Senior Network Engineer- Onsite

CHARLOTTE PIPE & FOUNDRY; Charlotte (NC); On-site; USD 150,000 - 180,000; Full time

Job summary

UKG is seeking an experienced Senior Network Architect to design and evolve the enterprise network across campus, data centers, and Azure environments. You will lead Azure networking, SD-WAN operations, and secure hybrid connectivity, delivering standards, reference architectures, and deployment plans.

You will collaborate with security and infrastructure teams to implement Zero Trust, VeloCloud SD-WAN, and a resilient network across multi-site environments.

Qualifications

• Bachelor’s degree in IT/CS/Engineering or equivalent experience.
• 8+ years in enterprise network engineering, architecture and implementation.
• Hands-on Azure networking: VNets, NSGs, DNS, VPNs, etc.
• Strong routing, switching, DNS, DHCP, and security knowledge.
• Experience with VeloCloud SD-WAN, Zscaler (ZPA/Branch/Cloud), and Nexus.
• Proven leadership in migrations and complex infrastructure projects.
• Excellent communication, documentation and technical leadership.

Responsibilities

• Design and evolve enterprise network architecture across campus, data center, and Azure environments.
• Develop network strategies for routing, switching, segmentation, resiliency, security, and hybrid connectivity.
• Lead Azure networking administration and design: VNets, Subnets, NSGs, Route Tables, DNS, Load Balancers.
• Design and validate hybrid cloud connectivity between on‑premises and Azure services.
• Create technical standards, reference architectures, implementation plans, and ops docs.
• Design and support Zero Trust access with Zscaler Branch/Cloud/ZPA; secure egress strategies.
• Lead SD-WAN design and administration (VeloCloud); manage QoS and cloud integrations.
• Support data center networking (Cisco Nexus, NSX) and network virtualization.
• Monitor performance; perform RCAs; participate in on‑call rotation; vendor coordination.

Skills

Enterprise routing & switching

Layer 2/3 networking

DNS, DHCP, VPNs

Network segmentation & security

Azure networking services

Cisco Nexus

VeloCloud SD-WAN

Zscaler (ZPA/Branch/Cloud)

Lead migrations & projects

Documentation & leadership

Education

Bachelor’s degree in IT/CS/Engineering or equivalent experience

Tools

Microsoft Azure networking services

VeloCloud SD-WAN

Zscaler platform (ZPA/Bridge/Cloud)

VMware NSX / data center virtualization

Job description

• Design and evolve enterprise network architecture across campus, branch, data center, and Azure environments.
• Develop network strategies for routing, switching, segmentation, resiliency, security, and hybrid connectivity.
• Lead Azure networking administration and design, including:
  • Virtual Networks (VNets)
  • Subnets
  • Network Security Groups (NSGs)
  • Route Tables
  • DNS Services
  • Load Balancers
  • Private Connectivity Solutions
• Design and validate hybrid cloud connectivity between on-premises and Azure-hosted services.
• Create technical standards, reference architectures, implementation plans, and operational documentation.

Security & Secure Access Technologies

• Design and support Zero Trust access solutions using:
  • Zscaler Branch Connector
  • Zscaler Cloud Connector
  • Zscaler Private Access (ZPA)
• Develop secure cloud egress strategies and policy-based traffic steering.
• Collaborate with infrastructure and security teams to maintain secure network operations.

SD-WAN & Network Modernization

• Lead design and administration of VeloCloud SD-WAN environments.
• Configure transport failover, QoS, path selection, routing policies, and cloud integrations.
• Support enterprise networking modernization, migrations, and infrastructure refresh initiatives.

Data Center Networking

• Design and support Cisco Nexus-based data center networking infrastructure.
• Implement and maintain network virtualization, segmentation, and distributed security policies using VMware NSX.
• Support high-availability architectures, failover planning, capacity management, and performance optimization.
• Troubleshoot complex routing, switching, overlay/underlay, and segmentation issues.

Operations & Incident Response

• Monitor network performance and availability across enterprise and cloud environments.
• Perform root-cause analysis and lead resolution efforts during critical incidents.
• Participate in an on-call rotation supporting enterprise infrastructure.
• Coordinate with vendors and internal teams to resolve complex technical issues.

Manufacturing & Physical Infrastructure

• Support plant-floor connectivity and operational technology requirements.
• Design and maintain structured cabling systems, fiber infrastructure, network cabinets, patch panels, and UPS systems.
• Manage large-scale network installation and expansion projects across manufacturing facilities.

Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, Engineering, or related field, or equivalent experience.
• 8+ years of experience in enterprise network engineering, architecture, and implementation.
• Strong expertise in:
  • Enterprise routing and switching
  • Layer 2 and Layer 3 networking
  • DNS, DHCP, VPNs
  • Network segmentation and security
• Hands-on experience with Microsoft Azure networking services.
• Advanced experience with Cisco Nexus networking platforms.
• Experience implementing and operating VeloCloud SD-WAN solutions.
• Experience with Zscaler technologies, including Branch Connector, Cloud Connector, and/or ZPA.
• Proven ability to lead network migrations, deployments, troubleshooting efforts, and infrastructure projects.
• Strong communication, documentation, and technical leadership skills.

Preferred Qualifications

• Experience with Azure private connectivity and cloud security architecture.
• Experience integrating SD-WAN and Security Service Edge (SSE) platforms.
• Background supporting manufacturing, industrial, or multi-site environments.
• Experience with automation, scripting, Infrastructure as Code (IaC), or network observability tools.
• Professional certifications such as:
  • Cisco CCNP or CCIE
  • Microsoft Azure Certifications
  • VMware Certifications
  • VeloCloud Certifications
  • Zscaler Certifications

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.