Role Description
The Expert Engineer, Secure LAN, Infrastructure is responsible for providing hands-on technical leadership and execution across enterprise wired and wireless networks, firewall and network authentication platforms. This role ensures secure, resilient, and high-performing access for corporate offices, manufacturing sites, warehouses, and remote locations.
Reporting to the Sr Manager, Network and Security Engineering, this role partners closely with Network Services delivery teams, Cybersecurity, Hybrid Cloud, Workplace Experience, and Manufacturing IT. This role will retain technical ownership, standards authority, and final escalation accountability for LAN, WiFi, Firewall and related authentication, while governing MSP-delivered operations, monitoring, and incident response to ensure consistent service quality. This is a remote role but must be able to work East Coast Hours.
Key Responsibilities
-
Serve as the technical lead for enterprise Secure LAN and Wi-Fi platforms, including design, configuration, optimization, and lifecycle management.
-
Define and maintain wireless standards for coverage, capacity, performance, resiliency, and security across all locations.
-
Lead technical execution for wireless deployments, upgrades, and redesigns across corporate offices, manufacturing plants, warehouses, and specialized environments.
-
Provide technical leadership for network authentication and access platforms supporting wired and wireless connectivity, including 802.1X, certificate-based authentication, device authentication, and identity-integrated access models.
-
Define and maintain enterprise network access control standards, including authentication methods, authorization models, device profiling, guest access, and policy enforcement patterns.
-
Lead the design and operational governance of identity-driven access control models supporting secure user, device, guest, and operational network access.
-
Define and enforce firewall security standards, segmentation models, and traffic control patterns aligned with cybersecurity policies and risk requirements.
-
Partner with Cybersecurity and Identity teams to ensure authentication, segmentation, and enforcement services align with Zero Trust principles and enterprise security standards.
-
Support secure access models across enterprise, manufacturing, warehouse, and site-based network environments.
-
Provide technical leadership for resilient LAN and WAN designs supporting high availability, operational continuity, and scalable connectivity.
-
Govern MSP-delivered operations, monitoring, and incident response for in-scope services and technologies.
-
Act as the senior escalation point for complex or systemic access, connectivity, routing, switching, wireless, authentication, and security incidents.
-
Lead root-cause analysis and corrective action planning for major outages and recurring network incidents.
-
Participate in design reviews and infrastructure solutioning efforts across network, cybersecurity, cloud, and infrastructure initiatives.
-
Define and maintain engineering standards, configuration baselines, network design patterns, documentation, and runbooks.
-
Identify opportunities to improve reliability, resiliency, security posture, operational discipline, automation, and cost efficiency.
Qualifications
-
Bachelor’s degree in Information Technology, Engineering, or related field.
-
8+ years of experience engineering enterprise Wi-Fi, authentication, LAN, WAN, or network connectivity platforms.
-
Strong hands-on experience with enterprise LAN technologies, switching, wireless, and network access control.
-
Strong hands-on experience designing and managing enterprise IPv4 routing across LAN and WAN environments.
-
Deep understanding of BGP and OSPF routing protocols and enterprise-scale operations.
-
Strong expertise in Layer 2 segmentation including VLANs, spanning tree, and resilient switching architectures.
-
Experience with policy-based access control, including role-based access, device profiling, and segmentation.
-
Experience integrating NAC with directory services, PKI, endpoint management, and security tooling.
-
Hands-on experience with enterprise networking platforms from vendors such as Cisco, HPE Aruba, Juniper, Fortinet, or equivalent.
-
Ability to operate in multi-vendor environments with depth in at least one leading platform.
-
Experience supporting high-availability environments with strict maintenance and change control requirements.
-
Experience supporting industrial or site-based environments with network segmentation and zoning.
-
Understanding Purdue Model and industrial segmentation principles.
-
Strong troubleshooting and incident resolution capabilities.
-
Ability to lead technically without direct people management.
-
Demonstrated ability to produce and maintain high-quality technical documentation, including architectural and engineering diagrams, design standards, process documentation, runbooks, configuration baselines, and revision-controlled standards documents that support operational consistency, knowledge transfer, and long-term maintainability.
Requirements
-
Experience operating in MSP-delivered network models.
-
Experience supporting hybrid cloud and site-to-site connectivity scenarios.
-
Familiarity with Zero Trust networking and identity-integrated access controls.
-
Experience supporting SD-WAN or modern enterprise connectivity architectures.
-
Experience designing large-scale routing domains and hybrid network architectures.
-
Experience with modern network fabric designs such as spine-leaf and VXLAN.
-
Experience with industrial or OT network segmentation and security models.
-
Familiarity with IEC 62443 or similar industrial security frameworks.
-
Relevant networking, wireless, security, or cloud certifications.
-
Deep hands-on expertise with firewall platforms and network segmentation models.
-
Hands-on experience with enterprise NAC platforms supporting 802.1X, MAB, certificates, and identity-based access.
-
Experience or strong familiarity with network automation and programmable infrastructure practices, including API-driven workflows, automation platforms, AIOps, agentic AI concepts, and Network as Code approaches used to reduce manual operations, improve repeatability, and enable more consistent network service delivery.
-
Familiarity with the emerging use of AI-enabled tools in network engineering and operations, including use cases such as documentation assistance, troubleshooting support, operational analysis, knowledge management, and productivity enhancement through platforms such as Microsoft Copilot or similar enterprise AI tools.
Key Skills
-
Enterprise wired and Wi-Fi engineering
-
LAN/WAN architecture and design
-
IPv4 routing (BGP, OSPF)
-
Layer 2 switching and segmentation
-
Network authentication and access control
-
Identity-based segmentation
-
Firewall engineering and policy management
-
Industrial networking fundamentals
-
Multi-vendor networking platforms
-
MSP governance and escalation
-
Network troubleshooting and root-cause analysis
-
Network automation, AIOps, and AI-enabled operational workflows
-
Technical documentation, architecture diagrams, engineering standards, and process governance
Compensation and Benefits
The target base salary range for this full-time, salaried position is between $153,900-$211,600. Individual base pay depends on work location and additional factors such as experience, job-related skills, and relevant education or training. Total pay may include other forms of compensation. In addition, we offer competitive health, dental, 401k and wellness benefits beginning on the first day of employment. Please ask your Talent Acquisition Partner for more information about our total rewards package.
