Senior Network Engineer

Catania-Spagna Corp•Ayer, MA

just now•Onsite

About The Position

Catania Oils, a fourth-generation, family-owned business with 125 years of excellence in the edible oils industry, is seeking a passionate and driven Senior Network Engineer. The company operates with core values including treating team members like family, taking ownership, striving for excellence, being customer-focused, and maintaining authenticity. This role is an opportunity to join a stable company with room for growth, where individuals are valued for doing things right the first time. The Senior Network Engineer will be a key player in a fast-paced environment, responsible for enhancing the security and efficiency of the company's network infrastructure. This involves leading security hardening initiatives, identifying and remediating vulnerabilities across LAN, WAN, and cloud environments, and establishing secure configurations for network devices. The position also entails designing and implementing network segmentation, optimizing current network topology, and supporting the adoption of modern security architectures like zero trust. A significant part of the role involves managing firewall strategy, including policy design, rule lifecycle management, auditing, and optimizing existing rulesets, along with implementing governance processes. The engineer will ensure high availability and redundancy across the company's physical locations, manage the Dell switching environment, and secure connectivity between on-prem infrastructure and Azure. The role requires participation in a 24/7/365 operational model with on-call support, comprehensive documentation of network architecture, continuous monitoring of network performance and security, and strategic partnership with IT leadership to align network initiatives with business priorities. The company emphasizes a culture that blends tradition with innovation and is committed to sustainability and quality.

Requirements

8+ years of experience in network engineering, with a strong focus on security
Proven experience with: Palo Alto firewalls (policy management, NAT, VPNs)
Proven experience with: Network segmentation and secure design
Proven experience with: Network hardening and vulnerability mitigation
Experience managing enterprise switching environments (Dell preferred)
Strong understanding of: TCP/IP, routing, switching, VLANs
Strong understanding of: VPNs, IDS/IPS, and secure access controls
Experience supporting hybrid environments (on-prem + Azure)
Ability to operate independently in a lean IT organization

Nice To Haves

Experience leading network security remediation or transformation efforts
Familiarity with zero trust or modern network security frameworks
Relevant certifications (e.g., PCNSE, CCNP/CCIE, CISSP, or equivalent)

Responsibilities

Lead initiatives to harden network infrastructure following industry best practices
Identify and remediate security gaps across LAN, WAN, and cloud-connected environments
Establish and maintain secure baseline configurations for firewalls, switches, and network devices
Design and implement network segmentation strategies to reduce risk and limit lateral movement
Evaluate and improve current network topology for both security and operational efficiency
Support evolution toward modern security architectures (e.g., zero trust principles where appropriate)
Own firewall strategy, policy design, and rule lifecycle management
Audit, rationalize, and optimize existing firewall rulesets
Implement governance processes for rule requests, approvals, and periodic recertification
Design and maintain high availability across both physical locations
Ensure redundancy and failover capabilities for critical network paths and services
Identify and eliminate single points of failure across infrastructure
Manage and optimize Dell switching environment, including VLAN design and segmentation
Ensure consistent configuration standards and performance across both sites
Support and secure connectivity between on-prem infrastructure and Azure
Extend network security controls and segmentation into cloud environments
Participate in a 24/7/365 operational model with on-call support as needed
Document network architecture, standards, and procedures
Monitor network performance, availability, and security posture
Partner with IT leadership to align network strategy with business priorities