Senior Network Engineer

Sierra Central Credit Union; Yuba City (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

Sierra Central Credit Union is seeking a Senior Network Engineer to design, implement, and optimize our enterprise network across data centers, branch sites, and cloud environments. You will build resilient architectures, configure firewalls, routers, switches, and wireless access points, and ensure secure, high-performance connectivity.

You will lead multi-site projects, manage BGP/OSPF/EIGRP routing, IPsec/SSL VPNs, and QoS for voice/video, while driving automation with Python/Ansible and

Qualifications

• Experience designing enterprise networks across data centers, branches, and cloud environments.
• Strong administration of firewalls, VPNs, WAN routing protocols, and security best practices.
• Proven ability to lead multi-site projects and mentor junior staff.

Responsibilities

• Architecture & Design: Build resilient network architectures (campus, WAN/SD-WAN, data centers), segmentation, policy-based routing, and high-availability frameworks.
• Implementation & Ops: Configure/manage firewalls, routers, switches and wireless access points; handle BGP/OSPF/EIGRP routing, IPsec/SSL VPNs, DNS/DHCP/NAT/QoS.
• Telephony: Manage VoIP technologies, SIP signaling, RTP streams; leverage CCaaS/UCaaS platforms for voice and collaboration with QoS for voice traffic.
• Troubleshooting & Monitoring: Diagnose L2/L3, VPN, SD-WAN, wireless, and performance issues; lead incident response and post-mortems.
• Automation & Documentation: Use Python/Ansible/Git for config automation; maintain diagrams, runbooks, inventories, and change records.
• Security & Compliance: Manage ACLs, IPS/IDS, firewalls, NAT, zero-trust segmentation; enforce secure defaults and logging; act as Network SME in third-party assessments.
• Leadership: Lead multi-site tech projects and mentor junior staff.

Skills

Network design

Firewall administration

VoIP & UCaaS

Scripting (Python/Ansible)

Project leadership

Tools

BGP/OSPF/EIGRP

VPNs & NAT

SD-WAN

Next-Gen Firewalls

WAPs / Wireless

QoS

SBCs

DNS/DHCP

Job description

Under the supervision of the IT Manager, the Senior Network Engineer is responsible for the design, implementation, configuration, and optimization of our enterprise network infrastructure across data centers, branch sites, and cloud environments. Ideal candidates will have deep experience with nextgen firewalls, routers, switches, Wireless Access Points, plus a strong command of WAN routing protocols, SD-WAN, IDS/IPS, VPNs, and Firewall ACLs.

Essential Functions

• Architecture & Design: Build resilient network architectures (campus, WAN/SD-WAN, data centers), segmentation, policy-based routing, and high-availability frameworks.
• Implementation & Ops: Configure/manage firewalls, routers, switches and wireless access points; handle BGP/OSPF/EIGRP routing, IPsec/SSL VPNs, DNS/DHCP/NAT/QoS.
• Telephony: Proven experience with enterprise telephony systems and VoIP technologies, including SIP signaling, RTP media streams, and troubleshooting voice protocols. Strong knowledge of CCaaS (Contact Center as a Service) and UCaaS (Unified Communications as a Service) platforms for voice, video, and collaboration. Expertise in QoS configuration for voice traffic, Session Border Controllers (SBCs), and VoIP security best practices to ensure reliable and secure communications across complex network environments.
• Troubleshooting & Monitoring: Diagnose L2/L3, VPN, SD-WAN, wireless, and performance issues; lead incident response and post-mortems.
• Automation & Documentation: Use Python/Ansible/Git for config automation; maintain diagrams, runbooks, inventories, and change records.
• Security & Compliance: Manage ACLs, IPS/IDS, firewalls, NAT, zero-trust segmentation; enforce secure defaults and logging. Participate as the Network Subject Matter Expert in annual third party
• Leadership: Lead multi-site tech projects and mentor junior staff.