Sr. Network & Infrastructure Engineer — Atlanta, GA

SUMMARY

The Senior Network & Infrastructure Engineer owns the network that connects t6dya'b FJ offices, the Suwanee data center, Azure, Hong Kong, mainland China and Mexico. This is a senior, hands-on role on a small Global IT team, owning network architecture and the roadmap as well as firewalls, WAN and site-to-site tunnels, remote access VPN, and Meraki wired and wireless networks.

PRIMARY RESPONSIBILITIES AND ESSENTIAL FUNCTIONS:

• Own the network architecture, design standards and roadmap across all sites.

• Lead network projects such as China connectivity and WAN and firewall refreshes, from design through cutover.

• Manage carriers and network vendors, and give input on the network budget.

• Administer FortiGate and Cisco ASA/FTD (FMC) firewalls, including rules, policies, upgrades and change requests.

• Review firewall rules and logs, and keep configurations backed up and documented.

• Operate the IPsec tunnels and carrier-managed WAN (DTNaaS) between the US, Azure, Hong Kong and China.

• Troubleshoot tunnel, routing and circuit issues, and work with carriers on outages and changes.

• Own Cisco Secure Client and Meraki client VPN, including configuration, client deployment, upgrades and user issues.

• Administer Cisco Meraki MX, MS and MR across all sites, including SSIDs, VLANs, switching, alerts and inventory.

• Operate certificate-based Wi-Fi (SCEPman, RADIUS/NPS) and work with the endpoint team on the device profiles that deliver certificates.

• Plan and lead office network buildouts and moves with the manager and regional IT staff.

• Renew public and internal certificates, including SAP system certificates.

• Manage internal and external DNS.

• Submit changes through Jira Service Management, review other network changes before they go through, and write runbooks for every system owned.

• Serve as the final technical escalation point for network issues.

• Mentor the help desk and regional IT staff on network work.

• Take part in after-hours maintenance windows across US and Asia business hours.

QUALIFICATIONS & EXPERIENCE

• 7 or more years of network engineering experience in a multi-site company.

• Production experience administering FortiGate or Cisco firewalls, site-to-site IPsec VPN and WAN routing.

• Experience with Cisco Meraki (MX, MS and MR) and remote access VPN such as Cisco Secure Client.

• Experience with network connectivity into mainland China and Azure networking.

• Experience leading network projects and managing carriers and vendors is preferred.

EDUCATION & SKILLS

• Education: Bachelor's degree in Information Technology, Computer Science or a related field, or equivalent experience.

• Certificate lifecycle and DNS administration; 802.1X wireless with RADIUS and certificate-based authentication.

• Clear written documentation and the ability to work with regional IT staff across time zones.

CERTIFICATES, LICENSES, REGISTRATIONS

• CCNP, Fortinet NSE 6 or NSE 7 preferred.

COMPUTER/TECHNICAL SKILLS

• Must be proficient with FortiGate, Cisco ASA/FTD and FMC, Cisco Meraki, Cisco Secure Client and IPsec VPN. Working knowledge of RADIUS/NPS, SCEPman, DNS, Azure networking, Jira Service Management, and PowerShell or Python for network tasks.

PHYSICAL DEMANDS

• While performing the duties of this job, the team member is regularly required to talk or hear.

• The team member frequently is required to sit; have flexible use of hands; reach with hands and arms; and stoop, kneel, crouch, or crawl.

• The team member is occasionally required to stand and walk.

• The team member must regularly lift and/or move up to 10 pounds and occasionally lift and/or move up to 50 pounds, including racking network hardware.

• Specific vision abilities required by this job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus.

WORK ENVIRONMENT

• General office environment in Atlanta, GA (hybrid)

• Regular on-site work at the Suwanee data center

• After-hours maintenance windows across US and Asia business hours