Senior IT Network Engineer - Syracuse, NY

Position Responsibilities:

Manage and maintain enterprise network infrastructure, including switches, routers, and firewalls.

Manage and maintain enterprise network infrastructure, including switches, routers, and firewalls, to support secure and compliant operations.

Configure and optimize routing protocols to ensure efficient, reliable, and secure network performance.

Implement and manage secure networking solutions, including SD-WAN, IPsec tunnels, and segmentation, aligned with compliance requirements.

Ensure adherence to industry standards, compliance frameworks (CMMC, NIST 800- 171, SOC 2), and best practices in network security and design.

Take ownership of network-related issues, troubleshoot problems, and provide timely resolution, applying a proactive approach to prevent recurrence.

Familiarize yourself with the existing network environment and infrastructure, identifying areas for improvement to meet evolving compliance standards.

Create, update, and maintain documentation for network systems, processes, and procedures, ensuring compliance evidence is clear and auditable.

Collaborate with other IT team members to optimize network performance, security, and compliance.

Proactively stay updated with industry trends, technologies, and compliance requirements to continually improve and future-proof our network infrastructure.

Required Skills & Experience:

7+ years of enterprise networking experience, including at least 3 years at a senior or lead level in a multi-site environment.

Expert-level routing and switching, with a focus on secure and compliant network design across distributed sites.

Proficiency in SD-WAN and IPsec tunnel configuration, and demonstrated experience implementing network segmentation aligned to compliance requirements.

Strong understanding of compliance frameworks (CMMC, NIST 800-171, SOC 2) and industry standards in network security.

Hands-on experience with Cisco Meraki (MX, MS, MR) in a multi-site dashboard environment.

Hands-on experience with Fortinet FortiGate firewalls and FortiOS, including policy design, security profiles, IPsec and SD-WAN configuration, HA, and firmware lifecycle. Experience with FortiManager, FortiAnalyzer, or other Fortinet Security Fabric components is an advantage.

Demonstrated ability to operate a multi-vendor firewall estate and to plan and execute migrations between NGFW platforms with minimal disruption. Knowledge of additional platforms (Palo Alto, Cisco Firepower, SonicWall, Aruba, Juniper) is a plus.

Experience with data center and virtualization networking, including VMware host networking and iSCSI or storage area network connectivity.

Enterprise wireless design and troubleshooting experience, including surveys, RF optimization, and secure authentication.

Working knowledge of PKI and certificate management as it applies to VPN, 802.1X, and device trust.

Proficiency with network monitoring, logging, and analysis tools, including packet capture and structured troubleshooting methodology.

Proven ability to implement and manage security controls autonomously, with minimal handholding, in an environment where standards may need to be created rather than inherited.

Strong organizational and documentation skills, with the ability to produce detailed documentation that serves as compliance evidence.

Fluency in English, written and spoken, with excellent communication skills and the ability to explain technical risk to non-technical stakeholders.

Problem-solving mindset with the ability to adapt to a dynamic IT environment and proactively address emerging compliance challenges.

Willingness to travel occasionally to domestic and international JMA sites, and to work on-site in Syracuse, NY .

Desired Skills & Experience:

Relevant certifications such as Fortinet NSE 4 or above (or the current FCP and FCSS equivalents), CCNP Enterprise, CCIE, Meraki CMNA or ECMS, PCNSE, CISSP, or CMMC-related certifications (RP, CCP, CCA).

Experience supporting manufacturing or OT networks, and familiarity with IEC 62443 or Purdue model concepts.

Experience integrating acquired companies, including consolidating domains, addressing schemes, and network platforms.

Network automation and scripting experience (Python, Ansible, Terraform, REST APIs including the Meraki Dashboard API).

Microsoft Azure cloud networking experience, including virtual networks and subnetting, VNet peering, network security groups, Azure Firewall or a third-party NVA, VPN Gateway and ExpressRoute connectivity, private endpoints and DNS resolution, and the hybrid identity considerations that accompany a Microsoft 365 and Entra ID environment.

Experience extending enterprise network and security policy into hosted, colocation, and IaaS environments, including tunnel design and routing between on-premises firewalls and third-party or provider-managed data centers.

Experience in an organization actively pursuing CMMC certification, ISO 27001, or SOC 2 attestation.

ITIL Foundation certification or equivalent practical experience with formal service management.