Senior Network Engineer: Global WAN & Cloud Lead

EY

City of Rochester (NY)

On-site

USD 167,000 - 301,000

Full time

2 days ago

Be an early applicant

Application generator

An application made for this job — a tailored resume and cover letter that speak straight to the posting.

Get past ATS filters

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off

Flexible vacation policy

Job summary

EY is seeking a Senior Network Engineer to lead global WAN and cloud connectivity initiatives. You will design, implement, and optimize secure, high‑performing networks, spanning BGP/OSPF routing, SD‑WAN, IPsec/L2TP VPNs, and hybrid cloud links to Azure ExpressRoute, AWS, and Google Cloud.

You will also mentor engineers and drive automation with IaC across diverse teams. The role demands extensive enterprise networking expertise, strong collaboration, and a proactive approach to reliability,

Qualifications

Bachelor’s degree in Computer Science, Computer Engineering, Information Technology, Telecommunications, or a related technical discipline. A Master’s degree is an advantage.
Minimum of 12 years of progressive experience in enterprise or service provider networking, including substantial hands-on experience designing, implementing, and supporting large-scale WAN, SD-WAN, Internet, B2B VPN, and cloud connectivity solutions. Experience leading complex global engineering projects and providing senior technical escalation support is required.

Responsibilities

Provide hands-on technical leadership for the design, implementation, migration, optimization, and lifecycle management of global WAN services.
Design and support advanced routing and switching solutions using BGP, OSPF, route redistribution, policy controls, QoS, traffic engineering, high availability, and IPv4/IPv6.
Lead SD-WAN engineering across branch offices, data centres, cloud environments, SaaS platforms, secure web gateways, and local Internet breakout.
Engineer Internet edge and peering solutions, including transit, carrier interconnections, route policy, DNS dependencies, DDoS mitigation, capacity planning, resiliency, and performance optimisation.
Design and support secure B2B connectivity using site-to-site IPsec and L2TP VPNs, partner interconnections, extranet services, segmentation, and security controls.
Design and implement hybrid and multi-cloud connectivity, including Azure ExpressRoute, cloud transit architectures, private connectivity, and integration with AWS and Google Cloud where required.
Provide technical expertise across office wired and wireless networks, including campus and branch switching, Wi-Fi, RF design, guest networking, and Network Access Control (NAC).
Maintain an enterprise-wide perspective, understanding how network decisions affect security, cloud, applications, operations, user experience, cost, and service resilience, and lead end-to-end technical design across these domains.
Translate business, security, operational, and service requirements into cohesive end-to-end technical designs, including high-level and low-level designs, implementation plans, configuration standards, and test plans.
Develop and maintain network standards, reference architectures, configuration templates, engineering procedures, operational documentation, and support handover materials.
Lead laboratory validation, proof-of-concept testing, pilot deployments, technology evaluations, and technical aspects of RFI and RFP activities.
Provide advanced escalation support for complex incidents, performance problems, interoperability issues, and major service disruptions, including root cause analysis and corrective actions.
Partner with Network Operations and Service Management to ensure solutions comply with change management, ITSM, monitoring, security, and operational readiness requirements.
Collaborate with service providers, carriers, cloud providers, and OEMs to resolve technical issues, assess product capabilities, and improve service performance and resilience.
Drive automation and Infrastructure-as-Code practices using APIs, scripting, source control, and repeatable deployment and validation methods.
Integrate network monitoring, telemetry, analytics, observability, and AIOps capabilities to improve visibility, capacity management, fault detection, and service assurance.
Mentor engineers, conduct technical design reviews, share engineering knowledge, and promote consistent application of sound engineering principles across the global team.
Stay current with networking technologies, industry standards, security threats, and vendor roadmaps, and recommend practical improvements aligned with GCS strategy.