Network Engineer II

Your Role at TessyThe Network Engineer is responsible for the design, implementation, security, reliability and day-to-day operation of Tessy Plastics' enterprise network infrastructure across corporate, manufacturing and remote environments.This position will provide senior-level technical leadership for Tessy's routing, switching, wireless, firewalls, SD-WAN, network access control, VPN, voice and collaboration and related network technologies. The Network Engineer will ensure the network is secure, highly available, scalable and capable of supporting the company's business and manufacturing operations.The role will work closely with Information Services, Cybersecurity, Infrastructure, Automation, Engineering and business teams to design and maintain secure connectivity between traditional IT environments, manufacturing/OT systems, cloud services and remote locations.The Network Engineer will also lead or participate in network projects, technology upgrades, troubleshooting, incident response, infrastructure improvements and the development of network standards and documentation. Occasional after-hours and weekend work may be required for planned maintenance, upgrades and critical incidents.What You'll Be DoingDesign, implement, configure, maintain and troubleshoot enterprise LAN, WAN, wireless and network security infrastructure.Manage and support enterprise routing, switching, VLANs, subnetting, NAT, ACLs, routing protocols and network segmentation.Administer and maintain enterprise firewalls, VPN technologies, network security policies and secure remote connectivity.Monitor network availability, performance, capacity and security and proactively identify and resolve potential issues before they impact the business.Design and maintain highly available and redundant network solutions to maximize uptime and business continuity.Manage and support enterprise wireless infrastructure, including wireless controllers, access points, authentication, coverage and performance.Support and maintain SD-WAN and multi-site network connectivity, including coordination with telecommunications and Internet service providers.Support data center networking and related technologies, including core switching, network fabrics and high-speed connectivity.Support network access control and authentication technologies used to secure corporate and manufacturing environments.Work closely with Automation and Engineering teams to securely connect manufacturing and industrial systems to the enterprise network while maintaining appropriate IT/OT segmentation and security controls.Administer and support network-related voice and collaboration technologies, including VoIP, voice gateways, unified communications, conference room systems and related services.Support network services including DHCP, DNS, IP address management, network authentication and related infrastructure.Participate in cybersecurity initiatives involving network security, vulnerability remediation, firewall security, network segmentation, access control and incident response.Lead or participate in network upgrades, migrations, technology implementations, infrastructure refreshes and other network-related projects.Perform root-cause analysis for complex or recurring network issues and implement permanent corrective actions.Develop and maintain network standards, architecture documentation, network diagrams, configurations, operating procedures and troubleshooting runbooks.Maintain accurate records of network devices, IP addressing, VLANs, circuits, configurations and related infrastructure.Identify opportunities to automate network administration, monitoring, reporting, configuration and provisioning activities.Participate in change management, incident management, problem management and other IT service management processes.Work with vendors and service providers to troubleshoot issues, manage support cases, evaluate solutions and coordinate installations and upgrades.Assist with network disaster recovery and business continuity planning and participate in recovery testing.Provide technical leadership, mentoring and knowledge transfer to other members of the Information Services team.Provide senior-level escalation support for complex network incidents and problems.Maintain appropriate documentation for tickets, changes, projects and operational activities.Participate in an on-call rotation and perform scheduled maintenance outside of normal business hours when required.What You'll BringBachelor's degree in Computer Science, Information Technology, Engineering, or a related field preferred; equivalent combination of education and experience will be considered.Cisco CCNA, CCNP, Palo Alto, or other relevant industry certifications are preferred but not required.Demonstrated experience and technical proficiency may be considered in lieu of specific certifications or formal education.7+ years or equivalent demonstrated experience in enterprise network engineering, administration, troubleshooting and design.Strong hands-on experience with enterprise routing and switching technologies.Demonstrated experience designing, implementing and supporting LAN, WAN and wireless networks.Strong understanding of TCP/IP, VLANs, subnetting, routing, switching, NAT, DHCP, DNS, VPN and network security concepts.Experience administering enterprise firewalls and implementing firewall policies and security controls.Experience troubleshooting complex network issues using packet analysis, logs, monitoring tools and other diagnostic techniques.Experience supporting highly available and redundant network environments.Experience with network monitoring, performance management and capacity planning.Strong understanding of network security, segmentation, access control and secure remote connectivity.Ability to analyze complex technical problems, identify root cause and develop effective solutions.Strong written and verbal communication skills with the ability to communicate technical information to both technical and non-technical audiences.Ability to work independently, prioritize multiple projects and incidents and make sound technical decisions.Strong documentation and organizational skills.Ability to participate in scheduled after-hours maintenance and an on-call rotation.Preferred:Cisco Catalyst switching and enterprise routingCisco Nexus switching and data center networkingVXLAN and network fabric technologiesPalo Alto firewallsCisco DNA CenterCisco Wireless LAN Controllers and enterprise wirelessVeloCloud/VMware SD-WANForescout or other Network Access Control (NAC) technologiesCisco Umbrella or other DNS security platformsIPAM solutionsCisco CUCM, voice gateways, VoIP and unified communicationsCisco Webex and collaboration technologiesMicrosoft NPS and network authenticationNetwork automation and scripting, including PowerShell, Python, Ansible, or similar technologiesCloud networking, including Azure and/or AWSManufacturing, industrial, or OT networking environmentsIT/OT network segmentation and secure integration of industrial systemsAdditional ExpectationsDemonstrates a commitment to continuous improvement and staying current with emerging networking and cybersecurity technologies.Works collaboratively with Information Services, Cybersecurity, Automation, Engineering and business teams.Maintains a strong focus on security, reliability, availability and customer service.Willingness to share knowledge, mentor team members and contribute to the development of network standards and best practices.CompensationSalary Range: $115,000–$130,000.The range displayed on each job posting reflects the minimum and maximum target base pay for new hire salaries of the position. This position may also be eligible for discretionary bonuses. Within the range, individual pay is determined by additional job-related factors, including knowledge, skills, experience, tenure and relevant education or training. The pay scale is subject to change depending on business needs. Your Recruiter can share more about the specific salary range or benefits during the hiring process.Benefits· Health, Dental & Vision Insurance: 100% employer-paid for employee-only coverage, +1 and Family coverage options available· Additional Incentives: Quarterly profit-sharing program· 401K Company matchApplicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time.Tessy Plastics Corp. is an equal opportunity employer. Tessy evaluates qualified applicants without regard to race, color, religion, gender, national origin, age, sexual orientation, gender identity or expression, protected veteran status, disability/handicap status, or any other legally protected characteristic.