Senior Network Engineer

• Design and support Microsoft Azure networking components, including Virtual Networks (VNets), VPN Gateways, Network Security Groups (NSGs), and Azure Firewall.
• Configure secure connectivity between on-premises infrastructure and cloud environments.
• Support Microsoft Entra ID integration and hybrid networking architectures.
• Assist with cloud migrations and modernization initiatives.
• Ensure network configurations support Infrastructure as a Service (IaaS) and Platform as a Service (PaaS) deployments.

• Configure and manage enterprise firewall policies and access controls.
• Support Zero Trust security initiatives and network segmentation strategies.
• Monitor and remediate security vulnerabilities affecting network infrastructure.
• Implement secure remote access technologies, including VPN and multi-factor authentication integrations.
• Assist with incident response activities related to network security events.
• Participate in vulnerability assessments and remediation planning.
• Collaborate with cybersecurity teams to ensure compliance with organizational security standards.

• Design and maintain resilient network architectures supporting disaster recovery objectives.
• Ensure redundant Internet connectivity and failover capabilities.
• Support replication technologies and recovery connectivity for critical systems.
• Participate in disaster recovery planning, documentation, and annual testing exercises.
• Develop and maintain network recovery procedures and technical documentation.

• Monitor enterprise network health using monitoring and alerting platforms.
• Analyze logs, packet captures, and performance metrics to troubleshoot complex issues.
• Identify recurring problems and implement long-term solutions.
• Maintain network documentation, topology diagrams, and configuration standards.
• Produce reports on network availability, uptime, and performance metrics.

• Collaborate with infrastructure, cybersecurity, systems administration, and application teams to support enterprise initiatives.
• Work with Internet service providers and telecommunications vendors to resolve issues and coordinate upgrades.
• Evaluate new networking technologies and provide recommendations for modernization.
• Support procurement activities by providing technical specifications and architecture guidance.
• Participate in change management processes and planned maintenance activities.

• Serve as the senior technical resource for network architecture and engineering.
• Mentor junior engineers and IT staff on networking best practices.
• Develop and maintain standard operating procedures and technical documentation.
• Participate in after-hours maintenance windows and emergency incident response as required.
• Promote continuous improvement and operational excellence across network services.

• Develop the long-term network strategy aligned with DAN's mission and business objectives.
• Maintain comprehensive infrastructure documentation, architecture diagrams, and operational standards.
• Lead technology lifecycle planning, infrastructure modernization, capacity forecasting, and infrastructure budgeting.
• Participate in annual IT budgeting, forecast infrastructure replacement costs, recommend capital expenditures, and evaluate operational expenditures.
• Identify operational risks and recommend mitigation strategies.
• Evaluate emerging networking technologies and prepare business cases for adoption.
• Serve as the primary technical advisor to the Vice President of IT.
• Ensure institutional knowledge is documented and transferred.

• Establish enterprise networking standards, configuration baselines, naming conventions, and engineering best practices.

• Maintain standard network configurations, backups, version control, and configuration compliance.
• Manage hardware lifecycle, warranty management, firmware lifecycle, end-of-life planning, technology refreshes.
• Coordinate patch management, firmware management, certificate lifecycle, IPAM, network inventory, network diagrams, disaster recovery documentation, ISP management, circuit inventory, and telecom contracts.

• Manage vendor relationships, review contracts, evaluate new products, negotiate technical solutions, and participate in vendor selection.
• Present infrastructure, health metrics, outage summaries, risks, and investment recommendations to executives.
• Participate in Change Advisory Board (CAB) reviews.
• Own KPIs including uptime, SLA compliance, MTTR, capacity utilization, and incident trends.

• Develop automation using PowerShell, Python, Ansible, Terraform, Infrastructure as Code, and configuration automation.
• Support AI-assisted monitoring, SASE, Secure Service Edge, SD-Branch, cloud-native networking, and Zero Trust evolution.

• NAC (Cisco ISE, Aruba ClearPass, FortiNAC), 802.1X, SAML, OAuth, LDAP, RADIUS, TACACS+, DNS Security, WPA3, RF planning, Azure ExpressRoute, Azure Virtual WAN, Azure Front Door, LogicMonitor, Datadog, Azure Monitor, Microsoft Sentinel.

• Project management, cross-functional collaboration, business continuity planning, risk assessment, policy development, technical writing, vendor negotiation, technology evaluation.
• Strategic thinking, decision making, conflict resolution, executive presentation skills, adaptability, continuous learning, coaching and mentoring.
• Mentor engineers, develop technical training materials, lead

• Demonstrated expertise in enterprise networking technologies, including routing, switching, firewalls, VPNs, and wireless infrastructure.
• Extensive experience designing and supporting hybrid cloud networking solutions utilizing Microsoft Azure and Microsoft Entra ID.
• Strong knowledge of network security principles, Zero Trust architecture, segmentation, and secure remote access technologies.
• Experience configuring and troubleshooting enterprise firewalls and network security appliances.
• Proficiency in network monitoring, diagnostics, packet analysis, and performance optimization.
• Experience supporting disaster recovery architectures and high-availability network designs.
• Strong analytical, problem-solving, organizational, and communication skills.
• Ability to manage multiple priorities while maintaining excellent customer service and technical excellence.

• Bachelor’s degree in information technology, Computer Science, Network Engineering, or a related field; equivalent experience may be considered.
• Minimum of 7 years of progressively responsible experience in enterprise network engineering.
• Experience supporting large-scale Microsoft-based enterprise environments.
• Experience with hybrid cloud infrastructure and remote workforce technologies.
• Proven experience leading complex network implementations and upgrades.

• CompTIA Network+

• Certified Information Systems Security Professional (CISSP) (preferred)

• Microsoft 365

• Fortinet Firewalls

• Aruba or Meraki Wireless
• SD-WAN Technologies

• VPN Technologies

• SolarWinds, PRTG, or similar monitoring platforms
• Wireshark and packet analysis tools
• Fiber circuits and enterprise telecommunications infrastructure
• VoIP and unified communications platforms
• Disaster recovery and business continuity networking solutions

The primary worksite is the DAN office in Durham, North Carolina.

Following an introductory period (3 – 6 months), this position will be eligible for telecommuting or a remote work arrangement.

Details will be discussed during the interview process