Network Engineer II

iT1, a leading national technology solution provider headquartered in Tempe, AZ, is looking for a skilled and experienced Network Engineer II to join our Consulting team. iT1 has been ranked as one of Arizona’s Best Places to Work for over a decade, running in the Small Business category. This role is an exciting opportunity to continue your career in the IT consulting and managed services world. You will be exposed to many of the top technology offerings in the market and can work with some of the most talented engineers in the country.
The Network Engineer II provides day-to-day operational support for the client’s in-scope network, connectivity, wireless, security, optical, voice, and unified communications infrastructure. With at least two years of relevant network support experience and hands-on Cisco ACI/APIC experience, the engineer monitors platform health, performs incident triage and routine troubleshooting, implements approved standard changes, maintains documentation, and escalates complex issues to senior engineers, carriers, or technology vendors. The role works closely with iT1 service management, the dedicated Client Success Manager, client stakeholders, and other technical teams.

Requirements

• Serve as a dedicated Tier 2 network support resource, resolving incidents within documented procedures and escalating complex or high-impact conditions to senior engineering resources.
• Provide operational support for routers, LAN and data center switches, firewalls, load balancers, network access control, WAN edge devices, VPN infrastructure, routing and switching protocols, VLANs, segmentation, QoS, and high-availability configurations.
• Provide hands-on Cisco ACI/APIC operational support, including fabric-health monitoring, fault and event triage, endpoint and EPG troubleshooting, VLAN/VXLAN connectivity. Escalate fabric design or high-risk changes to senior engineers.
• Monitor, investigate, and improve infrastructure availability and performance using health, capacity, telemetry, configuration, threshold, log, interface, latency, jitter, packet-loss, redundancy, and failover indicators where supported.
• Troubleshoot and manage Cisco SD-WAN controllers, edge devices, overlays, tunnels, internet circuits, and site-to-site or remote-access VPN services.
• Support wireless controllers and access-point infrastructure, including availability, registration, RF utilization indicators, authentication failures, roaming, interference, firmware status, configuration backup, security alerts, capacity, and coverage trends.
• Perform alert validation, incident triage, service-restoration actions, incident remediation, problem management, root-cause analysis, post-incident reviews, known-error tracking, and corrective-action follow-up.
• Implement approved standard changes and assist senior engineers with normal or emergency changes, including maintenance-window coordination, validation, rollback execution, closure documentation, and follow-up actions.
• Coordinate OS, firmware, and infrastructure patching activities within the approved scope, including planning, testing, rollout, validation, and vendor coordination.
• Maintain accurate HLD/LLD documentation, logical and physical diagrams, configuration records and backups, SOPs, runbooks, troubleshooting procedures, IPAM/DNS/DHCP records, inventories, monitoring definitions, change logs, and knowledge-base articles.
• Provide technical input for recurring service reviews, including infrastructure health, incident and alert trends, capacity, performance, lifecycle concerns, risks, documentation currency, vendor cases, and continuous-improvement recommendations.

JOB QUALIFICATION REQUIREMENTS:

• Minimum of two years of hands-on experience supporting enterprise or public-sector network environments in a managed-services, NOC, infrastructure operations, or similar support model, including practical Cisco ACI/APIC administration or troubleshooting experience.
• Demonstrated troubleshooting experience across routing, switching, firewalls, VPN, wireless, SD-WAN, network segmentation, QoS, high availability, and network performance, with the judgment to escalate issues beyond the role’s level of authority.
• Hands-on Cisco ACI/APIC experience is required, including working knowledge of tenants, application profiles, EPGs, bridge domains, contracts, endpoint learning, fabric health, faults, interface policies, and basic leaf-spine troubleshooting. Experience with Cisco enterprise networking should also include Catalyst switching, ISR/ASR or Catalyst 8000 routing, common routing protocols such as BGP, OSPF, and EIGRP, and switching protocols such as Spanning Tree; Nexus experience is strongly preferred.
• Working knowledge of Palo Alto, Cisco ASA/Firepower, and Meraki security or SD-WAN platforms.
• Experience with enterprise wireless controllers and access points, RF health indicators, authentication, roaming, interference analysis, capacity, coverage, and firmware lifecycle support.
• Strong technical writing skills for diagrams, SOPs, runbooks, RCA/PIR documents, change records, knowledge articles, configuration records, and client-facing updates.
• Ability to work independently in a dedicated client role while collaborating effectively with service-desk, NOC, engineering, service-management, and client teams.
• Ability to participate in after-hours maintenance, major-incident response, or escalation coverage as required by the 24 x 7 service model.
• Must be eligible to work as a US-based iT1 employee and perform services remotely or locally as required.

PREFERRED CERTIFICATIONS:

• Cisco CCNP Enterprise or progress toward a current professional-level Cisco certification.
• Cisco Certified Specialist credentials in enterprise core, advanced routing, SD-WAN, wireless, security, or data center technologies.

REQUIRED CERTIFICATIONS:

• Cisco CCNA or a comparable current associate-level networking certification, or equivalent expertise demonstrated through at least two years of relevant network support experience, including hands-on Cisco ACI/APIC experience.
• Vendor certifications required to maintain authorized administrative access to assigned platforms, when applicable.

Benefits

• Medical, dental, and vision benefits with highly subsidized premiums
• Two weeks paid time off in your first year, with increasing PTO as tenure increases, and most major holidays off
• 401(k) Plan with employer match
• Onsite Fitness Center
• Onsite Monthly Massages