Senior Network Engineer

Senior Network Engineer Lightera is seeking a hands-on Senior Network Engineer to support and enhance global network infrastructure across corporate offices, manufacturing facilities, datacenters, and cloud-connected environments, including LAN, WAN, wireless, routing, switching, and secure remote access. This role supports strategic initiatives including network modernization, Zero Trust/SASE adoption, and IT/OT network segmentation.

Key Responsibilities

Administer enterprise LAN, WAN, and wireless infrastructure, including Juniper EX switching and Juniper Mist wireless platforms. Configure, troubleshoot, and optimize Layer 2/3 services, VLAN design, and network segmentation. Serve as Tier 2/Tier 3 escalation support. Coordinate with carriers and vendors, and maintain network diagrams and documentation.

Implement and maintain firewall policies (Fortinet FortiGate, FortiManager, FortiAnalyzer), NAT, VPN, and access controls. Administer Cato Networks SASE, ZTNA policies, and identity-aware access controls in support of Zero Trust adoption. Participate in security assessments, remediation, and hardening efforts.

Lead implementation of IT/OT network segmentation projects across manufacturing facilities using Fortinet platforms. Own documentation of network flows and firewall requirements, and design segmentation controls and industrial security architectures. Collaborate with Infrastructure, Cybersecurity, Manufacturing, Engineering, and Operations teams; own validation testing and post-deployment support.

Participate in network upgrade, modernization, and datacenter refresh projects. Maintain network standards, procedures, and runbooks. Support business continuity/disaster recovery requirements and ensure changes follow change management processes.

Key Competencies

TCP/IP, routing/switching, VLANs, DHCP, DNS, NAT, VPN, 802.1X/NAC, network performance analysis and packet capture. Juniper EX switching and Juniper Mist wireless preferred; RF fundamentals and AP deployment/management.

Firewall administration (Fortinet FortiGate/FortiManager/FortiAnalyzer preferred), SD-WAN, Cato Networks SASE preferred (transferable experience with Zscaler, Netskope, Prisma Access, or Cisco Secure Access considered), ZTNA, SWG, CASB, Zero Trust principles.

Industrial networking, Operational Technology (OT) environments, industrial cybersecurity concepts, network segmentation initiatives in manufacturing settings.

Azure or AWS networking, network monitoring and performance analysis platforms.

Working knowledge of endpoint security tools, vulnerability management, and patch remediation. Hands-on experience with Windows/Linux server administration. Practical understanding of backup/recovery platforms and disaster recovery processes. Working knowledge of Active Directory, SSO/MFA, and identity-driven network access control.

Required Qualifications

Bachelor's Degree in Information Technology, Computer Science, Engineering, or related field. Equivalent experience considered in lieu of formal education.

10+ years of enterprise network engineering experience, including global multi-site environments, enterprise wireless platforms, and firewall/network security technologies

General Expectations

Demonstrate effective communication (verbal, written) skills.

Proficient with MS Office applications.

Maintain discretion when working with confidential and proprietary information.

Strict adherence to company safety policies and procedures.

Conform to all aspects of Lightera's "Standards of Conduct".

Serve as a role model for safe work practices and behaviors.

Additional duties as assigned.

Working at LIGHTERA means having the opportunity to realize ideas, experience innovation, and discover new solutions for the future. In addition to our dynamic work environment, we offer competitive salaries and generous benefits programs, including medical, dental, tuition reimbursement, and a matching 401(k) plan.