Lead Network Engineer

Overview

Under general direction, the Lead Network Engineer is responsible for designing, implementing, and maintaining a secure and high-performance enterprise network infrastructure. The Lead Network Engineer leads strategic network initiatives, mentors junior engineers and contingent workers, and collaborates with cross-functional teams to ensure the seamless operation of business-critical systems.

The technical lead is responsible for network architecture, performance optimization, compliance, and security enforcement across on-premises, cloud, and hybrid environments. This role works with a wide range of technologies, including routers, switches, firewalls, SD-WAN, wireless, and cloud networking solutions, to enhance network reliability, scalability, and security.

In addition to designing and managing the network, this role drives strategic planning, proactive performance monitoring, and incident resolution to minimize downtime and ensure business continuity. The Lead Network Engineer plays a critical role in ensuring regulatory compliance (SOC, HITRUST). Collaborates with vendors and stakeholders, evaluates emerging technologies, optimizes costs, and strengthens disaster recovery capabilities to support the organization's long-term networking strategy.

Responsibilities

• Leads the design, implementation, and optimization of enterprise network infrastructure, including LAN, WAN, SD-WAN, VPN, and cloud networking to ensure high performance and scalability
• Deploys, configures, and manages enterprise networking solutions, including Cisco and Meraki, ensuring reliable and secure connectivity
• Administers and secures network firewalls, intrusion prevention systems (IPS/IDS), and access control policies to mitigate threats and protect sensitive data
• Implements network segmentation, Zero Trust security principles, and enforce compliance standards such as SOC, HITRUST, HIPAA, and NIST to align with industry regulations
• Monitors, optimizes, and enhances network performance, redundancy, and disaster recovery strategies to minimize downtime and maintain business continuity
• Troubleshoots and resolves complex network incidents, outages, and performance issues, serving as the highest escalation point for critical problems.
• Automates network operations and implements proactive monitoring tools to improve efficiency and reliability
• Architects and manages cloud networking solutions in Azure and AWS, including VPCs, ExpressRoute, Direct Connect, and hybrid connectivity to ensure seamless integration with cloud environments
• Develops, enforces, and maintains network policies, standards, and best practices to ensure compliance, security, and operational consistency
• Mentors junior engineers, fostering a culture of continuous learning and knowledge sharing
• Collaborates with security, infrastructure, and application teams to align networking strategies with organizational security and business objectives
• Manages vendor relationships, evaluate emerging technologies, and make recommendations for new networking solutions that enhance efficiency and cost-effectiveness

Qualifications

Required Knowledge, Skills, and Abilities:

• Deep understanding of enterprise network infrastructure, including LAN, WAN, SD-WAN, VPN, and cloud networking
• Knowledge of networking solutions, including deployment, configuration, and management
• Advanced knowledge of network security principles, including firewalls, intrusion prevention systems (IPS/IDS), and access control policies
• Knowledge of cloud networking in Azure and AWS, including VPCs, ExpressRoute, Direct Connect, and hybrid connectivity
• Knowledge of automation and network monitoring tools for optimizing efficiency and reliability
• Advanced troubleshooting and problem-solving skills for resolving complex network incidents and performance issues
• Skills in designing and implementing high-performance, scalable, and secure network infrastructures
• Strong skills in performance optimization, redundancy planning, and disaster recovery strategies
• Vendor management and negotiation skills for assessing new solutions and maintaining strategic partnerships
• Ability to effectively manage and secure network environments while ensuring compliance with industry regulations
• Ability to mentor junior team members, fostering technical growth and collaboration
• Ability to collaborate with internal teams to align strategy with business objectives and requirements

Preferred Knowledge, Skills, and Abilities:

• Knowledge of software-defined networking (SDN) technologies and network virtualization
• Familiarity with ITIL or other IT service management frameworks for structured network operations
• Advanced troubleshooting experience using network analysis tools

Required Experience:

• 8 years of experience in designing, implementing, and optimizing enterprise network infrastructure, with expertise in managing networking solutions, securing network environments, and ensuring high availability through performance optimization, redundancy, and troubleshooting
• 7 years of experience developing and enforcing network policies and security best practices, including network segmentation, Zero Trust models, and compliance with industry frameworks.
• 3 years’ experience automating network operations, configuration management, and monitoring using scripting and tools such as Ansible, Python, and Terraform
• 3 years’ experience architecting and integrating cloud networking solutions in Azure and AWS, including VPCs, ExpressRoute, Direct Connect, and hybrid connectivity

Preferred Experience:

• Experience with network automation frameworks for infrastructure-as-code (IaC) deployment
• Experience with load balancing and application delivery controllers

Required Training, Certification and Education:

• Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent work experience)

Preferred Training, Certification and Education:

• Master’s degree in computer science, Information Technology, or a related field
• Industry certifications required or strongly preferred: CCNP (Cisco Certified Network Professional) or CCIE
• Advanced networking certifications such as CCIE (Cisco Certified Internetwork Expert)
• Cloud networking certifications (e.g., AWS Certified Advanced Networking – Specialty, Microsoft Certified: Azure Network Engineer Associate)
• Security certifications (e.g., CISSP, CISM, Palo Alto PCNSE)
• Cloud and DevOps-related certifications
• Security-focused certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), Palo Alto PCNSE
• ITIL or PMP certification for expertise in IT service management and project leadership
• Continuous training and professional development in networking, security, and cloud technologies to stay current with industry advancements

Working Conditions:

• Location: Home Office/Remote
• Schedule flexibility – outage resolution and scheduled maintenance windows require off-hours support
• Must be able to use equipment at workstation for up to 8 hours daily
• Travel: Ability to travel up to 20%

Benefits Overview

At NASCO, we trust our workforce to be fully remote, working from their home. This benefit offers significant, personalized outcomes for each associate including work/life balance, savings on commuting, work clothing, and increased time to spend on personal activities.

Our full benefit package is designed to support the physical, mental, and financial health of our associates. We offer:

Physical and Mental Health Benefits

• Choice of Blue Cross Blue Shield Medical, Dental, and Vision Plans
• Telehealthcare – for Medical and Behavioral visits
• Generous PTO with buy/sell options
• 9 Company holidays, a floating day off, and a day off for volunteering
• Employee Assistance Program
• Wellness program - earn insurance discounts or credit towards health-related items

Financial Health Benefits

• 401K Plan with employer matching contributions
• Company-funded spending/reimbursement accounts to help with out-of-pocket medical expenses
• Bonus and Recognition programs
• Tuition Assistance
• Consultation with financial planner
• Basic Life & AD&D Insurance, Short and Long-Term Disability Insurance provided, and Supplemental Term Life Insurance is available
• Group Discount programs - mobile, technology services, etc., to help you save money

Other Benefits

• E-Learning – Comprehensive and current library of e-learning and performance support assets, available on demand and at no cost

All qualified applicants will receive consideration for employment without regard to, among other grounds, race, color, religion, national origin, sexual orientation, age, gender identity, protected veteran status or status as an individual with a disability. Must have legal authority to work in the US.

We will not accept applicants that use AI when answering the screening questions. Applicants who use AI to answer any questions or to complete their application will not be considered for employment.