Lead Network Engineer

BJ's Wholesale Club • Marlborough, MA

1d • $128,500 - $164,000 • Hybrid

About The Position

BJ’s Wholesale Club is seeking an experienced Lead Network Engineer to design, deploy, and manage enterprise-grade network infrastructure across retail stores and distribution centers. The role is the subject matter expert for Aruba wireless solutions, providing hands-on leadership for WiFi and LAN/WAN designs and deployments. The engineer balances project work with escalation support and helps ensure network reliability and security in fast-paced retail and logistics environments.

The role leads Aruba WiFi deployments from design through post-deployment validation, conducts RF site surveys, and designs and maintains wireless infrastructure. It also covers LAN switching architecture and operations, Fortinet SD-WAN and firewall services, network monitoring, incident escalation, documentation, project delivery for new stores and distribution center expansions, and mentoring other engineers.

This is a hybrid role with mandatory in-office work Tuesday through Thursday at BJ’s Club Support Center in Marlborough, Massachusetts; Monday and Friday are remote. Travel to stores and distribution centers may be required up to 25% of the time. The position may involve walking warehouse floors, working in network closets and data rooms, lifting equipment up to 50 pounds, and working on ladders. Occasional after-hours and weekend work, as well as participation in an on-call rotation, are required. The stated pay range is $128,500 to $164,000.

Requirements

• 7–10 years of progressive hands-on experience in enterprise network engineering.
• At least 3 years of experience in retail, hospitality, distribution center, or warehouse network environments with multi-site responsibility; experience across 50 or more locations is strongly preferred.
• Bachelor’s degree in Computer Science, Information Technology, Network Engineering, or an equivalent combination of education and experience.
• Deep expertise in Aruba AP deployment, Mobility Controller/Conductor, AOS-8 and AOS-10, RF design, and troubleshooting.
• Proficiency with Ekahau Pro for predictive design and post-installation validation.
• Working knowledge of Aruba ClearPass (CPPM) for NAC, guest portals, and device profiling in support of wireless deployments.
• Demonstrated experience with FortiGate SD-WAN, FortiManager, FortiAnalyzer, and FortiOS policy management.
• Experience with Aruba CX, VLANs, 802.1Q trunking, LACP, STP/MSTP, and Layer 3 inter-VLAN routing.
• Knowledge of BGP, OSPF, IPSec VPN, and WAN circuit management.
• Experience with firewall policy management, 802.1X/NAC, and PCI-DSS network segmentation requirements.
• Proficiency with SNMP-based network monitoring tools such as SolarWinds or PRTG, or equivalent, and packet capture analysis using Wireshark.
• Strong analytical and technical problem-solving skills for complex, multi-layer network issues.
• Ability to manage concurrent network projects and collaborate across IT, security, vendor, and field operations teams.
• Ability to maintain accurate network documentation and communicate effectively with non-technical stakeholders.
• Ability to work in active retail and warehouse environments, lift and carry network equipment up to 50 pounds, and work on ladders when required.
• Ability to work in the stated hybrid schedule, travel up to 25%, occasionally work after hours or weekends, and participate in an on-call rotation.

Nice To Haves

• Aruba Certified Mobility Professional (ACMP) or Aruba Certified ClearPass Associate/Professional (ACCA/ACCP).
• CCNP Enterprise or Security, or an equivalent vendor-neutral certification.
• Experience with Aruba Central and Aruba AIOps.
• Familiarity with retail systems and requirements, including POS networks, IoT/OT device segmentation, and loss prevention systems.
• Experience with SD-WAN migration projects from legacy MPLS to hybrid WAN architectures.
• Familiarity with ITSM platforms such as ServiceNow and IPAM solutions such as Infoblox or SolarWinds IPAM.
• Knowledge of cloud networking concepts, including AWS/Azure VPN Gateways and Direct Connect/ExpressRoute.
• Experience with automation and scripting, such as Python or Ansible, for network configuration management.

Responsibilities

• Lead end-to-end Aruba WiFi deployments at retail stores and distribution centers, from design through post-deployment validation.
• Conduct RF site surveys using Ekahau Pro and similar tools, producing heat maps, coverage reports, and capacity recommendations.
• Design and maintain Aruba wireless infrastructure, including indoor and outdoor access points, Mobility Conductors/Gateways, and AOS-8/AOS-10 architecture.
• Optimize RF environments for high-density retail and warehouse settings, including band management, channel planning, and interference mitigation.
• Develop and enforce wireless security standards aligned with PCI-DSS requirements.
• Administer Aruba ClearPass for network access control, guest management, and device onboarding related to wireless policy enforcement.
• Design, deploy, and maintain Aruba CX and HP ProCurve switching infrastructure across stores and distribution centers.
• Manage VLAN segmentation for POS systems, corporate devices, IoT/OT equipment, and guest networks.
• Configure and troubleshoot spanning tree, link aggregation, and Layer 3 routing protocols.
• Perform capacity planning and lifecycle management for access-layer and distribution-layer switching infrastructure.
• Architect, deploy, and manage Fortinet SD-WAN solutions across retail branch locations.
• Configure FortiGate firewall policies, IPSec VPN tunnels, and SD-WAN application steering rules for business-critical applications.
• Monitor WAN performance and SLA adherence, proactively identifying and resolving connectivity degradation.
• Coordinate with ISPs and telecom vendors on circuit provisioning, failover configurations, and SLA enforcement.
• Maintain FortiManager and FortiAnalyzer for centralized policy management and log analytics.
• Serve as a Level 3 escalation point for network incidents and provide root-cause analysis and permanent corrective actions.
• Lead network workstreams for new store openings, store refreshes, and distribution center expansions, coordinating with construction, real estate, and IT project managers.
• Maintain network documentation, including topology diagrams, IP address management, configuration standards, and runbooks.
• Define and enforce network standards, change management procedures, and configuration baselines.
• Mentor junior and mid-level network engineers and provide knowledge transfer on Aruba and Fortinet technologies.
• Manage multiple concurrent network projects from scoping through delivery and communicate technical topics to non-technical stakeholders.
• Participate in after-hours on-call support, occasional maintenance windows, store openings, and critical incident response.

Benefits

• Weekly pay.
• Access to earned pay before payday through Daily Pay; a fee may apply.
• Complimentary BJ’s Club Card Membership and a free Supplemental Membership for someone in the employee’s household.
• Paid vacation, personal and sick days, holidays, bereavement leave, and jury duty leave.
• Medical plan options, plus optional dental, vision, Health Savings Account, and flexible spending account options.
• 401(k) retirement savings plan with company match for team members age 18 and older.
• Employee Stock Purchase Plan with the ability to purchase BJ’s common stock at a 15% discount.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior