Senior Engineer, Network and Systems
About The Position
The Senior Engineer, Network and Systems provisions, operates, and secures the company’s core infrastructure, with a primary focus on Linux servers, VMware virtualization, and storage. The role also owns the company’s data center and corporate network, including routers, switches, and firewalls that provide routing, VPNs, and perimeter security. Based in Dallas, the position supports two Dallas-area offices and the Dallas and Denver data centers, remotely managing Denver and assisting the onsite Denver counterpart with major projects as needed. The position monitors and evaluates systems and procedures to protect against unauthorized access, recommends and implements improvements to security, reliability, and utilization, and helps ensure compliance with software licensing and network and systems legal requirements. It maintains infrastructure and documentation, contributes to standards, supports backup and disaster recovery across both data centers, and automates provisioning and routine operations. The role participates in a rotating after-hours on-call schedule and may require evening and weekend work for planned maintenance and major projects.
Requirements
- Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent experience.
- At least 7 years of progressive systems and network administration experience, including hands-on production administration of Enterprise Linux and responsibility for routing and firewall infrastructure, or an equivalent combination of education and experience.
- Expert proficiency with Enterprise Linux (CentOS, Rocky, Red Hat), VMware virtualization (vSphere, vCenter, etc.), and server hardware management, including Dell iDRAC/HP iLO and firmware lifecycle.
- Solid understanding of PAM, LDAP, RADIUS, TACACS+, DNS (BIND and domain registration), certificate and PKI lifecycle, host firewalls, HAProxy, Apache, NGINX, Postfix, NTP, and other common Linux server applications.
- Experience automating infrastructure tasks with scripting such as Bash or Python and configuration management tools such as Ansible.
- Advanced proficiency with NetApp network storage and storage protocols such as iSCSI, Fibre Channel, NFS, and SMB/CIFS.
- Advanced proficiency with Palo Alto firewalls, IP routing, and IPSec VPNs.
- Advanced skills in dynamic routing protocols such as OSPF and BGP, including BGP on Linux hosts; working knowledge of Cisco routers and switches and Spanning Tree.
- Ability to work with confidential information in a secure and professional manner.
Nice To Haves
- Experience with Meraki equipment and management portal.
- Working knowledge of Zabbix network management, Sandvine traffic shaping, and Infoblox IP management.
- Familiarity with CSG Systems, Sugar Customer Management System, and Catcher Middleware, and how they relate to network and systems infrastructure.
- Relevant certifications such as RHCSA/RHCE, VCP, PCNSE, or CCNP.
- Experience with highly available database clustering, specifically MariaDB (Galera clusters) and PostgreSQL (Patroni clusters).
- Familiarity with Kubernetes container orchestration, including administration, maintenance, and troubleshooting of self-hosted, in-house clusters.
Responsibilities
- Deploy, maintain, and support Linux servers, VMware vSphere, physical server and storage hardware, and file, email, application, and DNS servers.
- Administer NetApp storage and iSCSI, Fibre Channel, NFS, and SMB/CIFS protocols, including provisioning, capacity planning, and performance monitoring.
- Manage physical server hardware using out-of-band tools such as Dell iDRAC and HP iLO, including remote provisioning, firmware lifecycle management, and hardware health monitoring.
- Perform hands-on installations and project work in the Dallas data center as needed.
- Maintain, patch, and upgrade server and network operating systems and applications; monitor infrastructure health and performance and respond to alerts.
- Design, implement, and maintain data center and corporate LAN/WAN infrastructure, including switching, routing, firewalls, IPSec VPN tunnels, dynamic routing protocols, and perimeter security.
- Deploy, maintain, and support routers, switches, and firewalls; administer HAProxy load balancing services, VPN gateways, and the intrusion detection system.
- Manage network authentication, authorization, and directory services, including RADIUS, TACACS+, and LDAP systems.
- Integrate Linux systems and services with the Active Directory-based security model using LDAP, Kerberos, and SSSD.
- Manage certificate and PKI lifecycle and configure and support SPF, DKIM, and DMARC email authentication.
- Develop and deploy infrastructure hardening standards and help shape IT security and infrastructure standards.
- Identify and troubleshoot possible security threats, anticipate hardware and software degradation, and secure business applications to reduce risk.
- Help ensure compliance with applicable third-party regulations and software licensing and network and systems legal requirements.
- Implement and maintain backup and disaster recovery systems across the Dallas and Denver data centers.
- Automate provisioning, configuration, and routine operational tasks through scripting and configuration management.
- Support the Denver data center remotely and assist the onsite Denver counterpart with major projects as needed.
- Maintain server and network documentation and information retention policies.
- Collaborate with divisional resources to help achieve company IT standards.
- Meet fiscal requirements when ordering equipment and software, including servers, routers, switches, and network storage.
- Participate in a rotating after-hours on-call schedule and perform periodic evening and weekend work for planned maintenance windows and major projects.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
