Senior Network Engineer

The Role 

Our company is a fast-growing retail and cultivation business in the cannabis sector. We are seeking a Senior Network Engineer to join our team and help us ensure our network infrastructure is up-to-date and in compliance with our company's standard practices.  We are seeking an experienced Senior Network Engineer with deep expertise in Cisco Meraki and Fortinet technologies to design, implement, and maintain secure, scalable network infrastructure across our enterprise and remote sites. This role is critical in supporting ongoing network modernization efforts, managing hybrid cloud connectivity, and enhancing security posture in distributed environments such as branch offices and retail locations. Additionally, they should be proficient in working with cloud vendors like Azure and AWS, wireless planning, monitoring, and troubleshooting, and configuring security permissions for service desk personnel.

This is a Chicago based position. It's primarily remote - in office as needed. 

Responsibilities 

Network Design & Deployment

• Architect and deploy enterprise-class networks using Cisco Meraki switches, wireless APs, and SD-WAN appliances.
• Configure and manage Fortinet firewalls (FortiGate), VPNs, and security fabric for perimeter defense and remote access.
• Design resilient LAN/WAN architectures with emphasis on uptime, throughput, and security.
• Lead implementation of network upgrades, migrations, and expansions across multiple sites.

Operations & Troubleshooting

• Monitor network performance using tools like Meraki Dashboard, FortiAnalyzer, and Syslog solutions.
• Troubleshoot complex connectivity issues involving routers, firewalls, switching, and cloud-managed wireless.
• Provide Tier 2/3 support for network-related incidents and escalations.
• Participating in on-call rotation and occasional travel to remote sites throughout the continental US

Security & Compliance 

• Implement network security best practices, including segmentation, ACLs, firewall policies, and VPN tunnels.
• Perform regular firewall rule audits, vulnerability mitigation, and logging review.
• Assist in compliance with frameworks such as PCI-DSS, HIPAA, or SOC 2 as applicable.

Documentation & Process

• Maintain detailed documentation of network designs, configurations, diagrams, and procedures.
• Collaborate with IT, Security, and DevOps teams to ensure cross-functional network readiness.
• Participate in DR/BCP planning and testing for network continuity.

Qualifications  

• Bachelor's degree or equivalent combination of education, training, and/or experience preferred
• 7+ years of hands-on experience with Cisco Meraki products (MX, MS, MR series).
• 5 + years of hands-on experience with Fortinet solutions, especially FortiGate, FortiManager, and FortiAP.
• Experience delivering remote support via colleagues/smart hands who are onsite.
• Wireless planning, monitoring, and troubleshooting experience.
• Working with Network Management Systems such as Solarwinds or FortiManager.
• Ability to participate in on-call rotation and occasional travel to remote sites throughout the continental US.
• Excellent organizational and multi-tasking skills with commitment to quality work
• Adapts and thrives in a demanding and fast-paced environment.
• Ability to anticipate needs, find alternative solutions and be proactive in achieving desired outcomes
• Strong knowledge of routing/switching protocols (OSPF, BGP, STP, VLANs).
• Proficiency with VPN technologies (IPSec, SSL VPN, site-to-site).
• Experience managing multi-site or retail network environments.
• Familiarity with cloud networking (Azure, AWS VPCs) is a plus.
• Strong documentation and communication skills.

Preferred Certifications

• Cisco Meraki CMNA (Cisco Meraki Network Associate)
• Fortinet NSE 4 or higher
• CCNA/CCNP (nice to have)
• CompTIA Network+ or Security+ (optional)

Physical Requirements 

• Ability to travel to retail and production facilities (10–20% travel expected).
• Must be able to lift 25 pounds occasionally.
• May require after-hours or on-call availability during emergencies.

Additional Requirements