Senior Network Engineer

Sierra Central Credit Union; Yuba City (CA); On-site; USD 120,000 - 138,000; Full time

Benefits offered by this job

Medical, Dental & Vision

401(k) retirement plan

Paid time off

Life insurance

Travel reimbursement

Job summary

Sierra Central Credit Union in Yuba City, CA seeks a Senior Network Engineer to design, implement, and optimize our enterprise network across data centers, branches, and cloud environments. You will work under the IT Manager to build resilient architectures and enforce security best practices.

Candidates should have hands-on experience with next‑gen firewalls, VPNs, SD‑WAN, routing protocols (BGP/OSPF/EIGRP), QoS, and network automation using Python/Ansible.

Qualifications

• Bachelor's degree in CS/IT or related field.
• 7+ years of network engineering in a complex enterprise.
• Certs such as CCNP Enterprise/Security, NSE-4+, CISSP or Security+ preferred.
• Experience with Cisco Firepower, FortiGate, Arista, and SD-WAN.
• Proficiency in VPNs, ZTNA, IPS/IDS, firewall ACLs, and cloud networking.

Responsibilities

• Architecture & Design: Build resilient network architectures across campuses, WAN/SD-WAN, and data centers.
• Implementation & Ops: Configure/manage firewalls, routers, switches, and wireless APs; handle BGP/OSPF/EIGRP, IPsec/SSL VPNs, DNS/DHCP/NAT/QoS.
• Telephony: Experience with enterprise telephony, VoIP, SBCs, and UCaaS/SaaS platforms.
• Troubleshooting & Monitoring: Diagnose L2/L3, VPN, SD-WAN, wireless and performance issues; lead incident response.
• Automation & Documentation: Use Python/Ansible/Git for config automation; maintain diagrams, runbooks, inventories, change records.
• Security & Compliance: Manage ACLs, IPS/IDS, firewalls, NAT; enforce zero-trust segmentation; ensure secure defaults and logging.

Skills

Communication skills

Organization skills

Networking protocols

Dynamic routing (BGP/OSPF/EIGRP)

Zero Trust / SASE knowledge

Wireshark packet analysis

Scripting: Python/Ansible/PowerShell

Education

Bachelor’s degree in Computer Science or IT

Tools

Cisco Firepower

FortiGate

Arista EOS

VeloCloud SD-WAN

Meraki MR/MX/MS

NetFlow

DPI

IPS/IDS

SBCs

AWS/Azure/GCP networking

Job description

Summary

Under the supervision of the IT Manager, the Senior Network Engineer is responsible for the design, implementation, configuration, and optimization of our enterprise network infrastructure across data centers, branch sites, and cloud environments. Ideal candidates will have deep experience with nextgen firewalls, routers, switches, Wireless Access Points, plus a strong command of WAN routing protocols, SD-WAN, IDS/IPS, VPNs, and Firewall ACLs.

Description

Under the supervision of the IT Manager, the Senior Network Engineer is responsible for the design, implementation, configuration, and optimization of our enterprise network infrastructure across data centers, branch sites, and cloud environments. Ideal candidates will have deep experience with nextgen firewalls, routers, switches, Wireless Access Points, plus a strong command of WAN routing protocols, SD-WAN, IDS/IPS, VPNs, and Firewall ACLs.

Essential Functions

• Architecture & Design: Build resilient network architectures (campus, WAN/SD-WAN, data centers), segmentation, policy-based routing, and high-availability frameworks.
• Implementation & Ops: Configure/manage firewalls, routers, switches and wireless access points; handle BGP/OSPF/EIGRP routing, IPsec/SSL VPNs, DNS/DHCP/NAT/QoS.
• Telephony: Proven experience with enterprise telephony systems and VoIP technologies, including SIP signaling, RTP media streams, and troubleshooting voice protocols. Strong knowledge of CCaaS (Contact Center as a Service) and UCaaS (Unified Communications as a Service) platforms for voice, video, and collaboration. Expertise in QoS configuration for voice traffic, Session Border Controllers (SBCs), and VoIP security best practices to ensure reliable and secure communications across complex network environments.
• Troubleshooting & Monitoring: Diagnose L2/L3, VPN, SD-WAN, wireless, and performance issues; lead incident response and post-mortems.
• Automation & Documentation: Use Python/Ansible/Git for config automation; maintain diagrams, runbooks, inventories, and change records.
• Security & Compliance: Manage ACLs, IPS/IDS, firewalls, NAT, zero-trust segmentation; enforce secure defaults and logging. Participate as the Network Subject Matter Expert in annual third party
• Leadership: Lead multi-site tech projects and mentor junior staff.

Requirements

Required Skills and Abilities

• Excellent communication and stakeholder engagement skills.
• Excellent organizational skills and attention to detail.
• Strong knowledge of networking protocols and services, including TCP/IP, VLANs, STP, routing, NAT, QoS, DHCP, and DNS.
• Ability to configure and optimize dynamic routing protocols such as BGP, OSPF, and EIGRP.
• Understanding of Zero Trust security models, SASE frameworks, RF optimization techniques, and wireless network design principles.
• Advanced troubleshooting and packet analysis skills using tools like Wireshark.
• Proficiency in scripting, change management, automation, and monitoring tools using Python, Ansible, and PowerShell.

Education And Experience

• Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent experience).
• 7+ years of experience in network engineering in a complex enterprise environment.
• Industry-recognized certifications such as CCNP Enterprise/Security, NSE-4+, ACE-A/ACE-L, VCTA-NV/VCP-NV, CMNA, CISSP, or Security+ (preferred).
• Proficiency with Cisco Firepower, FortiGate, Arista EOS, VeloCloud SD-WAN, HPE Instant On, Meraki MR/MX/MS platforms.
• Extensive experience with network protocols and services, including TCP/IP, VLANs, STP, routing, NAT, QoS, DHCP, and DNS.
• Extensive experience configuring and optimizing dynamic routing protocols, including BGP, OSPF, and EIGRP where applicable.
• Extensive VPN, ZTNA, and Firewall ACL experience.
• Experience managing and configuring NextGen firewalls, NetFlow, Deep Packet Inspection (DPI), Intrusion Prevention/Detection Systems (IPS/IDS), and Access Control Lists (ACLs).
• Experience in cloud networking (AWS/Azure/GCP).

Physical Requirements And Work Environment

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential function of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Prolonged periods of sitting at a desk and working on a computer – 7 to 8 hours per day.
• Light lifting, carrying, pushing and/or pulling objects up to 25 lbs.
• Intermittent walking, bending, twisting and stooping when racking hardware or performing cable management.
• General office environment: works generally at a desk in a well-lighted, air-conditioned cubicle/office, with moderate noise levels.
• Constant keyboarding, fine hand manipulation, overhead reaching for cabling.
• Data center access, occasional exposure to raised floors, server noise, and limited hot/cold zones.
• Occasional travel to branches or data centers, up to 10%.

Work Location

This is an on-site position at our Corporate Headquarters in Yuba City, CA. Remote work is not available for this role.

Compensation Range

The company anticipates offering an annual salary range between $120,000 to $138,000 for this position at the time of hire. This range includes base salary and does not include possible overtime for non-exempt employees or any applicable performance-based incentives or commissions.

Annual Merit Increase

Employees are eligible for a discretionary yearly merit-based salary adjustment, based on individual performance and company results.

Comprehensive Benefits Package

We provide a robust benefits package designed to support your health, financial security, and work-life balance including:

• Medical, Dental & Vision Insurance options
• Voluntary Lines including hospital indemnity, accident, and critical illness policies
• Company Paid HRA (with enrollment in certain health plans)
• Company Paid Basic Term Life Insurance
  • Coverage at 2× annual base salary, up to a maximum of $500,000 for full-time employees
  • $25,000 for part-time employees
• Company Paid Long-Term Disability Insurance for Full-Time Employees
• Company Paid Telehealth Services Membership (Teladoc)
• Company Paid Employee Assistance Program (EAP)
• 401(k) Retirement Plan
  • Employer-funded safe harbor contribution of 3% of employee's eligible earnings
  • Discretionary employer match on employee contributions
• Flexible Spending Accounts
  • HSA
  • Medical FSA
  • Dependent Care FSA
  • Limited Purpose FSA
• Paid Time Off
  • Vacation accruals based on status and tenure within company
  • 12 sick days accrued annually for full-time employees
  • 1 hour for every 30 hours worked for part-time employees
  • 11 paid holidays (eligible after 90 days of employment)
• Travel Expense Reimbursement
  • All necessary and work-related travel expenses will be reimbursed in accordance with company policy

The preceding list of duties does not include all tasks and responsibilities that may be required with this position. Additional tasks may be assigned, as departmental and operational needs require.