Senior Network Engineer

Castleton Commodities International is hiring a Senior Network Engineer to own and evolve our enterprise network architecture while modernizing how the network is managed and changed. A core focus of this role is driving a shift from manual “click-ops” administration to Network Automation and Infrastructure as Code (IaC), so network and firewall changes become repeatable, auditable, and deployed through code (for example, Terraform and Ansible) rather than through admin portals with limited documentation.

The Network Engineer will be hands‑on in design, implementation, operations, and troubleshooting across on‑prem and cloud environments, while also mentoring others and helping the broader team adopt an automation‑first mindset.

• Develop andmaintainenterprise network architecture, including LAN, WAN, WLAN, SD-WAN, and data center environments.
• Design and implement scalable, secure, and resilient network solutions aligned with business objectives.
• Evaluatenew technologies and make recommendations to improve performance and security.

• Lead the adoption of Network Management as Code using Terraform, Ansible, APIs, and scripting (Python).
• Replace manual “click-ops” workflows with automated, version-controlled deployments and documented patterns.
• Enable consistent delivery of network and security changes through code review, standardized templates, and repeatable releases
  • Influence and enable the existing team to adopt and sustain anIaCmindset through coaching, standards, and reusable modules.

• Configure, deploy, and maintain network equipment, including routers, switches, firewalls, VPN appliances, and wireless infrastructure.
• Oversee lifecycle management of network hardware, software, and licensing
• Configure and manage wireless controllers (WLCs), access points, and wireless switches.
• Manage cloud-based networking across Azure, AWS, and hybrid connectivity, including Express Route, Direct Connect/VPN, Transit Gateway, and core cloud network constructs such as firewall, load balancer, Cloud WAN, and WAF.

• Implement andmaintainnetwork security controls, including segmentation, zero‑trust principles, firewalls, IDS/IPS, and NAC solutions.
• Collaborate with security teams to ensure adherence to compliance and cybersecurity standards.
• Conduct regular vulnerability assessments and support remediation of network-related findings.

• Monitor network performance and availability using enterprise tools such as Solar Winds,Plixer, Cisco Catalyst Center,Entuity, or similar platforms.
• Provide Tier 2/3 support for escalated network-related issues.
• Lead root cause analysis for network issues and develop long-term fixes
• Create and maintain detailed documentation of network configurations, diagrams, and processes.

• Serve as a technical escalation point for Network Engineers and other IT teams.
• Lead large-scale network projects, migrations, and upgrades.
• Collaborate with cross-functional teams including infrastructure, cybersecurity ,Dev Ops, Data Science & Technology, and application teams.
• Participate in vendor management and partner with vendors to drive outcomes

• Bachelor's degree in Computer Science , Management Information Systems, or relevant field (or equivalent experience)
• 10+ yearsof experience supporting complex, multi- site and cloud-connected environments
• Strong experience withfirewall platforms such as Cisco FTD and Palo Alto (or equivalent enterprise platforms)
• Experience with VPNs (IPSec, SSL), load balancers, and wireless technologies
• Experience with SD-WAN solutions including Meraki and Velo Cloud
• Strong familiarity with network automation (Python, Ansible, APIs, and Terraform)
• Proficiency with cloud networking (Azure/AWS and OCI networking services)
• Experience maintaining and supporting WLAN environments
• Strong understanding of TCP/IP, routing protocols, switching technologies (STP, VLANs, Ether Channel), andfirewall concepts

• Relevant certifications such as CCNP, CCIE, JNCIP, PCNSE, NSE, or…