Network Engineer

Role Summary
This role involves supporting the comprehensive network engineering, security, and cybersecurity functions within a carrier environment. The position requires a technically proficient engineer capable of managing day-to-day network operations, implementing and troubleshooting network infrastructure, and advancing security protocols. The candidate will work within a hybrid setting, balancing on-site and remote responsibilities, and will contribute to various projects and initiatives to maintain a resilient and secure network.

Responsibilities

• Provision, test, and support carrier Ethernet and IP/MPLS services, including circuit turn-up, changes, and outage resolution.
• Support and troubleshoot Ciena-based transport and packet platforms across the network.
• Collaborate with the Network Operations Center (NOC) on escalations, root cause analysis, and service restoration, prioritizing customer experience.
• Maintain comprehensive network documentation, diagrams, and IP address management.
• Administer firewalls, ACLs, VPNs, and network segmentation to secure carrier and internal networks.
• Harden network elements through AAA configuration, role-based access controls, and secure management practices.
• Conduct vulnerability scans, patching, and lifecycle management of network infrastructure.
• Implement routing security measures including prefix filtering and RPKI; support DDoS mitigation strategies.
• Monitor security events with SIEM tools, triage incidents, and participate in response activities such as containment and remediation.
• Perform security assessments, ensure compliance with frameworks like NIST CSF, and support security policies and awareness initiatives.
• Administer Linux servers supporting network tools, virtualization, and identity management systems.
• Develop automation scripts using Python, Bash, Ansible, and APIs; utilize version control for scripts and configurations.
• Lead or support cross-functional projects involving network upgrades, migrations, security enhancements, and vendor evaluations.

Qualifications

• Minimum of 3+ years (Engineer II) or 5+ years (Engineer III) of hands-on network engineering experience.
• Strong understanding of routing and switching protocols: BGP, OSPF, IS-IS, MPLS/SR-MPLS, carrier Ethernet.
• Experience administering firewalls, VPNs, and network access controls.
• Knowledge of cybersecurity operations including log analysis, vulnerability management, and incident response.
• Linux administration experience with distributions such as RHEL, Rocky, Debian, or Ubuntu.
• Ability to build and maintain automation scripts in Python and/or Bash, working with APIs.
• Excellent troubleshooting skills, documentation habits, and ability to communicate technical concepts clearly.
• Willingness to participate in a 24x7 on-call rotation supporting a carrier network.
• Relevant certifications or progress towards certifications such as CCNP, Security+, CySA+, RHCSA, JNCIS, or CISSP is preferred.
• Experience with vendor-specific platforms like Ciena (5170, 5164, 8114) and SR-MPLS deployments is a plus.
• Carrier or service provider experience, especially in rural broadband or ILEC environments, is advantageous.

Publishing Pay Range: $45.00 - $50.00 hourly

This position offers a hybrid schedule, with time split between the office and remote work.