Senior Network Engineer - UniFirst
About The Position
The Senior Network Engineer is the technical authority for UniFirst Corporation’s enterprise network, responsible for the design, implementation, and support of data and voice communications across office locations, wireless, Internet, Microsoft Azure, and remote connectivity. The role leads network architecture decisions, sets standards for network operations, and serves as the top escalation point for the network team. The position is accountable for network security, availability, and performance; leads projects and vendor relationships from planning through production; and mentors IT staff in building a secure, reliable, and cost-effective environment. The role includes leading the design and management of WAN and LAN infrastructure, wireless systems, Palo Alto firewalls, F5 BIG-IP LTM equipment, hybrid on-premises and Azure connectivity, and the Cisco VoIP phone system. It also involves Tier 3 support, intrusion prevention monitoring, network documentation and standards, automation, capacity planning, lifecycle management, and vendor and carrier relationships. The work arrangement is hybrid, with occasional travel to company facilities and participation in an on-call rotation, including availability outside normal business hours for maintenance windows and critical incidents. The estimated salary range is $82,000–$114,000 per year. Compensation varies based on skills, experience, qualifications, and potentially geographic differentials. Recruitment remains open until the position is filled.
Requirements
- Bachelor’s degree in Computer Science or a related discipline, or an equivalent combination of education and work experience.
- At least 8 years of experience managing Cisco routers and switches in an enterprise environment.
- Strong knowledge of routing protocols, including BGP and OSPF.
- At least 3 years of experience working with Cisco wireless.
- At least 5 years of experience with Palo Alto firewalls or F5 BIG-IP, including design and advanced configuration.
- Working knowledge of Microsoft Azure networking, including virtual networks, hybrid connectivity (VPN/ExpressRoute), network security groups, and Azure Firewall.
- CCNP or equivalent experience required.
- Ability to communicate effectively with technical and non-technical audiences and manage equipment vendors.
- Demonstrated success designing, installing, customizing, implementing, and maintaining network systems developed internally or with outside vendors.
- Experience designing, implementing, and providing Tier 3 support for WAN, wireless, routed network, and LAN infrastructure at company facilities.
- Demonstrated experience leading network projects and mentoring or providing technical guidance to other IT staff.
- Ability to work independently with minimal supervision.
- Participation in the on-call rotation, including availability outside normal business hours for maintenance windows and critical incidents.
Nice To Haves
- Experience with both Palo Alto firewalls and F5 BIG-IP is preferred.
- Cisco VoIP experience.
- Experience with network automation or scripting, such as Python or Ansible.
- CCIE, Palo Alto PCNSE, F5, or Microsoft Azure certification, such as AZ-700 Azure Network Engineer.
Responsibilities
- Lead the design, configuration, and management of routers, switches, WAN equipment, SD-WAN, and carrier circuits.
- Monitor the WAN for outages, act as an escalation point, work with vendors to resolve issues, and drive root cause analysis.
- Design, manage, and configure equipment associated with wireless and wired LANs.
- Architect, manage, and configure Palo Alto firewalls, including security policies, VPN, and remote access standards.
- Architect, manage, and configure F5 BIG-IP LTM equipment, including load balancing and application delivery.
- Design, manage, and secure hybrid connectivity between on-premises networks and Microsoft Azure, including virtual networks, VPN Gateway/ExpressRoute, Azure Firewall, network security groups, and DNS.
- Support intrusion prevention monitoring and partner with the information security team on remediation, audits, and vulnerability management.
- Provide Tier 3 escalation for complex WAN, wireless, and LAN issues, and mentor junior network staff in troubleshooting.
- Administer and lead the evolution of the company’s Cisco VoIP phone system.
- Plan, technically design, and implement network installations, upgrades, and migrations, including project scoping and timelines.
- Define and maintain network standards, documentation, change management practices, and configuration baselines.
- Use automation and scripting to improve configuration consistency, monitoring, and operational efficiency.
- Plan network capacity and lifecycle, evaluate new technologies, and recommend architecture, budgets, and vendor selections.
- Manage equipment vendor and carrier relationships, including contracts, support, and SLA performance.
- Train IT staff on network infrastructure, standards, and operational procedures.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
