Sr. Network & Infrastructure Engineer - US

Kids2•Atlanta, GA

1d•Hybrid

About The Position

The Senior Network & Infrastructure Engineer owns the network connecting Kids2’s US offices, Suwanee data center, Azure, Hong Kong, mainland China, and Mexico. This is a senior, hands-on role on a small Global IT team, responsible for network architecture and its roadmap, firewalls, WAN and site-to-site tunnels, remote access VPN, and Meraki wired and wireless networks. The role leads network projects from design through cutover, administers firewalls and network systems, manages connectivity and vendor relationships, and serves as the final technical escalation point for network issues. It also involves documenting systems and changes, mentoring help desk and regional IT staff, and participating in after-hours maintenance windows across US and Asia business hours. The position is based in a general office environment in Atlanta, Georgia, with a hybrid arrangement and regular on-site work at the Suwanee data center.

Requirements

Seven or more years of network engineering experience in a multi-site company.
Production experience administering FortiGate or Cisco firewalls, site-to-site IPsec VPN, and WAN routing.
Experience with Cisco Meraki (MX, MS, and MR) and remote access VPN such as Cisco Secure Client.
Experience with network connectivity into mainland China and Azure networking.
Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent experience.
Experience with certificate lifecycle and DNS administration.
Experience with 802.1X wireless using RADIUS and certificate-based authentication.
Clear written documentation skills and ability to work with regional IT staff across time zones.
Proficiency with FortiGate, Cisco ASA/FTD and FMC, Cisco Meraki, Cisco Secure Client, and IPsec VPN.
Working knowledge of RADIUS/NPS, SCEPman, DNS, Azure networking, Jira Service Management, and PowerShell or Python for network tasks.

Nice To Haves

Experience leading network projects and managing carriers and vendors.
CCNP certification.
Fortinet NSE 6 or NSE 7 certification.

Responsibilities

Own network architecture, design standards, and the roadmap across all sites.
Lead network projects, including China connectivity and WAN and firewall refreshes, from design through cutover.
Manage carriers and network vendors, and provide input on the network budget.
Administer FortiGate and Cisco ASA/FTD (FMC) firewalls, including rules, policies, upgrades, and change requests.
Review firewall rules and logs, and keep configurations backed up and documented.
Operate IPsec tunnels and carrier-managed WAN (DTNaaS) between the US, Azure, Hong Kong, and China.
Troubleshoot tunnel, routing, and circuit issues, and coordinate with carriers on outages and changes.
Own Cisco Secure Client and Meraki client VPN, including configuration, client deployment, upgrades, and user issues.
Administer Cisco Meraki MX, MS, and MR across all sites, including SSIDs, VLANs, switching, alerts, and inventory.
Operate certificate-based Wi-Fi using SCEPman and RADIUS/NPS, coordinating with the endpoint team on device profiles that deliver certificates.
Plan and lead office network buildouts and moves with the manager and regional IT staff.
Renew public and internal certificates, including SAP system certificates.
Manage internal and external DNS.
Submit changes through Jira Service Management, review other network changes before implementation, and write runbooks for every owned system.
Serve as the final technical escalation point for network issues.
Mentor help desk and regional IT staff on network work.
Participate in after-hours maintenance windows across US and Asia business hours.