Senior Network Engineer

As a member of the company’s Information Technology team, the Sr. Network Engineer will be responsible for a variety of IP, telecom, and documentation support. Job duties will include leading network design updates and upgrades and leading any network architectural projects. The Sr. Network Engineer provides subject matter expertise, leads ongoing network support and maintenance, and serves as escalation, assistance, training support to other engineers.

Duties:

• Lead critical projects, design updates, and architectural projects while working well as part of a group and providing technical expertise. 
• Lead the design, grooming, upgrading, and architecture of network to improve network security, reliability and scalability.
• Lead the design and deployment of new technologies or upgrade existing capabilities as assigned.
• Lead the design and continuous monitoring and response to alarms for all network equipment using a variety of tools for incident handling and remediation.
• Improve network reliability and scalability.
• Design and deploy new datacenter build-outs, expansions, and hardware refresh projects.
• Review maintenance of network documentation to include diagrams, spreadsheets, databases, and processes documents.
• Perform audits and updates of devices for accuracy of device descriptions, port configurations, monitoring settings, etc.
• Manage internal IPv4 and IPv6 address database.
• Work on-call weekend and overnight rotation as needed cycled between the Systems, Network and Security teams.
• Provide day to day support on all network related request fulfillment, incident response, documentation, and follow-up.
• Provide 8 x 5 support of the IT telecom and network infrastructure environment (LAN, WAN, wireless, etc.).
• Enter changes in approved and scheduled maintenance windows (i.e. software upgrades, hardware replacement, migrations, etc.).
• Maintain network equipment inventory database (quantity, sparing, part numbers, serial numbers, etc.) on high value and critical components.

Requirements

Knowledge, Skills & Abilities:

• Ability to thrive in a hybrid work environment that consists of at least two days per week (including Tuesdays and Wednesdays for in-person team collaboration) in a downtown Denver office
• Must be able to work during normal business hours, and assist with changes as necessary during maintenance windows as scheduled for nights and weekends
• Occasional travel (10%) for onsite support, datacenter build-out/expansions, or for training as needed.
• Expert knowledge of switched network topologies including VLANs, trunking, spanning tree, port configuration, CDP, stacking, redundancy, networking architecture, etc.
• Expert knowledge of routed network topologies including OSPF/BGP, HSRP/VRRP, QoS.  (Cisco, etc.)
• Strong understanding of designing and implementing OSPF areas, BGP WAN networks, and other routing protocols using Cisco equipment
• Expert knowledge of troubleshooting and network tools such as ping, traceroute, telnet, nslookup, etc.
• Expert understanding of the OSI Reference Model
• Expert experience with network monitoring, management and secure authentication protocols and tools such as TACACS+/RADIUS. (Cisco ISE, ACS, etc.)
• Understanding of information security practices and trends.
• Strong attention to detail and organizational skills
• Problem solving and troubleshooting skills
• Strong written and verbal communications skills
• Understanding of copper and fiber cabling and cable management
• Proficient with the Microsoft Office Suite with emphasis in Excel and Visio
• Familiar with ISO 27001/2, SOC2, PCI, NIST, HIPPA, and Sarbanes-Oxley processes.
• A knack for grace under pressure and a sense of urgency that puts the customer first.
• Strong of monitoring/alerting methodologies and tools.  (Splunk, SolarWinds, Cacti, Scrutinizer, etc.)
• Experience with load balancing and tools (F5, etc.).
• Understanding of network security design concepts to include wireless security, intrusion prevention/detection, firewall architecture, SIEM, encryption, investigations, forensics, and incident management response to enable joint projects with the Information Security Team.

Education/Experience:

• Bachelor’s or trade school degree preferred or equivalent work experience
• At least 10+ years IT experience with at least 8+ years network background
• Professional certifications strongly preferred (CCNP Enterprise (R&S/Design), CCNP Wireless, SANS, ISC2, etc.)

Physical Demands:

The physical demands described here are representative of those that mus