Network Engineer

At Sectigo, we align around our mission and pride ourselves in helping thousands of customers sleep better at night.

Sectigo is a leading provider of digital identity and cybersecurity solutions, offering a comprehensive suite of products to protect online transactions and communications. Our mission is to secure the digital landscape for enterprises worldwide.

“When people think Online trust management, they think Sectigo because we offer our customers unparalleled peace of mind.”

How we show up with each other and our customers every day is just as important, and we win as #OneSectigo by living out our core values - Support, Excellence, Collaboration, Teamwork, Integrity, Growth and Openness. We are committed to investing in our diverse teams where everyone understands their role and how they support our strategic goals, we drive operational excellence through scale and efficiency, and we strive to delight our customers and become the market leader in our industry. If you aspire to join a driven team that holds each other accountable to meeting our lofty goals and you’d like to be part of our growth story in delivering a market leading user experience, we’d like to talk to you.

Our new Network Engineer who will play an instrumental part of our Network Engineering team with supporting, implementing, managing, and maintaining the organization's networking infrastructure. This individual should be detail-oriented, thrives in a fast-paced, dynamic environment, and possesses a proven track record in learning, implementing, and maintaining enterprise networks and new technologies.

This is a full-time and remote position based within an hour of the greater Newark, New Jersey area, reporting to our Manager, Network Engineering.  

What You’ll Be Doing:

• Network: Designing, planning, and implementing network infrastructure move, add, or changes. Including maintenance and support.
• Network Security: Implementing and maintaining network security protocols, including firewalls, intrusion detection/prevention systems (IDS/IPS), VPNs, access control lists (ACLs), and encryption technologies to safeguard the organization's data and systems.
• Network Troubleshooting and Optimization: Diagnosing and resolving complex network issues, analyzing network performance, and optimizing network infrastructure to ensure high availability, reliability, and performance.
• Documentation and Reporting: Creating and maintaining network documentation, diagrams, and standard operating procedures (SOPs). Generating reports on network performance, security incidents, and compliance status for management review.
• Capacity Planning: Assessing current and future network capacity requirements based on business growth projections and technology trends. Planning and implementing scalability solutions to accommodate increasing demand.
• Regulatory Compliance: Ensuring network infrastructure compliance with industry regulations, standards, and best practices (e.g., PCI DSS, HIPAA, GDPR, ISO, Webtrust). Conducting audits and implementing remediation measures as needed.
• Mounting and Installation: Ability to mount and install network devices such as routers, switches, and servers in data centers and office locations. This includes rack mounting, cable management, and hardware configuration. This individual must be able to lift network equipment weighing up to 50 lbs. 
• The project-based changes most often occur on weekends outside of normal business hours and days. This individual must be available based on business demands and needs.   
• Travel & Operational Requirements: 
  • Participate in on-call rotation
  • Travel both internationally and nationally as needed (site support meetings, projects, etc.).
  • Frequent visits to Datacenter near Secaucus
• Other duties as assigned and related to the nature of this role and company initiatives.

Education:

• ​​​​​​Bachelor’s degree in computer science, information technology, or related field is strongly preferred. Master's degree or relevant certifications (e.g., CCNP, CCIE, CISSP) are a plus.

Experience:

• Proven experience (typically 5+ years) in network engineering roles, with a focus on supporting, implementing, and managing enterprise-scale network infrastructures.

Detailed Technical Requirements and Qualifications:

• Automation and Infrastructure as Code (IAC):
  1. Ability to create, implement, and maintain automation using Terraform and Ansible.
  2. Proficiency with GIT.
  3. Comfortable with JSON, YAML, and XML.
  4. Knowledge of Python is a plus.
• Cloud Environments:
  1. AWS network experience is necessary (TGWs, Network ACLs, AWS Network Firewall, Security Groups, VPCs, Subnet,etc..), and general experience is required.
• Must be proficient in installing, implementing, supporting, and maintaining Juniper, Palo Alto, and Cisco hardware and software for Datacenter and Campus environments.
• Knowledge of SD-WAN technologies such as Palo Alto, Aruba/Silverpeak, or Cisco/Viptela is a plus.
• Site to Site VPN: Must be able to design, implement, and support Route based and Policy based VPN. Knowledge of specific technologies such as DMVPN, FlexVPN, and other vendor-specific VPNs is a plus.
• RA VPN: Must be able to design, implement, and support enterprise VPNs such as Global Protect or AnyConnect.
• MPLS: Knowledge is a plus.
• AAA: Must be able to support, implement, and maintain Radius and Tacacs+ for both device access management and NAC (e.g., 802.1x). SAML-based authentication is a plus.
• Network Monitoring: Must be able to implement, support, and use: Netflow, SNMP, and related enterprise tools (e.g., Solarwinds, Nagios, LiveNX).
• FW Technologies and Traffic Flow: Must understand stateful vs non-stateful rules, symmetric vs non-symmetric, NAT types, order of operation, etc.
• L3 Routing Protocols: Must have knowledge of OSPFv2, OSPFv3 and BGP. Knowledge of others such as ISIS and mBGP is a plus.
• L3: Must know IPv6. IPv4 and IPv6 dual stack is a plus.
• Layer 2: Must understand rSTP, dot1q, vlan, L2 security
• Wireless: Good understanding wireless, roaming, troubleshooting
• HA: Must understand FHRP (VRRP, HSRP, etc.), LACP, BFD, switch stacks.etc.
• TCP/IP: Must understand path MTU discovery (ICMP), basic TCP flags, etc.
• DNS, DHCP, ARP, Neighbor Discovery: Must have a good understanding.
• Segment Packet Frame troubleshooting: Must be comfortable packet captures and utilizing tools like Wireshark and tcpdump.

Talents and Desired Qualifications:

• In-depth knowledge of networking protocols and technologies, including TCP/IP, VLANs, OSPF, BGP, MPLS, VPNs, DNS, DHCP, SNMP, etc.
• Strong understanding of network security principles and best practices, including firewall configuration, intrusion detection/prevention, encryption, and secure remote access.
• Proficiency in network hardware and software, such as Cisco, Juniper, Palo Alto, Fortinet, Aruba, etc. Experience with SDN, SD-WAN, and cloud networking is desirable.
• Excellent analytical, problem-solving, and troubleshooting skills, with the ability to diagnose and resolve complex network issues.
• Effective communication and interpersonal skills, with the ability to collaborate with cross-functional teams, articulate technical concepts to non-technical stakeholders, and mentor junior staff.
• Attention to detail, organization, and documentation skills, with a commitment to maintaining accurate network documentation and following standard procedures.
• Adaptability and willingness to learn new technologies, methodologies, and tools to keep pace with evolving business needs and industry trends.

All your information will be kept confidential according to EEO guidelines.

Global team. Global reach. Global impact.

At Sectigo, we believe doing good is good business. Our strength and our success come from our team of passionate, engaged individuals who make a difference, both locally and globally. Our commitment to engagement is rooted in an unconditionally inclusive workforce, embodying our unique perspectives, heritages, and backgrounds, all as diverse as the experiences of each Sectigo employee. Importantly, we strive to be recognized not only as the CLM leader but also for our intentional efforts to promote employees into the roles that most challenge and excite them, into experiences that allow them to grow their interests as we grow the business. We are committed to bringing a little bit of fun and a whole lot of happiness into everything we do so that our work – and our team members – reflect the positive outcomes we deliver to our customers every day.