Network Engineer

Windward Risk Managers•Boca Raton, FL

4d•Onsite

About The Position

Windward Risk Managers is seeking a hands-on Network Engineer to join its IT infrastructure team. Reporting to the Senior Network Engineer, this position owns day-to-day operation, maintenance, monitoring, and improvement of network, firewall, and connectivity infrastructure across on-premises data centers and a growing Microsoft Azure environment. The environment includes Cisco compute fabric, NetApp storage networking, and Palo Alto security platforms. The role focuses on technically strong engineering, disciplined troubleshooting, and thorough documentation; the Senior Network Engineer leads network architecture and standards. This is a full-time, in-person position based at the company's Boca Raton, Florida office; remote and hybrid arrangements are not available. The engineer will support enterprise LAN, WAN, wireless, firewall, cloud networking, routing, switching, storage connectivity, and network security across multiple sites. Duties also include incident response, planned maintenance, documentation, hardware installation and lifecycle projects, security tasks, and participation in an on-call rotation. Occasional travel between company sites may be required. The technical environment includes Palo Alto Networks PAN-OS firewalls, GlobalProtect VPN, Cloudflare, Zero Trust/network access control, Cisco Catalyst and Nexus switches, Cisco UCS X-Series and Intersight, BGP/OSPF/EIGRP, MPLS and DIA circuits, site-to-site IPSec VPN, NetApp ONTAP and Tintri, Azure hub-and-spoke VNets and related networking services, UniFi wireless, and Site24x7 monitoring. Candidates must be authorized to work for any U.S. employer without current or future visa sponsorship and reside in one of the states where the company currently hires: AL, AR, CA, CT, FL, GA, KS, KY, MO, NC, NV, OH, SC, TN, TX, VA, or WI. The company states its commitment to equal employment opportunity and affirmative action based on merit, qualifications, and abilities.

Requirements

At least 5 years of hands-on network engineering or network administration experience.
Strong understanding of TCP/IP fundamentals, including subnetting, routing, NAT, DNS, and DHCP.
Production experience with enterprise-class routers and switches, including Cisco Catalyst, Cisco Nexus (NX-OS), and Cisco UCS X-Series Fabric Interconnects.
Hands-on production experience with Palo Alto Networks firewalls (PAN-OS), including security policy, NAT, and VPN.
Working knowledge of at least one dynamic routing protocol: OSPF, EIGRP, or BGP.
Demonstrated experience with Microsoft Azure networking, including VNets, peering, VPN Gateway, NSGs, and routing.
Experience with NetApp or comparable enterprise storage and its supporting network connectivity.
Experience with network monitoring tools and alerting platforms.
Experience supporting network security applications.
Methodical troubleshooting skills using packet captures, logs, and device diagnostics.
Strong written documentation skills.
Ability to work collaboratively and self-motivate to drive projects through to completion.
Authorization to work for any employer in the U.S. without requiring visa sponsorship now or in the future.
Residence in one of the states where the company currently hires: AL, AR, CA, CT, FL, GA, KS, KY, MO, NC, NV, OH, SC, TN, TX, VA, or WI.

Nice To Haves

Palo Alto Networks Network Security Professional certification; the legacy PCNSA also applies.
Cisco Certified Network Associate (CCNA).
Microsoft Azure Network Engineer Associate (AZ-700) and/or Azure Administrator Associate (AZ-104).
NetApp Certified Technology Associate (NCTA).
Experience with Cisco UCS X-Series and Intersight data-center compute fabric.
IPSec VPN design and troubleshooting experience.
Familiarity with server, virtualization, or storage environments.

Responsibilities

Operate, maintain, and monitor enterprise LAN, WAN, and UniFi wireless infrastructure across multiple sites.
Administer Palo Alto Networks firewalls, including security policy, NAT, threat prevention, URL filtering, GlobalProtect VPN, App-ID tuning, and SSL/TLS decryption.
Design, implement, and support Microsoft Azure networking, including hub-and-spoke VNets, peering, VPN Gateway, Azure Firewall, NSGs, and user-defined routes.
Configure and troubleshoot routing and switching using BGP, OSPF, and EIGRP across Cisco Catalyst and Cisco Nexus switches and the Cisco UCS X-Series Fabric Interconnect environment.
Build and maintain site-to-site IPSec VPN connectivity with business partners and vendors.
Support NetApp ONTAP storage networking and replication.
Administer network monitoring platforms and maintain alerting, dashboards, NetFlow, and device-health visibility.
Administer and support network security applications and Zero Trust/network access control.
Respond to network alerts and incidents, perform root-cause analysis, and implement permanent remediation.
Participate in planned maintenance windows, including change preparation, verification, and rollback procedures.
Create and maintain network documentation, diagrams, IP address management (IPAM), and runbooks.
Install, rack, and cable network hardware; support equipment lifecycle and refresh projects.
Assist with network security tasks, including certificate management, vulnerability remediation, and access reviews.
Participate in an on-call rotation.
Occasionally travel between company sites as required.