Network Engineer

Position: Network Engineer

Pay Class: Full Time

Reports to: Director, IT Infrastructure & Security

Location: New York City

Salary: $85,000 - $100,000

Position Overview:

The Network Engineer will play a critical role in maintaining and advancing Project Renewal's network infrastructure, spanning cloud services, servers, workstations, VoIP systems, Internet connectivity, firewalls, switches, surveillance systems, mobile devices, wireless access points, and physical access control systems. This position requires regular travel to over 20 Project Renewal sites across New York City to support infrastructure projects and provide on-site technical support. The ideal candidate is a strategic thinker with strong technical expertise, capable of leading complex network initiatives and collaborating across teams to enhance the robustness, efficiency, and scalability of our systems.

Project Renewal's IT department maintains a comprehensive IT Runbook that outlines standardized processes and procedures, including a formal Change Management layer to ensure IT governance and operational consistency. The Network Engineer will be expected to operate within this framework, contributing to its adherence and continuous improvement across all infrastructure initiatives.

Responsibilities/Duties:

• Lead the design, implementation, and maintenance of our complex network and server infrastructure, ensuring high availability and optimal performance.
• Resolve critical network issues, maintaining the stability and security of our network services using advanced network troubleshooting.
• Resolve L3-level issues across networking, Windows Server, virtualization, and cloud platforms.
• Perform network capacity planning, performance tuning, and security hardening.
• Oversee the installation of new hardware and network systems and manage the upgrading of existing systems to meet our evolving business needs.
• Collaborate with cross-functional teams to ensure a cohesive and secure IT infrastructure.
• Support and collaborate with team members by sharing technical knowledge, maintaining thorough documentation, and promoting best practices in network, server administration, and security operations.
• Keep abreast of new technologies and network practices and evaluate their potential application within our organization.
• Follow and contribute to the organization's IT Runbook, including adherence to the Change Management process for infrastructure modifications and upgrades.
• Ensure all network changes are documented and approved in alignment with IT governance policies.
• Support cloud migration by designing and maintaining hybrid network connectivity.
• Implement and monitor security controls, including firewall rules, endpoint protection, and patching in alignment with organizational policies.
• Ensure BCDR (business continuity and disaster recovery) plans include both network and server components.
• Provide support for mission-critical systems and services, ensuring operational continuity.
• Provide on-site support for IT initiatives and infrastructure projects at Project Renewal locations across New York City (20+ sites), traveling regularly as part of the role.
• Remain available for 24-hour on-call support and presence during emergencies or critical incidents.
• Work on additional tasks and projects assigned by supervisor.

Required Skills:

• Proven expertise in managing, configuring and troubleshooting enterprise-wide LANs, WANs, WLANs, VPNs, VoIP systems, and related network technologies.
• Strong understanding of IT infrastructure and hardware, including hands-on experience with routers, switches, firewalls, servers, surveillance systems, mobile devices, wireless access points, physical access control systems.
• Advanced knowledge of application transport and network infrastructure protocols (e.g., TCP/IP, DNS, DHCP, SNMP)
• Proficiency in creating accurate network diagrams and documentation to support design, planning, and implementation of network communication systems.
• Experience with Cisco router configuration and hardening (Cisco certifications are a plus)
• Solid understanding of IP routing and routing protocols such as EIGRP, OSPF, and BGP.
• Familiarity with Microsoft Azure services (IaaS, PaaS, SaaS), including virtual networks, virtual machines, identity management, and Microsoft 365 administration.
• Experience with Cisco Meraki and other Cisco hardware/software solutions is highly desirable.
• Strong analytical and problem-solving skills with keen attention to detail.
• Excellent interpersonal and collaborative skills, with the ability to lead technical teams and manage cross-functional projects effectively.
• Excellent written and verbal communication skills, with the ability to convey technical concepts to non-technical stakeholders.

Qualifications:

• Proven ability to design and manage complex IT projects involving networking and adjacent systems, coordinating across multiple teams and vendors.
• Hands-on experience with Cisco Meraki firewalls, switches, surveillance systems, and wireless access points.
• Preferred experience in scoping, designing, implementing, and managing solutions based on:
• Microsoft Hyper-V and Windows Server.
• Microsoft Azure (including Entra ID/Azure AD, virtual networks, virtual machines, web applications, SQL databases, and VPNs).
• Microsoft 365 administration (Exchange, Teams, SharePoint, OneDrive, etc.).
• Endpoint management tools (Intune, Group Policy, etc.).
• Backup and disaster recovery solutions.

Education and Experience Required:

• Minimum of 7 years of professional experience in network engineering or a closely related field.
• Bachelor's degree in Computer Science, Information Technology, or a related discipline preferred; equivalent professional experience may be considered.
• Strong knowledge of network and security systems, including design, implementation, and troubleshooting.
• Demonstrated ability to collaborate effectively with vendors, service providers, and third-party partners.
• One or more industry certifications such as Cisco Certified Network Associate (CCNA), Cisco Certified Design Professional (CCDP), or equivalent are strongly preferred.