Senior Network Engineer

MAG Aerospace•,

9h•$97,500 - $162,500

About The Position

MAG Aerospace is recruiting a Senior Network Engineer to architect and manage secure, scalable enterprise network infrastructure connecting business operations across cloud and on-premises environments. The role designs robust network solutions that support seamless connectivity, security, performance, digital transformation initiatives, and multi-tenant secure environments. The engineer develops and maintains enterprise network architectures, including hybrid-cloud and Azure networking, and manages network security appliances and Cisco enterprise equipment. The position also supports network monitoring, automation, performance optimization, segmentation, SD-WAN, quality of service, and collaboration with cross-functional IT teams. Additional duties include cybersecurity compliance, zero-trust architecture, network access control, security assessments and remediation, escalation support, and infrastructure-as-code initiatives. The position requires eligibility for Secret Security Clearance and U.S. citizenship. Employment is contingent on meeting physical and medical requirements applicable to the position, including relevant federal, state, and local requirements. The projected annualized compensation range is $97,500 to $162,500; compensation depends on factors including location, qualifications, experience, contract affordability, and organizational requirements. Full-time and part-time employees regularly working at least 30 hours per week are eligible for MAG’s Total Rewards programs, which include health, life, disability, financial, and retirement benefits, paid leave, professional development, and tuition assistance. Eligibility for some offerings varies by hours worked.

Requirements

At least 7 years of progressive experience in enterprise network engineering.
Advanced knowledge of routing, switching, and network protocols such as BGP, OSPF, EIGRP, STP, VLANs, and QoS.
Hands-on experience with Microsoft Azure networking, including Virtual Networks, Load Balancers, Application Gateway, and Microsoft Entra ID.
Hands-on experience with enterprise firewalls and security appliances such as Fortinet, Cisco ASA/FTD, or Palo Alto.
Experience implementing FortiGate SD-WAN.
Experience with Cisco Identity Service Engine (ISE).
Experience troubleshooting network security protocols including IPSec, SSL/TLS, and 802.1X.
Must be eligible for Secret Security Clearance.
U.S. citizenship is required.
Must be able to meet physical and medical requirements applicable to the position.

Nice To Haves

Bachelor’s degree in Computer Science, Information Technology, or a related field.
Experience with Cisco enterprise equipment, including Catalyst switches, ISR/ASR routers, and Wireless LAN Controllers.
Experience with network automation tools such as Ansible, Terraform, and Python scripting.
Understanding of container networking, including Kubernetes and Docker.
Experience with SD-WAN solutions such as Cisco Viptela, Silver Peak, and VeloCloud.
Familiarity with network monitoring tools such as FortiManager, PRTG, and Nagios.
Experience with secure remote access solutions such as VPN and ZTNA.
CCNA/CCNP, Azure certifications, or Fortinet NSE certifications.

Responsibilities

Develop network monitoring, automation, and performance optimization strategies.
Configure and manage Microsoft Azure networking services, including VNets, ExpressRoute, VPN Gateway, and Network Security Groups.
Evaluate and support existing and legacy network requirements, documenting and extending or revisiting implementations as needed.
Design and implement enterprise network architectures for hybrid-cloud environments.
Collaborate with cross-functional IT teams when network operations may be affected.
Deploy and maintain Fortinet security appliances, including FortiGate firewalls, FortiAnalyzer, and FortiManager.
Configure and optimize Cisco enterprise networking equipment, including switches, routers, and wireless controllers.
Implement network segmentation and microsegmentation strategies for secure multi-tenant environments.
Design and deploy software-defined WAN (SD-WAN) solutions.
Configure quality of service (QoS) for business-critical applications.
Support cybersecurity compliance requirements.
Implement zero-trust network security architectures.
Design and configure network access control (NAC) solutions.
Perform network security assessments and vulnerability remediation.
Implement advanced threat protection and intrusion prevention systems.
Support compliance requirements including SOX, PCI-DSS, HIPAA, and SOC 2.
Manage network automation and infrastructure-as-code initiatives.
Provide escalation support for complex network issues.
Implement network security controls, including encryption, authentication, and segmentation.
Design and configure firewall rules and intrusion detection.
Perform network vulnerability assessments.