Principal Network Engineer

TX Assoc of School Boa•Austin, TX

2d•$108,650 - $174,250•Hybrid

About The Position

As a Principal Network Engineer, you will serve as TASB's most senior individual-contributor authority on enterprise networking, owning both the architecture and the hands-on engineering of a multi-entity, hybrid Azure/on-premises environment with compliance-sensitive segmentation requirements. You will build the multi-year network modernization roadmap and personally implement it, leading TASB's platform migration from Cisco to Juniper while keeping the existing Cisco environment fully stable throughout the transition.

Requirements

Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field, or equivalent professional experience
Required certifications: JNCIP-ENT (JNCIE-ENT preferred) and CCNP Enterprise or CCIE Enterprise Infrastructure; Microsoft Certified: Azure Network Engineer Associate strongly preferred; or ability to obtain required certifications within the first 12 months of employment as a condition of employment
10+ years of progressive enterprise networking experience
5+ years of network architecture and design ownership; not participation, but accountable decision-making
Hands-on experience deploying and administering Juniper EX Series switching and SRX Series security platforms, and administering Cisco Catalyst and Nexus platforms, in a production enterprise environment
Experience designing and implementing network segmentation, trust zones, VLANs, NAC, and 802.1X in a multi-entity or multi-tenant environment, ideally with compliance-aware requirements such as FINRA or SOC2
Experience with Microsoft Azure hybrid networking in multi-subscription environments, including VPN Gateway, ExpressRoute, NSGs, and hub-spoke topologies
Demonstrated ability leading or executing a network platform migration in a production enterprise environment.
Ability to operate as a senior individual contributor in a lean team
Skilled in Juniper EX Series (access/distribution/core switching), SRX Series (stateful firewall, routing, security policy).
Knowledge with Network security policy design, firewall rule management, traffic flow analysis
Ability to present architecture and investment recommendations to non-technical leadership
Knowledgeable in nonprofit, public sector, or multi-affiliate organizational environments

Nice To Haves

JNCIE-ENT preferred
Microsoft Certified: Azure Network Engineer Associate strongly preferred

Responsibilities

Own and evolve enterprise network architecture and the multi-year technology roadmap, including platform standards, topology design, and lifecycle planning for switching, routing, and security infrastructure
Lead the design, planning, and execution of the Cisco-to-Juniper platform migration, including risk assessment, cutover planning, and post-migration validation
Collaborate with the Information Security team on network security policy, firewall rule management, and traffic flow analysis, and mentor supporting network staff
Design and implement network segmentation strategies — including trust zones, VLANs, NAC, and 802.1X to enforce security boundaries and meet entity-specific and regulatory isolation requirements
Perform hands-on configuration, deployment, and troubleshooting of switching, routing, and firewall infrastructure across campus, datacenter, and edge environments
Architect and maintain hybrid connectivity between on-premises infrastructure and Microsoft Azure, including VPN Gateway, ExpressRoute, VNets, NSGs, and multi-subscription routing
Serve as the escalation point for complex network incidents, performing root cause analysis and driving remediation for issues affecting production systems
Provide technical mentorship and day-to-day guidance to network administration staff, building team capability on current and emerging platforms
Develop and maintain network documentation, standards, and diagrams, ensuring architecture decisions are captured and repeatable
Evaluate emerging network technologies and vendor products, and recommend investments aligned to organizational strategy and budget
Manage network-related change control activities, including change proposals, testing, and coordination with the Change Advisory Board
Present architecture strategy, project status, and technology investment recommendations to IT leadership and other non-technical stakeholders
Participate in an on-call rotation and provide after-hours support for critical network incidents as needed