Sr. Network & Infrastructure Engineer - US

Kids2•Atlanta, GA

3d•Hybrid

About The Position

The Senior Network & Infrastructure Engineer owns the network connecting Kids2’s US offices, Suwanee data center, Azure, Hong Kong, mainland China, and Mexico. This is a senior, hands-on role on a small Global IT team, responsible for network architecture and roadmap as well as firewalls, WAN and site-to-site tunnels, remote access VPN, and Meraki wired and wireless networks. The role leads network projects from design through cutover, manages carriers and vendors, administers network and firewall systems, and serves as the final technical escalation point for network issues. It also plans office network buildouts and moves, maintains certificates and DNS, documents owned systems, reviews network changes, and mentors help desk and regional IT staff. The position includes after-hours maintenance windows across US and Asia business hours. The work is based in a general office environment in Atlanta, Georgia, on a hybrid basis, with regular on-site work at the Suwanee data center.

Requirements

7 or more years of network engineering experience in a multi-site company.
Production experience administering FortiGate or Cisco firewalls, site-to-site IPsec VPN, and WAN routing.
Experience with Cisco Meraki (MX, MS, and MR) and remote access VPN such as Cisco Secure Client.
Experience with network connectivity into mainland China and Azure networking.
Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent experience.
Certificate lifecycle and DNS administration experience.
Experience with 802.1X wireless using RADIUS and certificate-based authentication.
Clear written documentation skills and ability to work with regional IT staff across time zones.
Proficiency with FortiGate, Cisco ASA/FTD and FMC, Cisco Meraki, Cisco Secure Client, and IPsec VPN.
Working knowledge of RADIUS/NPS, SCEPman, DNS, Azure networking, Jira Service Management, and PowerShell or Python for network tasks.

Nice To Haves

Experience leading network projects and managing carriers and vendors.
CCNP, Fortinet NSE 6, or Fortinet NSE 7 certification.

Responsibilities

Own network architecture, design standards, and the roadmap across all sites.
Lead network projects, including China connectivity and WAN and firewall refreshes, from design through cutover.
Manage carriers and network vendors and provide input on the network budget.
Administer FortiGate and Cisco ASA/FTD (FMC) firewalls, including rules, policies, upgrades, and change requests.
Review firewall rules and logs and maintain configuration backups and documentation.
Operate IPsec tunnels and carrier-managed WAN (DTNaaS) between the US, Azure, Hong Kong, and China.
Troubleshoot tunnel, routing, and circuit issues and coordinate with carriers on outages and changes.
Own Cisco Secure Client and Meraki client VPN, including configuration, client deployment, upgrades, and user issues.
Administer Cisco Meraki MX, MS, and MR across sites, including SSIDs, VLANs, switching, alerts, and inventory.
Operate certificate-based Wi-Fi using SCEPman and RADIUS/NPS, coordinating with the endpoint team on device profiles that deliver certificates.
Plan and lead office network buildouts and moves with the manager and regional IT staff.
Renew public and internal certificates, including SAP system certificates.
Manage internal and external DNS.
Submit changes through Jira Service Management, review other network changes before implementation, and write runbooks for every owned system.
Serve as the final technical escalation point for network issues.
Mentor help desk and regional IT staff on network work.
Take part in after-hours maintenance windows across US and Asia business hours.