Job Description

Vallen's IT Infrastructure team is seeking a Senior Network Engineer to own day-to-day network operations across a distributed national branch and distribution center footprint. This role operates with significant autonomy on hardware selection, vendor engagement, and technical troubleshooting, escalating architectural decisions to the Infrastructure Manager. A key near-term focus will be supporting connectivity requirements for an Azure cloud migration, working alongside architecture and systems teams to ensure network readiness throughout the transition.

Essential Job Duties and Responsibilities:

Branch Network Lifecycle Management

• Deploy and manage Meraki MX appliances across a national branch footprint, including configuration, troubleshooting, and lifecycle management
• Coordinate new circuit installations and turn-ups with ISPs and managed service partners
• Manage site surveys, cabling, and network buildouts for new branch locations
• Coordinate smart-hands dispatches for remote physical work at branch sites
• Conduct or coordinate on-site wireless network troubleshooting at customer and partner facilities

B2B VPN and Partner Connectivity

• Own B2B VPN tunnel infrastructure including NAT rules, IP object groups, and partner-facing connectivity
• Manage VPN tunnel migrations with carrier and managed service partners
• Coordinate with external security and network teams at partner organizations to resolve cross-organizational connectivity issues
• Manage DHCP reservations, DNS administration, and SNAT rules supporting partner connectivity

ISP and WAN Circuit Management

• Serve as primary point of contact for ISP service tickets and outage resolution across DIA and FTTP circuits
• Track circuit provisioning through managed service partner status meetings and ticketing systems
• Manage packet loss investigations and escalations with ISP providers

Vendor and Procurement Coordination

• Serve as primary contact for hardware vendors; manage PO creation, shipping logistics, and hardware procurement
• Manage RMA processes with manufacturers including return logistics coordination
• Evaluate and select hardware replacements when standard procurement channels are impractical
• Approve vendor quotes and drive procurement decisions independently within scope

Cloud and Enterprise Connectivity

• Design and support hybrid cloud connectivity for an ongoing Azure migration, including VPN Gateway, ExpressRoute, VNet peering, NSGs, Azure Firewall, and Private Endpoints
• Ensure network readiness for lift-and-shift workloads moving to Azure, coordinating with architecture and systems teams on connectivity requirements and cutover planning
• Manage certificate lifecycles, DNS, DHCP, and network monitoring infrastructure
• Provide escalation support for site-level and cloud connectivity issues, including QoS analysis, Teams/UC traffic optimization, and ISP coordination

Project and Cross-Functional Support

• Provide network infrastructure support for customer implementation projects including new site buildouts and storeroom deployments
• Participate in implementation calls as the infrastructure representative
• Coordinate with external network partners on firewall policy management, SSL VPN operations, and security fabric health
• Maintain network documentation, standards, and change management procedures
• Mentor junior network staff and serve as technical escalation point within the team

Qualifications

Job Qualifications:

Required:

• 5-8 years of hands-on enterprise network engineering experience
• Demonstrated Cisco Meraki MX deployment and management experience across a multi-site environment; Meraki preferred
• Experience owning B2B VPN tunnel infrastructure including NAT, SNAT, and IP object group management
• ISP circuit lifecycle experience: procurement, turn-up coordination, outage escalation, DIA and FTTP
• Strong working knowledge of routing and switching fundamentals: BGP, OSPF, VLANs, STP, and QoS
• Hands-on Azure networking experience: VNet/subnet design, hybrid connectivity, NSGs, Azure Firewall, and DNS
• Experience coordinating with external vendor and partner organizations on technical issues
• Ability to operate autonomously on hardware procurement, vendor management, and troubleshooting decisions
• Ability to communicate technical findings clearly to non-technical stakeholders

Preferred:

• Experience with Cradlepoint 5G routers and SIM management
• Familiarity with Fortinet security platforms (FortiGate, FortiAnalyzer, FortiClient EMS)
• Experience supporting cloud migration projects from a network connectivity standpoint
• Cisco Meraki CMNA (Meraki Network Associate)
• Fortinet NSE 4 or higher certification
• Microsoft Azure Fundamentals (AZ-900) or Azure Network Engineer Associate (AZ-700)
• Experience producing network reporting for non-technical stakeholders

Work Environment & Physical Demands:

Reasonable accommodations will be evaluated and may be implemented to enable individuals with disabilities to perform essential functions of this position.

• Work environment may not be temperature controlled; must have the ability to work in extreme hot or cold environments.
• Must have the ability to work in dusty conditions.
• May be required to handle hazardous materials and wear various forms of protective equipment (shoes, gloves, protective eyewear, etc.)
• May be required to pass forklift and/or other warehouse equipment certifications (written and/or driving).
• Assigned work shifts may vary and/or rotate.
• Overtime may be required; extended day, evening and weekend work may be required as job duties demand and may include little to no advanced notice.
• Must be able to handle and work physical inventory; required to lift up to 25 lbs. or greater with assistance following standard operating and safety procedures. Other physical requirements including, regularly being required to stand, walk, kneel, bend, crouch, crawl, climb and balance.
• Close vision, distance vision, color vision, peripheral vision, depth perception and the ability to adjust focus are required.

#LI-Remote