Senior Network Engineer

About the position

Vestmark is seeking a Senior Network Engineer to join our Enterprise IT team and play a key role in modernizing our IT environment through a cloud-first approach while maintaining on-premises and colocation infrastructure to ensure compliance. This role will contribute to designing, securing, and maintaining our enterprise network while also supporting broader IT infrastructure tasks. The Enterprise IT team at Vestmark is responsible for IT infrastructure and processes, supporting all departments with computer systems, corporate applications, and business operations. This role will involve working with a range of networking, security, and IT management tools, ensuring seamless operations across Windows, Linux, and macOS environments. The ideal candidate is customer-focused, with a deep understanding of how infrastructure, security, and system management impact business efficiency.

Responsibilities

• Design, deploy, and maintain enterprise LAN, WAN, VPN, SD-WAN, and wireless networks.
• Configure and manage Palo Alto firewalls (Panorama), Cisco ASA VPNs, and Cisco ISE for policy-based network access.
• Implement Zero Trust security models with Zscaler (ZTNA & DLP).
• Monitor network performance, troubleshoot issues, and optimize configurations for security, reliability, and efficiency.
• Implement network security best practices, including firewalls, IDS/IPS, segmentation, and endpoint security.
• Manage network access controls using OKTA (SSO & 2FA) and Microsoft Entra.
• Maintain Wi-Fi infrastructure with Ruckus Wireless APs & Management.
• Oversee network security compliance and risk assessment.
• Ensure data integrity and exfiltration monitoring with Varonis.
• Support enterprise IT infrastructure, including Windows, Linux, and macOS systems.
• Manage Active Directory, DNS, DHCP, and Group Policy.
• Deploy, configure, and manage virtualization environments with VMware vSphere.
• Oversee endpoint security and patch management with NinjaOne, SentinelOne, & Carbon Black.
• Implement Mac device management with JAMF (MDM) and Apple Business Manager (ABM) enrollment.
• Administer Microsoft 365 (M365), including Exchange, Teams, and SharePoint.
• Manage collaboration tools, including Slack, Zoom, and Atlassian Suite (JIRA, Confluence, Bitbucket).
• Maintain email security & phishing protections using Mimecast.
• Manage password security with Keeper.
• Ensure compliance with security policies using LogicGate.
• Monitor financial system security for NetSuite.
• Assist in security audits, risk assessments, and compliance initiatives.

Requirements

• 8+ years of experience in network & systems engineering in an enterprise environment.
• Expertise in routing protocols (BGP, OSPF, EIGRP), VLANs, and network segmentation.
• Hands-on administration experience with Palo Alto Firewalls (Panorama).
• Experience with Zscaler's Zero Trust Exchange Platform.
• Experience in cloud networking.
• Linux administration, including Bash/Python scripting.
• Windows Server administration (AD, DNS, DHCP, Group Policy).
• Experience with MDM tools such as JAMF (macOS), Microsoft Intune (not primary MDM).
• Experience with virtualization technologies (VMware vSphere).
• PowerShell & Logic Apps scripting for automation.
• Microsoft 365 administration (Exchange, Entra, SharePoint, & Teams).
• Experience with enterprise collaboration tools (Slack, Zoom, Atlassian Suite).

Nice-to-haves

• Certifications: CCNP, PCNSE (Palo Alto), MCSE, JAMF, or Linux-related certifications.
• Familiarity with web application security scanning and cloud configuration monitoring tools (Tenable).