Senior Network Engineer - Onsite, Yuba City, CA
About The Position
Under the supervision of the IT Manager, the Senior Network Engineer is responsible for the design, implementation, configuration, and optimization of our enterprise network infrastructure across data centers, branch sites, and cloud environments. Ideal candidates will have deep experience with nextgen firewalls, routers, switches, Wireless Access Points, plus a strong command of WAN routing protocols, SD-WAN, IDS/IPS, VPNs, and Firewall ACLs. Essential Functions Architecture & Design: Build resilient network architectures (campus, WAN/SD-WAN, data centers), segmentation, policy-based routing, and high-availability frameworks. Implementation & Ops: Configure/manage firewalls, routers, switches and wireless access points; handle BGP/OSPF/EIGRP routing, IPsec/SSL VPNs, DNS/DHCP/NAT/QoS. Telephony: Proven experience with enterprise telephony systems and VoIP technologies, including SIP signaling, RTP media streams, and troubleshooting voice protocols. Strong knowledge of CCaaS (Contact Center as a Service) and UCaaS (Unified Communications as a Service) platforms for voice, video, and collaboration. Expertise in QoS configuration for voice traffic, Session Border Controllers (SBCs), and VoIP security best practices to ensure reliable and secure communications across complex network environments. Troubleshooting & Monitoring: Diagnose L2/L3, VPN, SD-WAN, wireless, and performance issues; lead incident response and post-mortems. Automation & Documentation: Use Python/Ansible/Git for config automation; maintain diagrams, runbooks, inventories, and change records. Security & Compliance: Manage ACLs, IPS/IDS, firewalls, NAT, zero-trust segmentation; enforce secure defaults and logging. Participate as the Network Subject Matter Expert in annual third party Leadership: Lead multi-site tech projects and mentor junior staff.
Requirements
- Excellent communication and stakeholder engagement skills.
- Excellent organizational skills and attention to detail.
- Strong knowledge of networking protocols and services, including TCP/IP, VLANs, STP, routing, NAT, QoS, DHCP, and DNS.
- Ability to configure and optimize dynamic routing protocols such as BGP, OSPF, and EIGRP.
- Understanding of Zero Trust security models, SASE frameworks, RF optimization techniques, and wireless network design principles.
- Advanced troubleshooting and packet analysis skills using tools like Wireshark.
- Proficiency in scripting, change management, automation, and monitoring tools using Python, Ansible, and PowerShell.
- Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent experience).
- 7+ years of experience in network engineering in a complex enterprise environment.
- Industry-recognized certifications such as CCNP Enterprise/Security, NSE-4+, ACE-A/ACE-L, VCTA-NV/VCP-NV, CMNA, CISSP, or Security+ (preferred).
- Proficiency with Cisco Firepower, FortiGate, Arista EOS, VeloCloud SD-WAN, HPE Instant On, Meraki MR/MX/MS platforms.
- Extensive experience with network protocols and services, including TCP/IP, VLANs, STP, routing, NAT, QoS, DHCP, and DNS.
- Extensive experience configuring and optimizing dynamic routing protocols, including BGP, OSPF, and EIGRP where applicable.
- Extensive VPN, ZTNA, and Firewall ACL experience.
- Experience managing and configuring NextGen firewalls, NetFlow, Deep Packet Inspection (DPI), Intrusion Prevention/Detection Systems (IPS/IDS), and Access Control Lists (ACLs).
- Experience in cloud networking (AWS/Azure/GCP).
Responsibilities
- Build resilient network architectures (campus, WAN/SD-WAN, data centers), segmentation, policy-based routing, and high-availability frameworks.
- Configure/manage firewalls, routers, switches and wireless access points; handle BGP/OSPF/EIGRP routing, IPsec/SSL VPNs, DNS/DHCP/NAT/QoS.
- Proven experience with enterprise telephony systems and VoIP technologies, including SIP signaling, RTP media streams, and troubleshooting voice protocols.
- Diagnose L2/L3, VPN, SD-WAN, wireless, and performance issues; lead incident response and post-mortems.
- Use Python/Ansible/Git for config automation; maintain diagrams, runbooks, inventories, and change records.
- Manage ACLs, IPS/IDS, firewalls, NAT, zero-trust segmentation; enforce secure defaults and logging.
- Lead multi-site tech projects and mentor junior staff.
Benefits
- Medical, Dental & Vision Insurance options
- Voluntary Lines including hospital indemnity, accident, and critical illness policies
- Company Paid HRA (with enrollment in certain health plans)
- Company Paid Basic Term Life Insurance Coverage at 2× annual base salary, up to a maximum of $500,000 for full-time employees
- $25,000 for part-time employees
- Company Paid Long-Term Disability Insurance for Full-Time Employees
- Company Paid Telehealth Services Membership (Teladoc)
- Company Paid Employee Assistance Program (EAP)
- 401(k) Retirement Plan
- Employer-funded safe harbor contribution of 3% of employee's eligible earnings
- Discretionary employer match on employee contributions
- Flexible Spending Accounts
- HSA
- Medical FSA
- Dependent Care FSA
- Limited Purpose FSA
- Paid Time Off
- Vacation accruals based on status and tenure within company
- 12 sick days accrued annually for full-time employees
- 1 hour for every 30 hours worked for part-time employees
- 11 paid holidays (eligible after 90 days of employment)
- Travel Expense Reimbursement
- All necessary and work-related travel expenses will be reimbursed in accordance with company policy
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Number of Employees
101-250 employees
