business.
• Strong hands-on Cisco Meraki experience (MX, MS, MR, Systems Manager), including VLANs, DHCP, AutoVPN, firewall and traffic-shaping rules, and alerting.
• Solid TCP/IP fundamentals: subnetting, routing, NAT, DNS, DHCP and its options, 802.1Q trunking.
• Experience supporting Cisco Secure Client (AnyConnect) remote access with SAML SSO through Microsoft Entra ID.
• Experience running Ubiquiti UniFi networks: controller, switches, APs and gateways.
• Experience with VMware ESXi and Microsoft Hyper-V, and with Dell server hardware.
• Comfort with Windows Server, Active Directory and basic Linux command-line work.
• Ability to diagnose problems methodically over the phone with non-technical users.
• Valid driver's license and reliable transportation for datacenter and branch visits.
• Able to lift and rack equipment up to 50 lb and run or patch cable.

Responsibilities

• Network operations and monitoring: run daily Meraki checks and respond to alerts.
• Troubleshoot internet, WiFi and LAN issues, guiding non-technical staff onsite as needed.
• Maintain Meraki firmware and alert settings to automate ticketing.
• Administer Cisco Meraki MX across branches: VLANs, DHCP, firewall rules, NAT and routing.
• Build and maintain Meraki AutoVPN between branches and Azure-based vMX tunnels.
• Configure Meraki NAT/port-forwarding for hosted services and vendor integrations.
• Remotely access Meraki with AnyConnect profiles and SAML authentication.
• Switching and wireless: design VLANs, track switches, manage phones and cameras on proper VLANs.
• Datacenter and virtualization: manage VMware ESXi, Hyper-V; Dell server hardware; LAX colocation health.
• Backup and DR: coordinate with third-party backups, run DR tests, manage Windows/Linux servers.
• Security: triage security detections and maintain internal monitoring agents.
• Projects and coordination: plan cutovers, migrations; coordinate with carriers and vendors.
• Documentation: log changes in Autotask and credential storage in IT Glue.

Skills

Network administration

Remote support

On-site visits

Documentation

Problem solving

Education

Certifications such as CCNA

Experience in MSP or multi-site environments

Tools

Cisco Meraki

Ubiquiti UniFi

VMware ESXi

Microsoft Hyper-V

Dell server hardware

iDRAC

Datto RMM

IT Glue

Autotask

Meraki dashboard

Azure (vMX)

Job description

BDL (Business Data Links) is a managed service provider supporting multi-branch wholesale distributors that run on the Eclipse ERP. Our clients operate branches, warehouses and will-call counters where the network carries point-of-sale, RF scanners, phones, printers and the Eclipse server, so an outage stops the business.

The Network Engineer owns the health of that infrastructure across every client: Meraki and UniFi networks at the branches, firewalls and VPNs, BDL's colocation datacenter, and the virtualization and backup platforms behind them. This is a hands-on role spanning remote support, project work and onsite visits, working directly with the CEO and the support team.

Key responsibilities

Network operations and monitoring

• Run the daily Meraki checks and work Meraki dashboard alerts (WAN down, bad internet connection, misconfigured DNS or IPv4, client IP conflicts) plus Datto RMM alerts, restoring service at the affected branch.
• Troubleshoot slow or failing internet, WiFi and LAN issues reported by branch staff, often guiding a non-technical person onsite as remote hands.
• Keep Meraki and UniFi firmware current, and tune Meraki alert settings so WAN and hardware issues open tickets automatically.

Firewalls, routing and VPN

• Administer Cisco Meraki MX appliances across client branches: VLANs, DHCP scopes and reservations, firewall rules, traffic shaping and uplink preferences, content filtering, licensing and organization structure.
• Build and maintain Meraki AutoVPN between branches, including Meraki vMX in Azure and its Azure route tables, and tunnels to UniFi gateways at smaller sites.
• Configure Meraki NAT and port-forwarding rules for hosted services (SFTP, web, vendor integrations such as Phocas, Unilog and Conexiom).
• Run remote access on Meraki: Cisco Secure Client (AnyConnect) profiles terminated on MX appliances, with Microsoft Entra ID SAML authentication, certificates and DNS failover. VPN access is the single most common ticket type.

Switching and wireless

• Design and configure VLANs, trunks and port profiles on UniFi and Meraki switches, and track down undocumented switches found in the field.
• Keep phones, payment terminals and security cameras on the right VLANs, with DHCP reservations and voice VLAN settings.
• Manage UniFi sites end to end: controller, APs, SSIDs, mesh settings, point-to-point bridges between buildings, and UniFi PDUs for remote power cycling.

Datacenter and virtualization

• Maintain BDL's LAX colocation: UPS monitoring, hardware health and WAN failover for hosted clients.
• Administer VMware ESXi and Microsoft Hyper-V hosts: port groups and virtual switches, snapshots, datastore capacity and VM builds.
• Manage Dell servers through iDRAC: firmware, BIOS, RAID and drive replacements.

Backup and disaster recovery

• Work with BDL's third-party backup provider on server backup status, failed jobs and the network access their service needs.
• Coordinate restores and DR tests with the provider, including isolated sandbox VLANs for testing restored Eclipse copies.
• Support Windows Server and Active Directory: domain controllers, Group Policy, drive mappings, DHCP and DNS.
• Perform Linux administration on RHEL Eclipse servers (including RHEL 9 migrations with Epicor) and Ubuntu utility VMs, including LVM volume capacity and SSH access.
• Verify Eclipse connectivity, Solar and Eterm, printing and RF guns after every network change.
• Manage endpoints through Datto RMM (jobs, components, monitoring policies, patch and software management), provision new PCs with ImmyBot, and manage company mobile phones in Meraki Systems Manager.

Security

• Triage Blackpoint Cyber, Datto EDR and AV, RocketCyber and SaaS Alerts detections, act on Microsoft 365 events (suspicious inbox rules, new MFA devices, impossible travel), and maintain internal network scan agents (Ubuntu VMs on Hyper-V) at client sites.

Projects and coordination

• Plan and execute branch cutovers, new site builds, ISP migrations and datacenter moves, usually after hours.
• Coordinate with carriers (TPx, Granite, AT&T, Spectrum and others), Meraki support, Kaseya, Dell, Epicor, and onsite cabling contractors.
• Document configurations, credentials and changes in IT Glue and log all work in Autotask.

Required qualifications

• 3+ years in network administration or engineering, ideally at an MSP or a multi-site business.
• Strong hands-on Cisco Meraki experience (MX, MS, MR, Systems Manager), including VLANs, DHCP, AutoVPN, firewall and traffic-shaping rules, and alerting.
• Solid TCP/IP fundamentals: subnetting, routing, NAT, DNS, DHCP and its options, 802.1Q trunking.
• Experience supporting Cisco Secure Client (AnyConnect) remote access with SAML single sign-on through Microsoft Entra ID.
• Experience running Ubiquiti UniFi networks: controller, switches, APs and gateways.
• Experience with VMware ESXi and Microsoft Hyper-V, and with Dell server hardware.
• Comfort with Windows Server, Active Directory and basic Linux command-line work.
• Ability to diagnose problems methodically over the phone with non-technical users.
• Valid driver's license and reliable transportation for datacenter and branch visits.
• Able to lift and rack equipment up to 50 lb and run or patch cable.

Preferred qualifications

• Certifications such as CCNA, Meraki CMNA or CompTIA Network+.
• Microsoft Azure networking, including Meraki vMX and Azure route tables.
• VoIP networking: voice VLANs, QoS, and working with phone vendors.
• Experience with backup and DR services such as Datto or Veeam.
• Exposure to RHEL and to the Eclipse ERP or other distribution systems.
• Familiarity with MDR/EDR platforms (Blackpoint, Datto EDR, RocketCyber) and Microsoft 365 administration.
• Experience using Autotask, Datto RMM, ImmyBot and IT Glue.

Tools and platforms:

Ticketing and documentation

Autotask, IT Glue

Network monitoring and alerting

Meraki dashboard alerts and daily checks, UniFi controller

Routing, firewall and SD-WAN

Cisco Meraki MX and AutoVPN, Meraki vMX in Azure, UniFi gateways

Switching and wireless

Ubiquiti UniFi switches, APs and point-to-point bridges, Meraki MS/MR

Virtualization and hardware

VMware ESXi, Microsoft Hyper-V, Dell iDRAC

Backup and DR

Third-party managed backup service

Operating systems

Windows Server, Active Directory and Group Policy, RHEL, Ubuntu

Security

Blackpoint Cyber, Datto EDR and AV, RocketCyber, SaaS Alerts, Microsoft 365 Defender, Sentinel One

Line of business

Epicor Eclipse, Solar and Eterm, RF scanners

Working style and conditions

• Clear, patient communication with branch managers, warehouse staff and client executives.
• Ownership of issues through to resolution, including chasing carriers and vendors until a circuit or device is restored.
• Disciplined documentation: every change noted in Autotask and every credential stored in IT Glue.
• Testing before closing: confirm phones, printing, Eclipse and scanners work after any change.
• After-hours cutovers and maintenance windows, plus participation in an on-call rotation for outages.

Location and work arrangement: Remote

Schedule and on-call: On call 8pm-8am EST once a month