Senior Network Engineer

Summary

Under the supervision of the IT Manager, the Senior Network Engineer is responsible for the design, implementation, configuration, and optimization of our enterprise network infrastructure across data centers, branch sites, and cloud environments. Ideal candidates will have deep experience with nextgen firewalls, routers, switches, Wireless Access Points, plus a strong command of WAN routing protocols, SD-WAN, IDS/IPS, VPNs, and Firewall ACLs.

Essential Functions

1. Architecture & Design: Build resilient network architectures (campus, WAN/SD-WAN, data centers), segmentation, policy-based routing, and high-availability frameworks.
2. Implementation & Ops: Configure/manage firewalls, routers, switches and wireless access points; handle BGP/OSPF/EIGRP routing, IPsec/SSL VPNs, DNS/DHCP/NAT/QoS.
3. Telephony: Proven experience with enterprise telephony systems and VoIP technologies, including SIP signaling, RTP media streams, and troubleshooting voice protocols. Strong knowledge of CCaaS (Contact Center as a Service) and UCaaS (Unified Communications as a Service) platforms for voice, video, and collaboration. Expertise in QoS configuration for voice traffic, Session Border Controllers (SBCs), and VoIP security best practices to ensure reliable and secure communications across complex network environments.
4. Troubleshooting & Monitoring: Diagnose L2/L3, VPN, SD-WAN, wireless, and performance issues; lead incident response and post-mortems.
5. Automation & Documentation: Use Python/Ansible/Git for config automation; maintain diagrams, runbooks, inventories, and change records.
6. Security & Compliance: Manage ACLs, IPS/IDS, firewalls, NAT, zero-trust segmentation; enforce secure defaults and logging. Participate as the Network Subject Matter Expert in annual third party
7. Leadership: Lead multi-site tech projects and mentor junior staff.

Required Skills and Abilities

1. Excellent communication and stakeholder engagement skills.
2. Excellent organizational skills and attention to detail.
3. Strong knowledge of networking protocols and services, including TCP/IP, VLANs, STP, routing, NAT, QoS, DHCP, and DNS.
4. Ability to configure and optimize dynamic routing protocols such as BGP, OSPF, and EIGRP.
5. Understanding of Zero Trust security models, SASE frameworks, RF optimization techniques, and wireless network design principles.
6. Advanced troubleshooting and packet analysis skills using tools like Wireshark.
7. Proficiency in scripting, change management, automation, and monitoring tools using Python, Ansible, and PowerShell.

Education and Experience

1. Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent experience).
2. 7+ years of experience in network engineering in a complex enterprise environment.
3. Industry-recognized certifications such as CCNP Enterprise/Security, NSE-4+, ACE-A/ACE-L, VCTA-NV/VCP-NV, CMNA, CISSP, or Security+ (preferred).
4. Proficiency with Cisco Firepower, FortiGate, Arista EOS, VeloCloud SD-WAN, HPE Instant On, Meraki MR/MX/MS platforms.
5. Extensive experience with network protocols and services, including TCP/IP, VLANs, STP, routing, NAT, QoS, DHCP, and DNS.
6. Extensive experience configuring and optimizing dynamic routing protocols, including BGP, OSPF, and EIGRP where applicable.
7. Extensive VPN, ZTNA, and Firewall ACL experience.
8. Experience managing and configuring NextGen firewalls, NetFlow, Deep Packet Inspection (DPI), Intrusion Prevention/Detection Systems (IPS/IDS), and Access Control Lists (ACLs).
9. Experience in cloud networking (AWS/Azure/GCP).

Physical Requirements and Work Environment

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential function of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. 

1. Prolonged periods of sitting at a desk and working on a computer – 7 to 8 hours per day.
2. Light lifting, carrying, pushing and/or pulling objects up to 25 lbs.
3. Intermittent walking, bending, twisting and stooping when racking hardware or performing cable management.
4. General office environment: works generally at a desk in a well-lighted, air-conditioned cubicle/office, with moderate noise levels.  
5. Constant keyboarding, fine hand manipulation, overhead reaching for cabling.
6. Data center access, occasional exposure to raised floors, server noise, and limited hot/cold zones.
7. Occasional travel to branches or data centers, up to 10%.

Work Location
This is an on-site position at our Corporate Headquarters in Yuba City, CA. Remote work is not available for this role.

Compensation Range

The company anticipates offering  an annual salary range between $120,000 to $138,000 for this position at the time of hire. This range includes base salary and does not include possible overtime for non-exempt employees or any applicable performance-based incentives or commissions.

Annual Merit Increase

Employees are eligible for a discretionary yearly merit-based salary adjustment, based on individual performance and company results.

Comprehensive Benefits Package

We provide a robust benefits package designed to support your health, financial security, and work-life balance including:

• Medical, Dental & Vision Insurance options
• Voluntary Lines including hospital indemnity, accident, and critical illness policies
• Company Paid HRA (with enrollment in certain health plans)
• Company Paid Basic Term Life Insurance
  • Coverage at 2× annual base salary, up to a maximum of $500,000 for full-time employees
  • $25,000 for part-time employees
• Company Paid Long-Term Disability Insurance for Full-Time Employees
• Company Paid Telehealth Services Membership (Teladoc)
• Company Paid Employee Assistance Program (EAP)
• 401(k) Retirement Plan
  • Employer-funded safe harbor contribution of 3% of employee's eligible earnings
  • Discretionary employer match on employee contributions 
• Flexible Spending Accounts
  • HSA
  • Medical FSA
  • Dependent Care FSA
  • Limited Purpose FSA
• Paid Time Off
  • Vacation accruals based on status and tenure within company
  • 12 sick days accrued annually for full-time employees
  • 1 hour for every 30 hours worked for part-time employees
  • 11 paid holidays (eligible after 90 days of employment)
• Travel Expense Reimbursement
  • All necessary and work-related travel expenses will be reimbursed in accordance with company policy

The preceding list of duties does not include all tasks and responsibilities that may be required with this position. Additional tasks may be assigned, as departmental and operational needs require.