Senior Network Engineer

MAG Aerospace is recruiting for a Senior Network Engineer who will Architect and manage secure, scalable enterprise network infrastructure that connects business operations across cloud and on-premises environments. You'll design robust network solutions that ensure seamless connectivity, security, and performance while supporting digital transformation initiatives and multi-tenant secure environments.

Primary Responsibilities

• Develop network monitoring, automation, and performance optimization strategies
• Configure and manage Microsoft Azure networking services (VNets, ExpressRoute, VPN Gateway, Network Security Groups)
• Evaluate, re-evaluate, understand, and support existing/legacy network requirements, including documenting and extending/revisiting implementations
• Design and implement enterprise network architectures for hybrid cloud environments
• Work with other IT cross-functional teams for collaboration where networkoperations could be impacted
• Deploy and maintain Fortinet security appliances (FortiGate firewalls, FortiAnalyzer, FortiManager)
• Configure and optimize Cisco enterprise networking equipment (switches, routers, wireless controllers)
• Implement network segmentation and microsegmentation strategies for secure multi-tenant environments
• Design and deploy software-defined WAN (SD-WAN) solutions
• Configure quality of service (QoS) for business-critical applications

Secondary Responsibilities

• Support cybersecurity compliance requirements
• Implement zero-trust network security architectures
• Design and configure network access control (NAC) solutions
• Perform network security assessments and vulnerability remediation
• Implement advanced threat protection and intrusion prevention systems
• Support compliance requirements (SOX, PCI-DSS, HIPAA, SOC 2)
• Manage network automation and infrastructure-as-code initiatives
• Provide escalation support for complex network issues
• Implement network security controls (encryption, authentication, segmentation)
• Design and configure firewall rules and intrusion detection
• Perform network vulnerability assessments
• Implement zero-trust network architectures

Qualifications: 

• 7+ years of progressive experience in enterprise network engineering
• Advanced Knowledge of routing, switching, and network protocols (BGP, OSPF, EIGRP, STP, VLANs, QoS, etc.)
• Hands-on experience with Microsoft Azure networking (Virtual Networks, Load Balancers, Application Gateway, Microsoft Entra ID)
• Hands-on experience with enterprise firewalls and security appliances (Fortinet, Cisco ASA/FTD, Palo Alto,etc.)
• Experience with FortiGate SD-WAN implementation
• Experience with Cisco Identity Service Engine (ISE)
• Experience troubleshooting network security protocols (IPSec, SSL/TLS, 802.1X)

Preferred Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field
• Experience with Cisco enterprise equipment (Catalyst switches, ISR/ASR routers, Wireless LAN Controllers)
• Experience with network automation tools (Ansible, Terraform, Python scripting)
• Understanding of container networking (Kubernetes, Docker)
• Experience with SD-WAN solutions (Cisco Viptela, Silver Peak, VeloCloud)
• Familiarity with network monitoring tools (FortiManager, PRTG, Nagios)
• Experience with secure remote access solutions (VPN, ZTNA)
• CCNA/CCNP, Azure certifications, or Fortinet NSE certifications

Clearance:

• Must be eligible for Secret Security Clearance
• US Citizenship required

The position is contingent upon candidate’s ability to meet physical and medical requirements as needed by the position; including compliance with all applicable federal, state, and local jurisdictional requirements.