Senior Network Engineer - 174423

Piper Companies; Frederick (MD); Hybrid; USD 140,000 - 160,000; Full time

Job summary

Piper Companies is seeking a Senior Network Engineer to join a thriving insurance company. This hybrid role requires onsite 3 days per week, with flexibility for remote work on other days.

You will lead network modernization, design scalable LAN/WAN, implement IaC and network automation, and provide Tier 3 escalation support. 7–10+ years of enterprise networking experience and Azure networking are preferred.

Qualifications

• 7–10+ years of enterprise networking experience.

Responsibilities

• Lead network modernization and transformation initiatives (cloud, SD-WAN, SASE, Zero Trust)
• Engineer scalable LAN/WAN and routing/switching environments
• Build and enhance network automation and Infrastructure-as-Code (IaC) capabilities
• Provide Tier 3 escalation support and perform complex root cause analysis (RCA)

Skills

Enterprise networking

Azure networking

Routing & switching

SD-WAN/SASE

Hybrid cloud connectivity

Infrastructure automation

Education

Bachelor's degree (preferred)

Tools

Azure networking

Ansible

Python

Job description

Piper Companies is looking for a Senior Network Engineer to join a thriving insurance company. This is a hybrid position and requires the candidate to be onsite 3 days a week.

Essential Duties of the Senior Network Engineer:

• Lead network modernization and transformation initiatives (cloud, SD-WAN, SASE, Zero Trust)
• Engineer scalable LAN/WAN and routing/switching environments
• Build and enhance network automation and Infrastructure-as-Code (IaC) capabilities
• Provide Tier 3 escalation support and perform complex root cause analysis (RCA)

Qualifications of the Senior Network Engineer:

• Bachelor's degree preferred but not required
• 7–10+ years of enterprise networking experience
• Hands-on experience with Azure networking and hybrid cloud connectivity
• Expertise in routing and switching, LAN/WAN design, and high availability environments
• Exposure to SD-WAN, SASE, or modern edge networking

Compensation for the Senior Network Engineer:

• $140,000 - $160,000 (based on experience)
• Comprehensive benefit package; Cigna Medical, Cigna Dental, Vision, 401k w/ ADP, PTO, paid holidays, sick Leave as required by law

This job opens for applications on 7/17/26. Applications for this job will be accepted for at least 30 days from the posting date

LAN, WAN, SD-WAN, Secure SD-WAN, Zero Trust, Zero Trust Architecture (ZTA), Zero Trust Network Access (ZTNA), Software-Defined Networking (SDN), Network Engineering, Enterprise Networking, Campus Network, Branch Networking, Core Network, Distribution Layer, Access Layer, Network Segmentation, Microsegmentation, Macro Segmentation, East-West Traffic, North-South Traffic, Network Access Control (NAC), Identity-Based Access Control, Least Privilege Access, Continuous Authentication, Adaptive Access, Context-Aware Access, Policy Enforcement Point (PEP), Policy Decision Point (PDP), Identity Provider (IdP), Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, Device Posture Assessment, Endpoint Compliance, Secure Access Service Edge (SASE), Security Service Edge (SSE), Cloud Access Security Broker (CASB), Secure Web Gateway (SWG), Firewall-as-a-Service (FWaaS), Remote Access VPN, Site-to-Site VPN, IPsec VPN, SSL VPN, GRE Tunnel, DMVPN, MPLS, MPLS VPN, BGP, OSPF, EIGRP, IS-IS, Static Routing, Dynamic Routing, Route Redistribution, Route Summarization, ECMP, Network Convergence, WAN Optimization, Path Selection, Application-Aware Routing, Traffic Steering, Link Aggregation, Load Balancing, Redundancy, High Availability (HA), Failover, Fast Reroute, QoS, Traffic Shaping, Traffic Policing, Packet Marking, DSCP, Class of Service (CoS), Latency, Jitter, Packet Loss, Throughput, Bandwidth Management, SLA Monitoring, Performance Monitoring, Network Telemetry, NetFlow, IPFIX, SNMP, Syslog, Network Analytics, Deep Packet Inspection (DPI), Packet Capture, Wireshark, Network Visibility, Application Visibility, Service Chaining, Overlay Network, Underlay Network, VXLAN, EVPN, MPLS Transport, Broadband Internet, DIA (Dedicated Internet Access), LTE Backup, 5G WAN, Hybrid WAN, Internet Breakout, Local Internet Breakout, Cloud Connectivity, Cloud On-Ramp, Multi-Cloud Networking, AWS Direct Connect, Azure ExpressRoute, Google Cloud Interconnect, Virtual WAN, Cloud WAN, SD-Branch, Branch Office Connectivity, Edge Computing, Edge Router, WAN Edge, Customer Premises Equipment (CPE), Universal CPE (uCPE), Virtual Network Function (VNF), Network Function Virtualization (NFV), Virtual Router, Virtual Firewall, DNS Security, Secure DNS, DHCP, DHCP Snooping, Dynamic ARP Inspection (DAI), IP Source Guard, ARP, TCP/IP, IPv4, IPv6, Dual Stack, NAT, PAT, DNS, NTP, VLAN, Private VLAN, Trunking, 802.1Q, STP, RSTP, MSTP, PortFast, EtherChannel, LACP, LLDP, CDP, Access Control List (ACL), Extended ACL, Prefix List, Route Map, Security Group, Trust Boundary, Network Policy, Segmentation Policy, Identity-Based Networking, Software-Defined Access (SDA), Cisco DNA Center, Network Automation, Infrastructure as Code (IaC), Ansible, Python Automation, REST API, NETCONF, RESTCONF, YANG Models, Intent-Based Networking (IBN), Network Orchestration, Configuration Management, Change Management, Network Assurance, Digital Experience Monitoring (DEM), Synthetic Monitoring, Real User Monitoring (RUM), Endpoint Security, Extended Detection and Response (XDR), Security Information and Event Management (SIEM), Security Orchestration Automation and Response (SOAR), Threat Intelligence, Threat Hunting, Risk Assessment, Compliance Monitoring, NIST 800-207, NIST Cybersecurity Framework, Defense in Depth, Cyber Resilience, Insider Threat Protection, Lateral Movement Prevention, Data Loss Prevention (DLP), Encryption in Transit, TLS, PKI, Certificate Management, Identity Governance, Privileged Access Management (PAM), Remote Workforce Security, Secure Remote Access, Enterprise Firewall, Next-Generation Firewall (NGFW), Unified Threat Management (UTM), Intrusion Detection System (IDS), Intrusion Prevention System (IPS), Secure Network Design, Network Hardening, Attack Surface Reduction, Continuous Verification, Explicit Trust Verification, Zero Implicit Trust, Device Identity, User Identity, Workload Identity, Application Identity, Cloud Security, Hybrid Network Architecture, Secure Connectivity, Network Resilience, Business Continuity, Disaster Recovery Networking