Network Engineer

Sectigo

20d • Remote

About The Position

We are looking for a talented Network Engineer to join our growing global team at Sectigo. The Network Engineer is responsible for supporting, implementing, managing, and maintaining the organization's networking infrastructure. This individual is detail-oriented, thrives in a fast-paced, dynamic environment, and possesses a proven track record in learning, implementing, and maintaining enterprise networks and new technologies. Must be a commutable distance to Manchester DC, should the need arise.

Requirements

• Bachelor’s degree in computer science, information technology, or related field is strongly preferred.
• Proven experience (typically 5+ years) in network engineering roles, with a focus on supporting, implementing, and managing enterprise-scale network infrastructures.
• Ability to create, implement, and maintain automation using Terraform and Ansible.
• Proficiency with GIT.
• Comfortable with JSON, YAML, and XML.
• AWS network experience is necessary (TGWs, Network ACLs, AWS Network Firewall, Security Groups, VPCs, Subnet,etc..), and general experience is required.
• Must be proficient in installing, implementing, supporting, and maintaining Juniper, Palo Alto, and Arista hardware and software for Datacenter and Campus environments.
• Must be able to design, implement, and support Route based and Policy based VPN.
• Must be able to design, implement, and support enterprise VPNs such as Global Protect or AnyConnect.
• Understanding of overlay vs underlay and how it interacts with EVPN
• Must be able to support, implement, and maintain Radius and Tacacs+ for both device access management and NAC (e.g., 802.1x).
• Must be able to implement, support, and use: Netflow, SNMP, and related enterprise tools (e.g., Solarwinds, Nagios, LiveNX).
• Must understand stateful vs non-stateful rules, symmetric vs non-symmetric, NAT types, order of operation, etc.
• Must have knowledge of OSPFv2, OSPFv3 and BGP.
• Must know IPv6.
• Must understand rSTP, dot1q, vlan, L2 security
• Good understanding wireless, roaming, troubleshooting
• Must understand FHRP (VRRP, HSRP, etc.), LACP, BFD, switch stacks.etc.
• Must understand path MTU discovery (ICMP), basic TCP flags, etc.
• Must have a good understanding.
• Must be comfortable packet captures and utilizing tools like Wireshark and tcpdump.

Nice To Haves

• Relevant certifications (e.g., CCNP, CCIE, CISSP) are a plus.
• Knowledge of Python is a plus.
• Knowledge of specific technologies such as DMVPN, FlexVPN, and other vendor-specific VPNs is a plus.
• SAML-based authentication is a plus.
• Knowledge of others such as ISIS and mBGP is a plus.
• IPv4 and IPv6 dual stack is a plus.
• SDN, SD-WAN, and cloud networking is desirable.

Responsibilities

• Designing, planning, and implementing network infrastructure move, add, or changes. Including maintenance and support.
• Implementing and maintaining network security protocols, including firewalls, intrusion detection/prevention systems (IDS/IPS), VPNs, access control lists (ACLs), and encryption technologies to safeguard the organization's data and systems.
• Diagnosing and resolving complex network issues, analyzing network performance, and optimizing network infrastructure to ensure high availability, reliability, and performance.
• Creating and maintaining network documentation, diagrams, and standard operating procedures (SOPs). Generating reports on network performance, security incidents, and compliance status for management review.
• Assessing current and future network capacity requirements based on business growth projections and technology trends. Planning and implementing scalability solutions to accommodate increasing demand.
• Ensuring network infrastructure compliance with industry regulations, standards, and best practices (e.g., PCI DSS, HIPAA, GDPR, ISO, Webtrust). Conducting audits and implementing remediation measures as needed.
• Ability to mount and install network devices such as routers, switches, and servers in data centers and office locations. This includes rack mounting, cable management, and hardware configuration. Candidates must be able to lift network equipment weighing up to 50 lbs.
• Participate in on-call rotation.
• Travel both internationally and nationally as needed (site support meetings, projects, etc.).
• Frequent visits to Datacenter near Manchester.
• Additional tasks associated with this position may be assigned in response to company initiatives and business needs.

Benefits

• Sectigo is an Equal Opportunity Employer.
• We hire and promote the most qualified individuals based on their skills, experience, job requirements, and business needs.
• We do not discriminate on the basis of race, color, religion, age, sex, national origin, disability, pregnancy, genetic information, veteran status, sexual orientation, gender identity, or any other characteristic protected by applicable laws in the countries where we operate.
• Our “One Sectigo” culture fosters a strong sense of belonging and supports a respectful, inclusive workplace free from discrimination and harassment.
• We are committed to bringing a little bit of fun and a whole lot of happiness into everything we do so that our work – and our team members – reflect the positive outcomes we deliver to our customers every day.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level