Date Posted: 2026-11-05 Country: United States of America Location: US-CO-AURORA-S E Centretech Pkwy BLDG S75 Position Role Type: Onsite U.S. Citizen, U.S. Person, or Immigration Status Requirements: Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance Security Clearance Type: TS/SCI with Polygraph Security Clearance Status: Active and existing security clearance required on day 1 At RTX, the world's largest aerospace and defense company, 185,000 great minds are united by purpose and inspired to make a difference solving the world's most complex problems. With our three market leading businesses, world-class operations and investments in research and development, we offer capabilities and opportunity no one else can. Together, we push the boundaries of known science and find new ways to connect and protect our world. Raytheon brings the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today's mission and stay ahead of tomorrow's threat. We deliver solutions that help our nation and allies defend freedom and deter aggression, creating a safer, more secure world. Join us and help shape the future of aerospace and defense. At Raytheon, the foundation of everything we do is rooted in our values and a higher calling - to help our nation and allies defend freedoms and deter aggression. We bring the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today's mission and stay ahead of tomorrow's threat. Our team solves tough, meaningful problems that create a safer, more secure world. We are seeking Cleared Platform Engineers to join our team. We are looking for a Principal Platform DevOps Engineer - Windows OS for our environment; a mix of servers, workstations, storage, networks, and custom hardware, for a large Project producing a critical, strategic national asset. The skills for this need will include someone who is very familiar with the Windows Operating system and can work through the OS configuration and optimization for these environments which would involve a mixture of hands-on keyboard, engineering work, as well as documentation and baseline control. What You Will Do You will leverage company and industry best practices and capabilities to assist with design, development, implementation, and support of DevOps / DevSecOps development of our Windows based hosts for the project You will support software deployment of templates, dashboards, and scripts to support program need for the effort You will Design, implement, generate code through DevOps concepts and scripting tools, test, document, and maintain the system You will assist with development of build/test and integration, optimizing for performance and scalability across our on-premises and Cloud based computing environments You will provide guidance on resource allocation & utilization You will assist engineers with Windows based tool usage and issues, leveraging standards and best practices Qualifications You Must Have Typically requires BS/BA Degree in Science, Technology Engineering Math (STEM) in Information Technology, Computer Science, Computer Engineering, or Physics and a minimum 8 years of related work experience Proven experience installing, configuring, hardening, and maintaining Windows environments Hands on experience designing, implementing, and integrating cloud infrastructure solutions, preferably with AWS Strong experience with IaC and configuration management tools such as Terraform, Chef, and/or Ansible Experience troubleshooting complex systems involving multiple servers, COTS products, VMs, VDIs, and/or network issues Active and Current TS/SCI with CI Poly security clearance is required on day 1. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance Qualifications We Prefer Advanced troubleshooting skills for Windows platform, performance, reliability, and distributed system availability issues Extensive Windows OS development and deployment experience Proficiency with scripting languages such as Python and Bash for automation and workflow development Experience in Active Directory designs and implementation Experience with the Agile development lifecycle Experience with SAFe agile processes Knowledge of Enterprise Application development and deployment processesWindows MCSE Certification or similar security+ certification What We Offer Our values drive our actions, behaviors, and performance with a vision for a safer, more connected world. At RTX we value: Safety, Trust, Respect, Accountability, Collaboration, and Innovation Relocation Eligibility Learn More & Apply Now! Please consider the following role type definition as you apply for this role Onsite Employees who are working in Onsite roles will work onsite. This includes all production and maintenance employees, as they are essential to the development of our products This position requires security clearance. DCSA Consolidated Adjudication Services (DCSA CAS), an agency of the Department of Defense, handles and adjudicates the security clearance process. More information about Security Clearances can be found on the US Department of State government website here: Location: Aurora, CO # RaytheonSpace We Are RTX As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote. The salary range for this role is 107,500 USD - 204,500 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate's work experience, location, education/training, and key skills. Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement. Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company's performance. This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply. RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window. RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans' Readjustment Assistance Act. Privacy Policy and Terms: Click on this link to read the Policy and Terms
11/13/2026
Full time
Date Posted: 2026-11-05 Country: United States of America Location: US-CO-AURORA-S E Centretech Pkwy BLDG S75 Position Role Type: Onsite U.S. Citizen, U.S. Person, or Immigration Status Requirements: Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance Security Clearance Type: TS/SCI with Polygraph Security Clearance Status: Active and existing security clearance required on day 1 At RTX, the world's largest aerospace and defense company, 185,000 great minds are united by purpose and inspired to make a difference solving the world's most complex problems. With our three market leading businesses, world-class operations and investments in research and development, we offer capabilities and opportunity no one else can. Together, we push the boundaries of known science and find new ways to connect and protect our world. Raytheon brings the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today's mission and stay ahead of tomorrow's threat. We deliver solutions that help our nation and allies defend freedom and deter aggression, creating a safer, more secure world. Join us and help shape the future of aerospace and defense. At Raytheon, the foundation of everything we do is rooted in our values and a higher calling - to help our nation and allies defend freedoms and deter aggression. We bring the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today's mission and stay ahead of tomorrow's threat. Our team solves tough, meaningful problems that create a safer, more secure world. We are seeking Cleared Platform Engineers to join our team. We are looking for a Principal Platform DevOps Engineer - Windows OS for our environment; a mix of servers, workstations, storage, networks, and custom hardware, for a large Project producing a critical, strategic national asset. The skills for this need will include someone who is very familiar with the Windows Operating system and can work through the OS configuration and optimization for these environments which would involve a mixture of hands-on keyboard, engineering work, as well as documentation and baseline control. What You Will Do You will leverage company and industry best practices and capabilities to assist with design, development, implementation, and support of DevOps / DevSecOps development of our Windows based hosts for the project You will support software deployment of templates, dashboards, and scripts to support program need for the effort You will Design, implement, generate code through DevOps concepts and scripting tools, test, document, and maintain the system You will assist with development of build/test and integration, optimizing for performance and scalability across our on-premises and Cloud based computing environments You will provide guidance on resource allocation & utilization You will assist engineers with Windows based tool usage and issues, leveraging standards and best practices Qualifications You Must Have Typically requires BS/BA Degree in Science, Technology Engineering Math (STEM) in Information Technology, Computer Science, Computer Engineering, or Physics and a minimum 8 years of related work experience Proven experience installing, configuring, hardening, and maintaining Windows environments Hands on experience designing, implementing, and integrating cloud infrastructure solutions, preferably with AWS Strong experience with IaC and configuration management tools such as Terraform, Chef, and/or Ansible Experience troubleshooting complex systems involving multiple servers, COTS products, VMs, VDIs, and/or network issues Active and Current TS/SCI with CI Poly security clearance is required on day 1. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance Qualifications We Prefer Advanced troubleshooting skills for Windows platform, performance, reliability, and distributed system availability issues Extensive Windows OS development and deployment experience Proficiency with scripting languages such as Python and Bash for automation and workflow development Experience in Active Directory designs and implementation Experience with the Agile development lifecycle Experience with SAFe agile processes Knowledge of Enterprise Application development and deployment processesWindows MCSE Certification or similar security+ certification What We Offer Our values drive our actions, behaviors, and performance with a vision for a safer, more connected world. At RTX we value: Safety, Trust, Respect, Accountability, Collaboration, and Innovation Relocation Eligibility Learn More & Apply Now! Please consider the following role type definition as you apply for this role Onsite Employees who are working in Onsite roles will work onsite. This includes all production and maintenance employees, as they are essential to the development of our products This position requires security clearance. DCSA Consolidated Adjudication Services (DCSA CAS), an agency of the Department of Defense, handles and adjudicates the security clearance process. More information about Security Clearances can be found on the US Department of State government website here: Location: Aurora, CO # RaytheonSpace We Are RTX As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote. The salary range for this role is 107,500 USD - 204,500 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate's work experience, location, education/training, and key skills. Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement. Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company's performance. This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply. RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window. RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans' Readjustment Assistance Act. Privacy Policy and Terms: Click on this link to read the Policy and Terms
Job Description Job Description Principal Data Scientist - Remote, AI, Machine Learning, Fraud Detection & Risk Modeling Remote position available to candidates residing in Georgia, South Carolina, North Carolina, Florida, or Tennessee. Preference given to candidates located near our Augusta, GA or Charlotte, NC operations. Principal Data Scientist, Artificial Intelligence (AI), Machine Learning, Fraud Detection, Risk Modeling, Generative AI, Large Language Models (LLMs), Predictive Analytics, MLOps, Python, SQL, Snowflake, Databricks. Who we are: At TaxSlayer, we're more than just a tax software development company; we're empowering individuals and small businesses to plan for and file their tax returns online with confidence and ease. As a leading innovator in tax prep software, TaxSlayer, LLC, has been revolutionizing the way people file their taxes since 1965. Our user-friendly platform offers an intuitive interface that guides customers through the tax-filing process step by step, ensuring accuracy and maximum refunds. TaxSlayer is headquartered in Augusta, GA with a satellite office in Charlotte, NC. TaxSlayer proudly employs nearly 200 individuals year-round, plus 300 additional in-season support agents. Our employees are among the brightest, most talented group of innovators who work collaboratively to improve our products and exceed customer expectations season after season. Are you a TaxSlayer? Job Summary The Principal Data Scientist is a senior technical leader who drives advanced machine learning and data science initiatives across the organization. This role combines hands-on technical expertise with strategic influence. The Principal Data Scientist owns end-to-end delivery of complex ML projects, presents recommendations to leadership, leads technical discussions, and serves as the recognized authority on modeling approaches. The role partners cross-functionally with Product, Engineering, Finance, and Marketing to define and solve high-impact business problems, with particular focus on fraud detection, customer intelligence, and risk modeling. Core Responsibilities Own end-to-end delivery of strategic, high-impact data science projects from problem definition through production deployment, monitoring, and optimization. Lead scoping discussions and present project results as subject-matter authority. Develop and deploy advanced machine learning models for fraud detection, risk assessment, anomaly detection, customer segmentation, and churn prediction. Build real-time scoring pipelines, ensure production reliability, and present model design choices as the authority on their technical merits. Lead fraud detection initiatives, designing detection algorithms, collaborating with compliance and investigation teams, and continuously improving model performance as fraud patterns evolve. Evaluate and apply emerging AI and machine learning technologies, including large language models (LLMs), generative AI, and agentic systems, to enhance product capabilities and competitive advantage. Define and document best practices for model development, testing, and deployment, and present them to stakeholders as the authority on the subject. Design and build scalable data pipelines, feature engineering frameworks, and reusable modeling infrastructure that accelerate model development and deployment across the organization. Monitor model performance, data quality, and business outcomes in production. Identify degradation, troubleshoot issues, drive continuous improvements, and present findings while leading discussions on remediation priorities. Partner with Product, Engineering, Finance, and Marketing teams to define analytical requirements, establish success metrics, and deliver recommendations that drive strategic decision-making. Present complex analytical findings and strategic recommendations to executive leadership and business stakeholders with clarity and confidence. Communicate technical concepts to diverse audiences and drive adoption of data-driven strategies. Ensure all models and analytical processes comply with regulatory, privacy, security, and governance requirements. Collaborate with compliance and legal teams as needed. Stay current on emerging data science, ML, and AI trends. Identify, prototype, and recommend innovations that improve customer experience and competitive position. Contribute to documentation, best practices, architectural decisions, and reusable code libraries that strengthen the organization's data science capabilities. Your Impact in This Role Successful deployment and adoption of advanced ML models that generate measurable business impact (fraud reduction, conversion improvement, risk mitigation, operational efficiency), with results presented clearly to leadership. Demonstrated ability to identify and execute high-impact strategic initiatives independently with minimal direction or coaching, and to lead discussions that align stakeholders on priorities. Clear, confident communication and presentation of complex technical concepts to executives and stakeholders; proven ability to lead discussions, serve as the authority in the room, and influence decisions. Improved data science processes, tooling, and infrastructure that reduce time-to-model and accelerate deployment cycles. Required Qualifications Education & Experience: Master's or PhD degree in a quantitative field (Data Science, Computer Science, Statistics, Mathematics, Physics) or equivalent 8+ years of hands-on industry experience as a Data Scientist, Machine Learning Engineer, or similar role, with experience presenting complex work to senior audiences. Demonstrated success leading multiple end-to-end machine learning projects from ideation through production deployment and monitoring, including presenting outcomes and leading project discussions with stakeholders. Proven track record of self-initiated, high-impact projects executed with full ownership and minimal oversight. Skills & Competencies: Very high proficiency in multiple machine learning methods: supervised learning, unsupervised learning, and deep learning. Able to lead method-selection discussions as the subject matter expert. Advanced expertise in SQL and Python; strong software engineering fundamentals including version control, testing, code design, and distributed systems concepts. Strong proficiency in AI technologies, including experience evaluating, fine-tuning, or deploying large language models (LLMs) and generative AI systems in production. Strong experience with modern ML operations (MLOps), model deployment, monitoring, and serving in production environments; hands-on familiarity with cloud platforms (Snowflake, Databricks, AWS, GCP, or Azure). Strong understanding of statistical analysis, experimentation design, A/B testing, hypothesis testing, and causal inference methodologies. Experience building real-time or near-real-time scoring systems and production ML pipelines. Excellent communication skills: ability to explain complex technical concepts clearly to both technical and non-technical audiences. Strong presentation skills and ability to lead discussions without heavy coaching. Strong cross-functional collaboration and stakeholder management skills. Comfortable influencing decisions and driving adoption across Product, Engineering, Finance, and business teams. Preferred Qualifications: Experience in financial services, tax preparation, SaaS, fintech, or e-commerce industries. Hands-on experience building fraud detection, anomaly detection, or risk modeling systems. Physical & Work Environment Requirements This is a fully remote role (US-based only). Occasional travel within US is required for team collaboration, strategy sessions, and business meetings (estimated 4-6 times per year). Work is performed in a standard office environment with remote flexibility. Must be able to work at a computer for extended periods. What we offer: At TaxSlayer we realize the most important aspects in leading our industry are the bright minds behind everything we do. We are proud to offer our employees a highly competitive, comprehensive, and flexible benefits program. We offer flexible remote and/or hybrid work options when possible, depending on the role. Exempt Salaried employees receive a generous PTO bank, in addition to Paid Holidays. Insurance: Medical, Dental, and Vision insurance offerings from Aetna and SunLife. Options for Employee Only, Employee + Spouse/Domestic Partner, Employee + Children, or Family. 401K with 150% match on up to 3% contribution Performance-based bonus and salary review process Other offerings: Wellness Program, Life Insurance for employee, Long-term and Short-term disability, Critical Illness Insurance, Accident Insurance, Education Assistance, company-paid parking, on-site fitness facility, and a company store. Apply today and don't forget to opt in for text updates from our recruiting team! Please note: As a federal contractor, we are responsible to ensure our employees meet any obligations set forth by the U.S. government. We will inform you of any applicable requirements as they arise. Legal Disclaimers TaxSlayer is an equal opportunity employer and complies with all applicable laws regarding discrimination. Employment is based on qualifications, merit, and business need. . click apply for full job details
11/13/2026
Full time
Job Description Job Description Principal Data Scientist - Remote, AI, Machine Learning, Fraud Detection & Risk Modeling Remote position available to candidates residing in Georgia, South Carolina, North Carolina, Florida, or Tennessee. Preference given to candidates located near our Augusta, GA or Charlotte, NC operations. Principal Data Scientist, Artificial Intelligence (AI), Machine Learning, Fraud Detection, Risk Modeling, Generative AI, Large Language Models (LLMs), Predictive Analytics, MLOps, Python, SQL, Snowflake, Databricks. Who we are: At TaxSlayer, we're more than just a tax software development company; we're empowering individuals and small businesses to plan for and file their tax returns online with confidence and ease. As a leading innovator in tax prep software, TaxSlayer, LLC, has been revolutionizing the way people file their taxes since 1965. Our user-friendly platform offers an intuitive interface that guides customers through the tax-filing process step by step, ensuring accuracy and maximum refunds. TaxSlayer is headquartered in Augusta, GA with a satellite office in Charlotte, NC. TaxSlayer proudly employs nearly 200 individuals year-round, plus 300 additional in-season support agents. Our employees are among the brightest, most talented group of innovators who work collaboratively to improve our products and exceed customer expectations season after season. Are you a TaxSlayer? Job Summary The Principal Data Scientist is a senior technical leader who drives advanced machine learning and data science initiatives across the organization. This role combines hands-on technical expertise with strategic influence. The Principal Data Scientist owns end-to-end delivery of complex ML projects, presents recommendations to leadership, leads technical discussions, and serves as the recognized authority on modeling approaches. The role partners cross-functionally with Product, Engineering, Finance, and Marketing to define and solve high-impact business problems, with particular focus on fraud detection, customer intelligence, and risk modeling. Core Responsibilities Own end-to-end delivery of strategic, high-impact data science projects from problem definition through production deployment, monitoring, and optimization. Lead scoping discussions and present project results as subject-matter authority. Develop and deploy advanced machine learning models for fraud detection, risk assessment, anomaly detection, customer segmentation, and churn prediction. Build real-time scoring pipelines, ensure production reliability, and present model design choices as the authority on their technical merits. Lead fraud detection initiatives, designing detection algorithms, collaborating with compliance and investigation teams, and continuously improving model performance as fraud patterns evolve. Evaluate and apply emerging AI and machine learning technologies, including large language models (LLMs), generative AI, and agentic systems, to enhance product capabilities and competitive advantage. Define and document best practices for model development, testing, and deployment, and present them to stakeholders as the authority on the subject. Design and build scalable data pipelines, feature engineering frameworks, and reusable modeling infrastructure that accelerate model development and deployment across the organization. Monitor model performance, data quality, and business outcomes in production. Identify degradation, troubleshoot issues, drive continuous improvements, and present findings while leading discussions on remediation priorities. Partner with Product, Engineering, Finance, and Marketing teams to define analytical requirements, establish success metrics, and deliver recommendations that drive strategic decision-making. Present complex analytical findings and strategic recommendations to executive leadership and business stakeholders with clarity and confidence. Communicate technical concepts to diverse audiences and drive adoption of data-driven strategies. Ensure all models and analytical processes comply with regulatory, privacy, security, and governance requirements. Collaborate with compliance and legal teams as needed. Stay current on emerging data science, ML, and AI trends. Identify, prototype, and recommend innovations that improve customer experience and competitive position. Contribute to documentation, best practices, architectural decisions, and reusable code libraries that strengthen the organization's data science capabilities. Your Impact in This Role Successful deployment and adoption of advanced ML models that generate measurable business impact (fraud reduction, conversion improvement, risk mitigation, operational efficiency), with results presented clearly to leadership. Demonstrated ability to identify and execute high-impact strategic initiatives independently with minimal direction or coaching, and to lead discussions that align stakeholders on priorities. Clear, confident communication and presentation of complex technical concepts to executives and stakeholders; proven ability to lead discussions, serve as the authority in the room, and influence decisions. Improved data science processes, tooling, and infrastructure that reduce time-to-model and accelerate deployment cycles. Required Qualifications Education & Experience: Master's or PhD degree in a quantitative field (Data Science, Computer Science, Statistics, Mathematics, Physics) or equivalent 8+ years of hands-on industry experience as a Data Scientist, Machine Learning Engineer, or similar role, with experience presenting complex work to senior audiences. Demonstrated success leading multiple end-to-end machine learning projects from ideation through production deployment and monitoring, including presenting outcomes and leading project discussions with stakeholders. Proven track record of self-initiated, high-impact projects executed with full ownership and minimal oversight. Skills & Competencies: Very high proficiency in multiple machine learning methods: supervised learning, unsupervised learning, and deep learning. Able to lead method-selection discussions as the subject matter expert. Advanced expertise in SQL and Python; strong software engineering fundamentals including version control, testing, code design, and distributed systems concepts. Strong proficiency in AI technologies, including experience evaluating, fine-tuning, or deploying large language models (LLMs) and generative AI systems in production. Strong experience with modern ML operations (MLOps), model deployment, monitoring, and serving in production environments; hands-on familiarity with cloud platforms (Snowflake, Databricks, AWS, GCP, or Azure). Strong understanding of statistical analysis, experimentation design, A/B testing, hypothesis testing, and causal inference methodologies. Experience building real-time or near-real-time scoring systems and production ML pipelines. Excellent communication skills: ability to explain complex technical concepts clearly to both technical and non-technical audiences. Strong presentation skills and ability to lead discussions without heavy coaching. Strong cross-functional collaboration and stakeholder management skills. Comfortable influencing decisions and driving adoption across Product, Engineering, Finance, and business teams. Preferred Qualifications: Experience in financial services, tax preparation, SaaS, fintech, or e-commerce industries. Hands-on experience building fraud detection, anomaly detection, or risk modeling systems. Physical & Work Environment Requirements This is a fully remote role (US-based only). Occasional travel within US is required for team collaboration, strategy sessions, and business meetings (estimated 4-6 times per year). Work is performed in a standard office environment with remote flexibility. Must be able to work at a computer for extended periods. What we offer: At TaxSlayer we realize the most important aspects in leading our industry are the bright minds behind everything we do. We are proud to offer our employees a highly competitive, comprehensive, and flexible benefits program. We offer flexible remote and/or hybrid work options when possible, depending on the role. Exempt Salaried employees receive a generous PTO bank, in addition to Paid Holidays. Insurance: Medical, Dental, and Vision insurance offerings from Aetna and SunLife. Options for Employee Only, Employee + Spouse/Domestic Partner, Employee + Children, or Family. 401K with 150% match on up to 3% contribution Performance-based bonus and salary review process Other offerings: Wellness Program, Life Insurance for employee, Long-term and Short-term disability, Critical Illness Insurance, Accident Insurance, Education Assistance, company-paid parking, on-site fitness facility, and a company store. Apply today and don't forget to opt in for text updates from our recruiting team! Please note: As a federal contractor, we are responsible to ensure our employees meet any obligations set forth by the U.S. government. We will inform you of any applicable requirements as they arise. Legal Disclaimers TaxSlayer is an equal opportunity employer and complies with all applicable laws regarding discrimination. Employment is based on qualifications, merit, and business need. . click apply for full job details
Prominent Global Solutions
Fort George G Meade, Maryland
Job Description Job Description PGS is seeking a experiences Network Engineer that specializing in routing and switching to serve as the senior technical authority for the routed and switched enterprise. The role is responsible for advancing network innovation through the execution of strategic design and implementation efforts that improve the security, scalability, resiliency, and performance of the enterprise network. This position is responsible for overall network engineering support across a broad range of efforts, including planning, designing, and evaluating the various components of the network. Duties include providing specifications for network architecture, evaluating and recommending new technologies to enhance current capabilities, performing needs assessments, and directing the installation, modification, testing, and servicing of network infrastructure. The successful candidate sets technical direction for routing and switching across the enterprise, defining standards, resolving the architecture questions no one else can, and directing the work of other engineers against designs they own. Responsibilities: Own the enterprise routing and switching architecture, including core, distribution, access, WAN edge, and data center interconnect designs. Define routing architecture and policy standards across BGP, OSPF, EIGRP, and static routing, including addressing strategy, route filtering and summarization, path selection, redistribution boundaries, and convergence targets. Define Layer 2 and high-availability architecture, including VLAN and spanning-tree strategy, link aggregation, redundancy models, VRF and segmentation structure, multicast design, and QoS policy architecture. Evaluate the current network architecture, identify gaps and improvement opportunities, estimate level of effort, assess implementation risk, and develop practical engineering plans to improve enterprise capabilities. Provide specifications for network architecture, evaluate and recommend emerging technologies, and perform needs assessments to inform design and investment decisions. Establish and enforce configuration standards, design patterns, and technical baselines that other engineers build against. Drive strategic engineering projects from concept through implementation, including architecture evaluation, requirements analysis, dependency identification, design coordination, planning, execution, validation, and transition to operations. Develop and manage implementation plans, schedules, cutover strategies, contingency plans, rollback procedures, validation steps, stakeholder communications, and change documentation for mission-critical network changes. Lead network modernization efforts such as segmentation, IPv4/IPv6 transition, network optimization, connectivity consolidation, lifecycle replacement, automation, and software-defined networking adoption. Coordinate change windows, maintenance activities, test validation, and rollback procedures for high-impact network activities. Partner with architecture, cybersecurity, operations, project management, and technical SME teams to resolve blockers, manage dependencies, and reduce delivery risk. Technical Leadership Serve as the final technical escalation point for complex routing, switching, transport, and performance problems spanning multiple domains and vendors. Provide technical direction, mentoring, and day-to-day guidance to network engineers, administrators, and analysts; review designs and implementation work for technical quality. Organize technical priorities, track details across concurrent efforts, manage competing demands, and maintain accountability against aggressive schedules. Continuously improve engineering processes, documentation standards, implementation playbooks, migration runbooks, technical standards, and execution models to accelerate delivery, reduce rework, improve operational handoff, and lower sustainment burden. Develop and maintain engineering and operational documentation, including: Logical and physical network designs and architecture diagrams Routing architecture, policy standards, and addressing plans Configuration standards, design patterns, and technical baselines Implementation and cutover plans with rollback and contingency procedures Test and validation plans Risk, dependency, and decision registers Technical standards, playbooks, and runbooks As-built and operations transition documentation Qualifications: Bachelor's degree or equivalent experience and 12+ years of prior relevant experience, or Master's degree with 10+ years of experience. Specific experience, education, and training may be considered in lieu of a degree. Current IAT Level II or higher certification, such as Security+ or CISSP. Expert-level hands-on experience designing, engineering, and troubleshooting enterprise routing and switching infrastructure in large, complex environments. Deep knowledge of TCP/IP, BGP, OSPF, EIGRP, route policy and redistribution, VLANs, spanning tree, link aggregation, VRFs, MPLS, multicast, QoS, NAT, and high-availability design. Experience evaluating enterprise network architectures and developing improvement plans across LAN, WAN, WLAN, routing, switching, firewalls, VPN, proxies, software-defined networking, and cloud-connected environments. Experience leading network engineering projects from planning through implementation, including requirements analysis, dependency management, risk reduction, contingency planning, execution oversight, validation, and operational transition. Experience serving as a senior technical lead directing the work of other network engineers, administrators, or analysts. Hands-on experience with two or more of the following network technologies: Cisco, Aruba, Palo Alto, Dell, Infoblox, and Brocade. Experience documenting logical and physical network designs, implementation plans, risks, dependencies, decision points, and technical recommendations using tools such as Visio, PowerPoint, Cameo, or similar. Excellent written and verbal communication skills, including experience presenting architecture recommendations, implementation plans, risks, and status to technical leadership, stakeholders, and approval boards. Clearance: Active DoD Secret clearance. Location: Fort Meade, MD (Hybrid once candidate is acclimated to the position)
11/12/2026
Full time
Job Description Job Description PGS is seeking a experiences Network Engineer that specializing in routing and switching to serve as the senior technical authority for the routed and switched enterprise. The role is responsible for advancing network innovation through the execution of strategic design and implementation efforts that improve the security, scalability, resiliency, and performance of the enterprise network. This position is responsible for overall network engineering support across a broad range of efforts, including planning, designing, and evaluating the various components of the network. Duties include providing specifications for network architecture, evaluating and recommending new technologies to enhance current capabilities, performing needs assessments, and directing the installation, modification, testing, and servicing of network infrastructure. The successful candidate sets technical direction for routing and switching across the enterprise, defining standards, resolving the architecture questions no one else can, and directing the work of other engineers against designs they own. Responsibilities: Own the enterprise routing and switching architecture, including core, distribution, access, WAN edge, and data center interconnect designs. Define routing architecture and policy standards across BGP, OSPF, EIGRP, and static routing, including addressing strategy, route filtering and summarization, path selection, redistribution boundaries, and convergence targets. Define Layer 2 and high-availability architecture, including VLAN and spanning-tree strategy, link aggregation, redundancy models, VRF and segmentation structure, multicast design, and QoS policy architecture. Evaluate the current network architecture, identify gaps and improvement opportunities, estimate level of effort, assess implementation risk, and develop practical engineering plans to improve enterprise capabilities. Provide specifications for network architecture, evaluate and recommend emerging technologies, and perform needs assessments to inform design and investment decisions. Establish and enforce configuration standards, design patterns, and technical baselines that other engineers build against. Drive strategic engineering projects from concept through implementation, including architecture evaluation, requirements analysis, dependency identification, design coordination, planning, execution, validation, and transition to operations. Develop and manage implementation plans, schedules, cutover strategies, contingency plans, rollback procedures, validation steps, stakeholder communications, and change documentation for mission-critical network changes. Lead network modernization efforts such as segmentation, IPv4/IPv6 transition, network optimization, connectivity consolidation, lifecycle replacement, automation, and software-defined networking adoption. Coordinate change windows, maintenance activities, test validation, and rollback procedures for high-impact network activities. Partner with architecture, cybersecurity, operations, project management, and technical SME teams to resolve blockers, manage dependencies, and reduce delivery risk. Technical Leadership Serve as the final technical escalation point for complex routing, switching, transport, and performance problems spanning multiple domains and vendors. Provide technical direction, mentoring, and day-to-day guidance to network engineers, administrators, and analysts; review designs and implementation work for technical quality. Organize technical priorities, track details across concurrent efforts, manage competing demands, and maintain accountability against aggressive schedules. Continuously improve engineering processes, documentation standards, implementation playbooks, migration runbooks, technical standards, and execution models to accelerate delivery, reduce rework, improve operational handoff, and lower sustainment burden. Develop and maintain engineering and operational documentation, including: Logical and physical network designs and architecture diagrams Routing architecture, policy standards, and addressing plans Configuration standards, design patterns, and technical baselines Implementation and cutover plans with rollback and contingency procedures Test and validation plans Risk, dependency, and decision registers Technical standards, playbooks, and runbooks As-built and operations transition documentation Qualifications: Bachelor's degree or equivalent experience and 12+ years of prior relevant experience, or Master's degree with 10+ years of experience. Specific experience, education, and training may be considered in lieu of a degree. Current IAT Level II or higher certification, such as Security+ or CISSP. Expert-level hands-on experience designing, engineering, and troubleshooting enterprise routing and switching infrastructure in large, complex environments. Deep knowledge of TCP/IP, BGP, OSPF, EIGRP, route policy and redistribution, VLANs, spanning tree, link aggregation, VRFs, MPLS, multicast, QoS, NAT, and high-availability design. Experience evaluating enterprise network architectures and developing improvement plans across LAN, WAN, WLAN, routing, switching, firewalls, VPN, proxies, software-defined networking, and cloud-connected environments. Experience leading network engineering projects from planning through implementation, including requirements analysis, dependency management, risk reduction, contingency planning, execution oversight, validation, and operational transition. Experience serving as a senior technical lead directing the work of other network engineers, administrators, or analysts. Hands-on experience with two or more of the following network technologies: Cisco, Aruba, Palo Alto, Dell, Infoblox, and Brocade. Experience documenting logical and physical network designs, implementation plans, risks, dependencies, decision points, and technical recommendations using tools such as Visio, PowerPoint, Cameo, or similar. Excellent written and verbal communication skills, including experience presenting architecture recommendations, implementation plans, risks, and status to technical leadership, stakeholders, and approval boards. Clearance: Active DoD Secret clearance. Location: Fort Meade, MD (Hybrid once candidate is acclimated to the position)
Job Description Job Description $115,000 - $150,000 + VIP Bonus $115,000 - $150,000 + VIP Bonus The insurance industry runs on Vertafore. We equip agencies, MGAs, and carriers with the core digital systems, specialized AI, and data-driven foundation to eliminate distribution drag across the insurance lifecycle, spanning sales, servicing, and back-office operations. Underpinned by unmatched speed and performance power, we are the trusted backbone that's taking the insurance industry from friction to flow with Distribution Velocity - speed, performance, and trust - to drive growth at scale. With over 95% of the top agencies and insurers and 50% of industry compliance transactions running through Vertafore, we lead at the intersection of innovation and trust, giving insurance professionals the confidence to transform and win in the AI era. Our reach is global, with headquarters in Denver, Colorado, and offices across the U.S., Canada, and India. The Principal Software Engineer helps shape the future of our technology platforms and lead how we build software in an AI-native world. As a senior technical leader who stays hands-on. This role set architectural direction, personally take on our hardest engineering problems, and show what an engineering organization can achieve when engineering excellence and AI are leveraged together. The role works closely with Product and Engineering leadership so that what we build delivers real value to our customers. Core Duties and Responsibilities: Design and guide scalable, secure, resilient architectures, making the tradeoffs between speed, quality, and long-term sustainability. Lead the modernization of legacy platforms toward cloud-native, API-first, and AI-enabled architectures. Identify and address technical debt, architectural risk, and performance bottlenecks early. Shape long-term technology strategy, and evaluate emerging technologies through hands-on experiments and proofs of concept. Stay hands-on in design, implementation, prototyping, and debugging, and personally take on our most complex problems. Build reference implementations, reusable components, and shared frameworks that speed up teams across the organization. Own technical outcomes, not just recommendations, with high standards for security, performance, reliability, and observability. Define engineering standards and design principles, and lead design reviews that encourage constructive debate. Mentor senior engineers, architects, and emerging technical leaders. Influence decisions across teams without direct authority, and partner with Product, Architecture, and Security to turn business strategy into technical plans. Other duties as assigned. Knowledge, Skills and Abilities: Advanced communication and interpersonal skills. Ability to facilitate productive discussions and resolve complex challenges. Strong analytical, critical-thinking, and problem-solving capabilities. Curiosity and commitment to continuous learning and professional development. Ability to establish, communicate, and promote adherence to technical standards and quality practices. Strategic decision-making skills with a focus on maintainability, scalability, security, and performance. Ability to collaborate effectively with globally distributed teams. Knowledge of high-performance and high-availability application design principles. Proficiency with multiple database technologies. Strong software design and implementation capabilities at the enterprise level. Ability to communicate effectively with both technical and non-technical stakeholders. Ability to explain and defend technical decisions and architectural approaches. Leadership and mentoring capabilities across multiple teams. Ability to partner with business stakeholders to design practical technology solutions. Qualifications: 10+ years of professional software engineering, with deep expertise in at least one of Java, C#/.NET, Node.js/JavaScript, or Python. A track record of designing and delivering large-scale enterprise systems, grounded in architecture, distributed systems, and APIs. Significant experience leading complex technical initiatives and influencing direction across multiple teams. Hands-on experience with AI-assisted development tools, and evidence that you've improved how teams work through automation. Production experience with cloud platforms, ideally AWS. Clear communication with both technical and nontechnical audiences. A bachelor's degree in Computer Science or a related field, or equivalent practical experience. Areas of depth Our platform spans a wide range of technologies, and we don't expect anyone to be an expert in all of them. We're looking for real depth in several of these areas and the curiosity to grow in the rest. Cloud and infrastructure: AWS services such as EKS, ECS, and EC2; containerization; cloud-native architecture. DevOps and delivery: CI/CD pipelines, deployment automation, observability, and DevSecOps. Data: relational databases such as Oracle, PostgreSQL, or SQL Server, including SQL development and performance tuning. Frontend: modern UI frameworks such as React or Angular. Modernization: evolving large-scale legacy applications into modern platforms. Applied AI: LLMs, retrieval-augmented generation, agents, and agentic workflows. Platform engineering: shared services, internal platforms, and developer productivity tools. Regulated environments: sensitive customer data, compliance requirements, and enterprise SaaS. Additional Requirements and Details: Travel required up to 10% of the time. Flexible hybrid work arrangement. Occasional lifting and/or moving up to 10 pounds. Frequent repetitive hand and arm movements required to operate a computer. Specific vision abilities required include close vision for computer-based work. Frequent sitting and/or standing. Is this role not an exact fit for you? Keep an eye on our Careers Page for other positions! Vertafore is a drug free workplace and conducts preemployment drug and background screenings . The selected candidate must be legally authorized to work in the United States. The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all the job responsibilities, duties, skill, or working conditions. In addition, this document does not create an employment contract, implied or otherwise, other than an "at will" relationship. Vertafore strongly supports equal employment opportunity for all applicants regardless of race, color, religion, sex, gender identity, pregnancy, national origin, ancestry, citizenship, age, marital status, physical disability, mental disability, medical condition, sexual orientation, genetic information, or any other characteristic protected by state or federal law. We do not accept resumes from agencies, headhunters, or other suppliers who have not signed a formal agreement with us.
11/12/2026
Full time
Job Description Job Description $115,000 - $150,000 + VIP Bonus $115,000 - $150,000 + VIP Bonus The insurance industry runs on Vertafore. We equip agencies, MGAs, and carriers with the core digital systems, specialized AI, and data-driven foundation to eliminate distribution drag across the insurance lifecycle, spanning sales, servicing, and back-office operations. Underpinned by unmatched speed and performance power, we are the trusted backbone that's taking the insurance industry from friction to flow with Distribution Velocity - speed, performance, and trust - to drive growth at scale. With over 95% of the top agencies and insurers and 50% of industry compliance transactions running through Vertafore, we lead at the intersection of innovation and trust, giving insurance professionals the confidence to transform and win in the AI era. Our reach is global, with headquarters in Denver, Colorado, and offices across the U.S., Canada, and India. The Principal Software Engineer helps shape the future of our technology platforms and lead how we build software in an AI-native world. As a senior technical leader who stays hands-on. This role set architectural direction, personally take on our hardest engineering problems, and show what an engineering organization can achieve when engineering excellence and AI are leveraged together. The role works closely with Product and Engineering leadership so that what we build delivers real value to our customers. Core Duties and Responsibilities: Design and guide scalable, secure, resilient architectures, making the tradeoffs between speed, quality, and long-term sustainability. Lead the modernization of legacy platforms toward cloud-native, API-first, and AI-enabled architectures. Identify and address technical debt, architectural risk, and performance bottlenecks early. Shape long-term technology strategy, and evaluate emerging technologies through hands-on experiments and proofs of concept. Stay hands-on in design, implementation, prototyping, and debugging, and personally take on our most complex problems. Build reference implementations, reusable components, and shared frameworks that speed up teams across the organization. Own technical outcomes, not just recommendations, with high standards for security, performance, reliability, and observability. Define engineering standards and design principles, and lead design reviews that encourage constructive debate. Mentor senior engineers, architects, and emerging technical leaders. Influence decisions across teams without direct authority, and partner with Product, Architecture, and Security to turn business strategy into technical plans. Other duties as assigned. Knowledge, Skills and Abilities: Advanced communication and interpersonal skills. Ability to facilitate productive discussions and resolve complex challenges. Strong analytical, critical-thinking, and problem-solving capabilities. Curiosity and commitment to continuous learning and professional development. Ability to establish, communicate, and promote adherence to technical standards and quality practices. Strategic decision-making skills with a focus on maintainability, scalability, security, and performance. Ability to collaborate effectively with globally distributed teams. Knowledge of high-performance and high-availability application design principles. Proficiency with multiple database technologies. Strong software design and implementation capabilities at the enterprise level. Ability to communicate effectively with both technical and non-technical stakeholders. Ability to explain and defend technical decisions and architectural approaches. Leadership and mentoring capabilities across multiple teams. Ability to partner with business stakeholders to design practical technology solutions. Qualifications: 10+ years of professional software engineering, with deep expertise in at least one of Java, C#/.NET, Node.js/JavaScript, or Python. A track record of designing and delivering large-scale enterprise systems, grounded in architecture, distributed systems, and APIs. Significant experience leading complex technical initiatives and influencing direction across multiple teams. Hands-on experience with AI-assisted development tools, and evidence that you've improved how teams work through automation. Production experience with cloud platforms, ideally AWS. Clear communication with both technical and nontechnical audiences. A bachelor's degree in Computer Science or a related field, or equivalent practical experience. Areas of depth Our platform spans a wide range of technologies, and we don't expect anyone to be an expert in all of them. We're looking for real depth in several of these areas and the curiosity to grow in the rest. Cloud and infrastructure: AWS services such as EKS, ECS, and EC2; containerization; cloud-native architecture. DevOps and delivery: CI/CD pipelines, deployment automation, observability, and DevSecOps. Data: relational databases such as Oracle, PostgreSQL, or SQL Server, including SQL development and performance tuning. Frontend: modern UI frameworks such as React or Angular. Modernization: evolving large-scale legacy applications into modern platforms. Applied AI: LLMs, retrieval-augmented generation, agents, and agentic workflows. Platform engineering: shared services, internal platforms, and developer productivity tools. Regulated environments: sensitive customer data, compliance requirements, and enterprise SaaS. Additional Requirements and Details: Travel required up to 10% of the time. Flexible hybrid work arrangement. Occasional lifting and/or moving up to 10 pounds. Frequent repetitive hand and arm movements required to operate a computer. Specific vision abilities required include close vision for computer-based work. Frequent sitting and/or standing. Is this role not an exact fit for you? Keep an eye on our Careers Page for other positions! Vertafore is a drug free workplace and conducts preemployment drug and background screenings . The selected candidate must be legally authorized to work in the United States. The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all the job responsibilities, duties, skill, or working conditions. In addition, this document does not create an employment contract, implied or otherwise, other than an "at will" relationship. Vertafore strongly supports equal employment opportunity for all applicants regardless of race, color, religion, sex, gender identity, pregnancy, national origin, ancestry, citizenship, age, marital status, physical disability, mental disability, medical condition, sexual orientation, genetic information, or any other characteristic protected by state or federal law. We do not accept resumes from agencies, headhunters, or other suppliers who have not signed a formal agreement with us.
Job Description Job Description Job Title: Principal Network Engineer Location: Onsite Mode : Contract (6 Months) Rate - $70/hr. USC/GC only Note: Location (Complete Work Address with Zip code): 170 Data Dr, Waltham, MA 02451 55 Bearfoot Rd, Northborough, MA 01532 300 Erie Blvd West, Syracuse, NY 13202 2 Hanson Pl, Brooklyn, NY 11217 Comments - No set days required in office, will be ad-hoc for meetings etc. and then perhaps some travel to the DC locations. Most work will be done remotely. Role Purpose Principal Network Engineer within the Global Network Engineering team, responsible for delivering a major Internet Gateway Migration programme across the US and UK regions, owning the low-level design and implementation activities. Working closely with other Network engineers, Network Architects, Security Architects, Operations teams, and suppliers, you will design, build, test, migrate, and troubleshoot complex enterprise network services across Internet, WAN, SD-WAN, cloud, and security domains. This is a hands-on network engineering role. Key Responsibilities Design, build, test, and implement Internet Gateway migration solutions. Configure and troubleshoot complex routing environments including BGP, OSPF, MPLS, VRFs, route redistribution, and traffic engineering. Perform deep-dive troubleshooting across Internet edge, SD-WAN, WAN, LAN, cloud, security, and carrier connectivity domains. Develop and execute migration plans, implementation procedures, service cutovers, rollback strategies, and operational acceptance testing. Perform detailed dependency analysis across routing, security, DNS, DDI, remote access, cloud connectivity, and carrier services. Analyse technical dependencies and resolve migration blockers across network and security services. Create and review low-level designs, implementation plans, MOPs, and operational documentation. Work closely with Network Architects to translate target-state designs into deployable engineering solutions. Support and Lead on major implementation events, service transitions, and high-risk change activities. Drive engineering best practice, technical quality, and operational readiness. Required Skills & Experience CCIE (Cisco Certified Internetwork Expert) - Enterprise Infrastructure (mandatory) Expert-level BGP knowledge including Internet edge design, route policy, traffic engineering, route filtering, and multi-carrier connectivity. Extensive hands-on experience with Cisco enterprise routing and switching platforms. Proven experience designing and implementing enterprise Internet connectivity solutions. Strong SD-WAN engineering experience (Cisco Viptela). Strong understanding of OSPF, MPLS, VRFs, QoS, route redistribution, and high-availability network design. Experience delivering complex network migrations and transformation programmes. Experience integrating enterprise networks with Azure and hybrid-cloud environments. Advanced troubleshooting skills using packet captures, protocol analysis, routing diagnostics, and telemetry tools. Experience working directly with ISPs, carriers, and managed service providers. Experience producing implementation plans, migration runbooks, and low-level designs. Desirable Skills CCDE or equivalent design experience. Azure ExpressRoute and hybrid-cloud networking. Network automation using tools such as Python, Ansible, NetBrain. Experience within Utilities, Energy, Critical National Infrastructure, or highly regulated environments.
11/12/2026
Full time
Job Description Job Description Job Title: Principal Network Engineer Location: Onsite Mode : Contract (6 Months) Rate - $70/hr. USC/GC only Note: Location (Complete Work Address with Zip code): 170 Data Dr, Waltham, MA 02451 55 Bearfoot Rd, Northborough, MA 01532 300 Erie Blvd West, Syracuse, NY 13202 2 Hanson Pl, Brooklyn, NY 11217 Comments - No set days required in office, will be ad-hoc for meetings etc. and then perhaps some travel to the DC locations. Most work will be done remotely. Role Purpose Principal Network Engineer within the Global Network Engineering team, responsible for delivering a major Internet Gateway Migration programme across the US and UK regions, owning the low-level design and implementation activities. Working closely with other Network engineers, Network Architects, Security Architects, Operations teams, and suppliers, you will design, build, test, migrate, and troubleshoot complex enterprise network services across Internet, WAN, SD-WAN, cloud, and security domains. This is a hands-on network engineering role. Key Responsibilities Design, build, test, and implement Internet Gateway migration solutions. Configure and troubleshoot complex routing environments including BGP, OSPF, MPLS, VRFs, route redistribution, and traffic engineering. Perform deep-dive troubleshooting across Internet edge, SD-WAN, WAN, LAN, cloud, security, and carrier connectivity domains. Develop and execute migration plans, implementation procedures, service cutovers, rollback strategies, and operational acceptance testing. Perform detailed dependency analysis across routing, security, DNS, DDI, remote access, cloud connectivity, and carrier services. Analyse technical dependencies and resolve migration blockers across network and security services. Create and review low-level designs, implementation plans, MOPs, and operational documentation. Work closely with Network Architects to translate target-state designs into deployable engineering solutions. Support and Lead on major implementation events, service transitions, and high-risk change activities. Drive engineering best practice, technical quality, and operational readiness. Required Skills & Experience CCIE (Cisco Certified Internetwork Expert) - Enterprise Infrastructure (mandatory) Expert-level BGP knowledge including Internet edge design, route policy, traffic engineering, route filtering, and multi-carrier connectivity. Extensive hands-on experience with Cisco enterprise routing and switching platforms. Proven experience designing and implementing enterprise Internet connectivity solutions. Strong SD-WAN engineering experience (Cisco Viptela). Strong understanding of OSPF, MPLS, VRFs, QoS, route redistribution, and high-availability network design. Experience delivering complex network migrations and transformation programmes. Experience integrating enterprise networks with Azure and hybrid-cloud environments. Advanced troubleshooting skills using packet captures, protocol analysis, routing diagnostics, and telemetry tools. Experience working directly with ISPs, carriers, and managed service providers. Experience producing implementation plans, migration runbooks, and low-level designs. Desirable Skills CCDE or equivalent design experience. Azure ExpressRoute and hybrid-cloud networking. Network automation using tools such as Python, Ansible, NetBrain. Experience within Utilities, Energy, Critical National Infrastructure, or highly regulated environments.
Job Description Job Description Job Title: Principal Network Engineer Location: Onsite Mode : Contract (6 Months) Rate - $60/hr. USC/GC only Note: Location (Complete Work Address with Zip code): 170 Data Dr, Waltham, MA 02451 55 Bearfoot Rd, Northborough, MA 01532 300 Erie Blvd West, Syracuse, NY 13202 2 Hanson Pl, Brooklyn, NY 11217 Comments - No set days required in office, will be ad-hoc for meetings etc. and then perhaps some travel to the DC locations. Most work will be done remotely. Role Purpose Principal Network Engineer within the Global Network Engineering team, responsible for delivering a major Internet Gateway Migration programme across the US and UK regions, owning the low-level design and implementation activities. Working closely with other Network engineers, Network Architects, Security Architects, Operations teams, and suppliers, you will design, build, test, migrate, and troubleshoot complex enterprise network services across Internet, WAN, SD-WAN, cloud, and security domains. This is a hands-on network engineering role. Key Responsibilities Design, build, test, and implement Internet Gateway migration solutions. Configure and troubleshoot complex routing environments including BGP, OSPF, MPLS, VRFs, route redistribution, and traffic engineering. Perform deep-dive troubleshooting across Internet edge, SD-WAN, WAN, LAN, cloud, security, and carrier connectivity domains. Develop and execute migration plans, implementation procedures, service cutovers, rollback strategies, and operational acceptance testing. Perform detailed dependency analysis across routing, security, DNS, DDI, remote access, cloud connectivity, and carrier services. Analyse technical dependencies and resolve migration blockers across network and security services. Create and review low-level designs, implementation plans, MOPs, and operational documentation. Work closely with Network Architects to translate target-state designs into deployable engineering solutions. Support and Lead on major implementation events, service transitions, and high-risk change activities. Drive engineering best practice, technical quality, and operational readiness. Required Skills & Experience CCIE (Cisco Certified Internetwork Expert) - Enterprise Infrastructure (mandatory) Expert-level BGP knowledge including Internet edge design, route policy, traffic engineering, route filtering, and multi-carrier connectivity. Extensive hands-on experience with Cisco enterprise routing and switching platforms. Proven experience designing and implementing enterprise Internet connectivity solutions. Strong SD-WAN engineering experience (Cisco Viptela). Strong understanding of OSPF, MPLS, VRFs, QoS, route redistribution, and high-availability network design. Experience delivering complex network migrations and transformation programmes. Experience integrating enterprise networks with Azure and hybrid-cloud environments. Advanced troubleshooting skills using packet captures, protocol analysis, routing diagnostics, and telemetry tools. Experience working directly with ISPs, carriers, and managed service providers. Experience producing implementation plans, migration runbooks, and low-level designs. Desirable Skills CCDE or equivalent design experience. Azure ExpressRoute and hybrid-cloud networking. Network automation using tools such as Python, Ansible, NetBrain. Experience within Utilities, Energy, Critical National Infrastructure, or highly regulated environments. Notes :- All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance. Benefits : Danta offers a compensation package to all W2 employees that are competitive in the industry. It consists of competitive pay, the option to elect healthcare insurance (Dental, Medical, Vision), Major holidays and Paid sick leave as per state law. The rate/ Salary range is dependent on numerous factors including Qualification, Experience and Location.
11/12/2026
Full time
Job Description Job Description Job Title: Principal Network Engineer Location: Onsite Mode : Contract (6 Months) Rate - $60/hr. USC/GC only Note: Location (Complete Work Address with Zip code): 170 Data Dr, Waltham, MA 02451 55 Bearfoot Rd, Northborough, MA 01532 300 Erie Blvd West, Syracuse, NY 13202 2 Hanson Pl, Brooklyn, NY 11217 Comments - No set days required in office, will be ad-hoc for meetings etc. and then perhaps some travel to the DC locations. Most work will be done remotely. Role Purpose Principal Network Engineer within the Global Network Engineering team, responsible for delivering a major Internet Gateway Migration programme across the US and UK regions, owning the low-level design and implementation activities. Working closely with other Network engineers, Network Architects, Security Architects, Operations teams, and suppliers, you will design, build, test, migrate, and troubleshoot complex enterprise network services across Internet, WAN, SD-WAN, cloud, and security domains. This is a hands-on network engineering role. Key Responsibilities Design, build, test, and implement Internet Gateway migration solutions. Configure and troubleshoot complex routing environments including BGP, OSPF, MPLS, VRFs, route redistribution, and traffic engineering. Perform deep-dive troubleshooting across Internet edge, SD-WAN, WAN, LAN, cloud, security, and carrier connectivity domains. Develop and execute migration plans, implementation procedures, service cutovers, rollback strategies, and operational acceptance testing. Perform detailed dependency analysis across routing, security, DNS, DDI, remote access, cloud connectivity, and carrier services. Analyse technical dependencies and resolve migration blockers across network and security services. Create and review low-level designs, implementation plans, MOPs, and operational documentation. Work closely with Network Architects to translate target-state designs into deployable engineering solutions. Support and Lead on major implementation events, service transitions, and high-risk change activities. Drive engineering best practice, technical quality, and operational readiness. Required Skills & Experience CCIE (Cisco Certified Internetwork Expert) - Enterprise Infrastructure (mandatory) Expert-level BGP knowledge including Internet edge design, route policy, traffic engineering, route filtering, and multi-carrier connectivity. Extensive hands-on experience with Cisco enterprise routing and switching platforms. Proven experience designing and implementing enterprise Internet connectivity solutions. Strong SD-WAN engineering experience (Cisco Viptela). Strong understanding of OSPF, MPLS, VRFs, QoS, route redistribution, and high-availability network design. Experience delivering complex network migrations and transformation programmes. Experience integrating enterprise networks with Azure and hybrid-cloud environments. Advanced troubleshooting skills using packet captures, protocol analysis, routing diagnostics, and telemetry tools. Experience working directly with ISPs, carriers, and managed service providers. Experience producing implementation plans, migration runbooks, and low-level designs. Desirable Skills CCDE or equivalent design experience. Azure ExpressRoute and hybrid-cloud networking. Network automation using tools such as Python, Ansible, NetBrain. Experience within Utilities, Energy, Critical National Infrastructure, or highly regulated environments. Notes :- All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance. Benefits : Danta offers a compensation package to all W2 employees that are competitive in the industry. It consists of competitive pay, the option to elect healthcare insurance (Dental, Medical, Vision), Major holidays and Paid sick leave as per state law. The rate/ Salary range is dependent on numerous factors including Qualification, Experience and Location.
Job Description Job Description Empowered to live. Inspired to work. Compeer Financial is a member-owned cooperative located in Illinois, Minnesota and Wisconsin. We bring together team members with a variety of backgrounds and experiences to help provide financial services to support agriculture and rural communities. Join us in a culture that not only promotes meaningful work and professional development, but provides a flexible, hybrid work environment and excellent benefits, which empower you to thrive both personally and professionally. How we support you: Hybrid model - up to 50% work from home Flexible schedules including ample flexibility in the summer months Up to 9% towards 401k (3% fixed Compeer contribution plus up to 6% match) Benefits: medical, dental, vision, HSA/FSA, life & AD&D insurance, short-term and long-term disability, wellness program & EAP Vacation, sick leave, holidays/floating holidays, parental leave, and volunteer paid time off Learning and development programs Mentorship programs Cross-functional committee opportunities (i.e. Inclusion Council, emerging professional groups, etc.) Professional membership/certification reimbursement and more! Casual/seasonal & intern team members are not eligible for benefits except for state-mandated programs. To learn more about Compeer Financial visit Where you will work: This position offers a hybrid work option up to 50% remote and is based out of the Bloomington, IL; Sun Prairie, WI; Lakeville, MN; Mankato, MN office locations. The contributions you will make: This position is an enterprise-level individual contributor and technical leader accountable for the engineering direction, reliability, and modernization of the organization's most complex network and telephony services. The role shapes multi-year technical direction, translates target-state architecture into scalable implementation patterns, leads high-impact cross-enterprise initiatives, and establishes standards for campus, branch, data center, cloud, WAN, wireless, voice, unified communications, carrier services, automation, security, and resilience. Influences leaders, engineers, and strategic vendors to deliver sustainable connectivity and communication capabilities across the enterprise. A typical day: Leads engineering direction, reference implementations, standards, and multi-year roadmaps for enterprise network and telephony services in partnership with architecture, product, security, cloud, and service management leaders. Designs and leads delivery of complex network transformations, WAN and wireless modernization, cloud-connectivity programs, telephony and unified communications migrations, carrier transitions, automation initiatives, and resilience improvements. Establishes reusable enterprise patterns for segmentation, routing, secure connectivity, quality of service, call routing, emergency calling, observability, automation, resiliency, lifecycle management, and operational support. Leads resolution of the highest-impact connectivity, performance, voice, carrier, and operational problems; performs deep technical analysis and drives systemic improvements across infrastructure, cloud, security, application, and vendor dependencies. Defines network and telephony engineering measures and practices for availability, performance, capacity, call quality, failover, recoverability, security, compliance, supportability, and production readiness. Serves as a trusted technical advisor to leaders and strategic vendors; mentors senior engineers; and influences investment, vendor, carrier, sequencing, resilience, and lifecycle decisions through executive-ready recommendations. The skills and experience we prefer you have: Bachelor's degree in computer science, information systems, engineering, cybersecurity, telecommunications, or a related field; or an equivalent combination of education and experience sufficient to perform the essential functions of the job. Minimum 10 or more years of progressive experience in network engineering, telecommunications, infrastructure engineering, systems engineering, technology operations, or a related field. Demonstrated success defining and leading enterprise-scale network and telephony strategy, modernization, automation, migrations, resilience improvements, and lifecycle initiatives across complex environments. Expert-level experience with routing, switching, wireless, WAN, cloud connectivity, network services, telephony, unified communications, carrier services, automation, observability, security, technical governance, and vendor or partner delivery. Valid driver's license required. Professional or expert level Cisco, Juniper, Aruba, Arista, or comparable network and telecommunications certifications preferred Experience shaping enterprise adoption of software-defined networking, cloud networking, network observability, infrastructure-as-code, or unified communications and contact-center technologies, preferred. Experience in a regulated financial-services environment or with audit, risk, and control requirements, preferred. Experience defining enterprise service-level objectives and indicators, network performance measures, capacity baselines, and availability reporting, preferred. Experience leading enterprise-scale wireless, carrier, contact-center, or multi-site network transformation initiatives, preferred. Knowledge, Skills & Abilities Deep expertise in enterprise network and telephony engineering, including routing, switching, wireless, SD-WAN, cloud connectivity, network services, segmentation, voice, call routing, quality of service, unified communications, and carrier services. Enterprise-level systems thinking and engineering judgment, with the ability to connect business strategy, architecture, technical dependencies, service outcomes, resilience, risk, and cost. Demonstrated ability to create clarity, establish direction, lead through ambiguity, and resolve complex technical and organizational problems. Exceptional technical leadership, facilitation, communication, storytelling, negotiation, and influencing skills, including communication with executive audiences. Ability to mentor senior engineers, establish enterprise standards and reusable patterns, and raise engineering capability without relying on formal authority. Strong financial, carrier, and vendor acumen, with the ability to evaluate investments, contracts, licensing, technology lifecycle, technical debt, and total cost of ownership. Advanced knowledge of cybersecurity, regulatory and emergency-calling requirements, change management, operational resilience, disaster recovery, and risk management in a financial services environment. How we will take care of you: Our job titles may span more than one career level (associate, senior, principal, etc.). The actual title and base pay offered is dependent upon many factors, such as: training, transferable skills, work experience, business needs and market demands. The base pay range is subject to change and may be modified in the future. This role is eligible for variable compensation and other benefits. Base Pay $118,500-$180,000 USD Compeer Financial is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Must be authorized to work for any employer in the United States. Compeer is unable to sponsor or take over sponsorship of an employment visa at this time. Click here to view federal employment laws applicable for applicants.
11/12/2026
Full time
Job Description Job Description Empowered to live. Inspired to work. Compeer Financial is a member-owned cooperative located in Illinois, Minnesota and Wisconsin. We bring together team members with a variety of backgrounds and experiences to help provide financial services to support agriculture and rural communities. Join us in a culture that not only promotes meaningful work and professional development, but provides a flexible, hybrid work environment and excellent benefits, which empower you to thrive both personally and professionally. How we support you: Hybrid model - up to 50% work from home Flexible schedules including ample flexibility in the summer months Up to 9% towards 401k (3% fixed Compeer contribution plus up to 6% match) Benefits: medical, dental, vision, HSA/FSA, life & AD&D insurance, short-term and long-term disability, wellness program & EAP Vacation, sick leave, holidays/floating holidays, parental leave, and volunteer paid time off Learning and development programs Mentorship programs Cross-functional committee opportunities (i.e. Inclusion Council, emerging professional groups, etc.) Professional membership/certification reimbursement and more! Casual/seasonal & intern team members are not eligible for benefits except for state-mandated programs. To learn more about Compeer Financial visit Where you will work: This position offers a hybrid work option up to 50% remote and is based out of the Bloomington, IL; Sun Prairie, WI; Lakeville, MN; Mankato, MN office locations. The contributions you will make: This position is an enterprise-level individual contributor and technical leader accountable for the engineering direction, reliability, and modernization of the organization's most complex network and telephony services. The role shapes multi-year technical direction, translates target-state architecture into scalable implementation patterns, leads high-impact cross-enterprise initiatives, and establishes standards for campus, branch, data center, cloud, WAN, wireless, voice, unified communications, carrier services, automation, security, and resilience. Influences leaders, engineers, and strategic vendors to deliver sustainable connectivity and communication capabilities across the enterprise. A typical day: Leads engineering direction, reference implementations, standards, and multi-year roadmaps for enterprise network and telephony services in partnership with architecture, product, security, cloud, and service management leaders. Designs and leads delivery of complex network transformations, WAN and wireless modernization, cloud-connectivity programs, telephony and unified communications migrations, carrier transitions, automation initiatives, and resilience improvements. Establishes reusable enterprise patterns for segmentation, routing, secure connectivity, quality of service, call routing, emergency calling, observability, automation, resiliency, lifecycle management, and operational support. Leads resolution of the highest-impact connectivity, performance, voice, carrier, and operational problems; performs deep technical analysis and drives systemic improvements across infrastructure, cloud, security, application, and vendor dependencies. Defines network and telephony engineering measures and practices for availability, performance, capacity, call quality, failover, recoverability, security, compliance, supportability, and production readiness. Serves as a trusted technical advisor to leaders and strategic vendors; mentors senior engineers; and influences investment, vendor, carrier, sequencing, resilience, and lifecycle decisions through executive-ready recommendations. The skills and experience we prefer you have: Bachelor's degree in computer science, information systems, engineering, cybersecurity, telecommunications, or a related field; or an equivalent combination of education and experience sufficient to perform the essential functions of the job. Minimum 10 or more years of progressive experience in network engineering, telecommunications, infrastructure engineering, systems engineering, technology operations, or a related field. Demonstrated success defining and leading enterprise-scale network and telephony strategy, modernization, automation, migrations, resilience improvements, and lifecycle initiatives across complex environments. Expert-level experience with routing, switching, wireless, WAN, cloud connectivity, network services, telephony, unified communications, carrier services, automation, observability, security, technical governance, and vendor or partner delivery. Valid driver's license required. Professional or expert level Cisco, Juniper, Aruba, Arista, or comparable network and telecommunications certifications preferred Experience shaping enterprise adoption of software-defined networking, cloud networking, network observability, infrastructure-as-code, or unified communications and contact-center technologies, preferred. Experience in a regulated financial-services environment or with audit, risk, and control requirements, preferred. Experience defining enterprise service-level objectives and indicators, network performance measures, capacity baselines, and availability reporting, preferred. Experience leading enterprise-scale wireless, carrier, contact-center, or multi-site network transformation initiatives, preferred. Knowledge, Skills & Abilities Deep expertise in enterprise network and telephony engineering, including routing, switching, wireless, SD-WAN, cloud connectivity, network services, segmentation, voice, call routing, quality of service, unified communications, and carrier services. Enterprise-level systems thinking and engineering judgment, with the ability to connect business strategy, architecture, technical dependencies, service outcomes, resilience, risk, and cost. Demonstrated ability to create clarity, establish direction, lead through ambiguity, and resolve complex technical and organizational problems. Exceptional technical leadership, facilitation, communication, storytelling, negotiation, and influencing skills, including communication with executive audiences. Ability to mentor senior engineers, establish enterprise standards and reusable patterns, and raise engineering capability without relying on formal authority. Strong financial, carrier, and vendor acumen, with the ability to evaluate investments, contracts, licensing, technology lifecycle, technical debt, and total cost of ownership. Advanced knowledge of cybersecurity, regulatory and emergency-calling requirements, change management, operational resilience, disaster recovery, and risk management in a financial services environment. How we will take care of you: Our job titles may span more than one career level (associate, senior, principal, etc.). The actual title and base pay offered is dependent upon many factors, such as: training, transferable skills, work experience, business needs and market demands. The base pay range is subject to change and may be modified in the future. This role is eligible for variable compensation and other benefits. Base Pay $118,500-$180,000 USD Compeer Financial is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Must be authorized to work for any employer in the United States. Compeer is unable to sponsor or take over sponsorship of an employment visa at this time. Click here to view federal employment laws applicable for applicants.
Virtual Technologies Group
Fort George G Meade, Maryland
Job Description Job Description Job Title: DNS Subject Matter Expert - Engineer Company:Virtual Technologies Group (VTG) Location: Ft Meade (3 Days a week) Travel: 10% Position Type: Full-Time Employee Type: FTE Compensation Range: 200k-250K Based on Experience Company Overview: Virtual Technologies Group is a leading innovator in the technology sector, specializing in the development and implementation of advanced virtual solutions. Our mission is to empower businesses with cutting-edge technology that enhances efficiency, productivity, and connectivity. With a team of highly skilled professionals, we deliver customized solutions tailored to meet the unique needs of our clients across various industries. Our commitment to excellence, innovation, and customer satisfaction drives us to continuously push the boundaries of what is possible. At Virtual Technologies Group, we are dedicated to shaping the future of technology and making a positive impact on the world. Position Overview We are seeking a Principal-level DNS Subject Matter Expert (SME) to lead mission-critical network operations in a highly secure environment. This is a Key Personnel role requiring deep, hands-on expertise in DNS architecture, BGP routing, and cloud networking integration. This position requires an active Top Secret clearance (with SCI eligibility) and is located in Maryland, requiring on-site work a minimum of 3 days per week. Day-To-Day Duties and Responsibilities Technical Leadership: Serve as the primary technical authority for enterprise DNS architecture, engineering, and mission-critical network operations. Network Engineering: Manage, configure, and troubleshoot complex BGP routing and broader network infrastructure in highly secure, classified environments. Cloud Integration: Lead the design and secure management of cloud networking architectures (AWS, Azure, or hybrid) and their integration with on-premise classified networks. High Availability Operations: Ensure the absolute resiliency, zero-downtime availability, and security of core network services and critical infrastructure. Incident Response: Act as the ultimate technical escalation point for diagnosing and resolving severe network outages, DNS failures, or routing anomalies Minimum Qualifications Clearance: Active DoD Top Secret (TS) clearance, with the eligibility to obtain and hold SCI access. Location: Must be local to Maryland with the ability to work on-site a minimum of 3 days per week. Extensive professional experience managing network operations in secure, classified environments. Deep, hands-on engineering expertise in enterprise DNS architecture, implementation, and management. Expert-level knowledge of core networking protocols, specifically BGP routing and large-scale infrastructure operations. Proven hands-on experience designing and supporting cloud networking environments. Demonstrated ability to perform under pressure while supporting mission-critical, zero-downtime operations. Preferred Qualifications Active TS/SCI clearance (with or without polygraph). Expert-level networking certifications (e.g., CCIE, JNCIE, or equivalent). Advanced cloud networking certifications (e.g., AWS Certified Advanced Networking - Specialty). Previous experience operating within Fort Meade or similar high-security Intelligence Community (IC) environments. Why Join Us? At Virtual Technologies Group we provide more than just IT solutions-we offer a dynamic environment where you can learn, grow, and expand your skillset. As a leading managed services, cybersecurity, and IT consulting firm, we support a diverse range of customers, giving you the opportunity to tackle unique challenges and stay ahead in a rapidly evolving industry. Join a team that values innovation, collaboration, and professional development. Whether you're looking to sharpen your technical expertise, work with cutting-edge technology, or make a real impact, we're committed to helping you build a rewarding career. Benefits Overview: VTG offers a comprehensive benefits package to meet the needs of our employees and their families. Benefits include medical insurance plans, dental insurance, vision insurance, health savings accounts (HSA), flexible spending accounts (FSA), life insurance, short and long-term disability insurance, paid time off and holidays, and a 401(k) with employer match. EEO Statement: VTG is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other legally protected status. We believe that diversity strengthens our team and drives innovation. All employment decisions are based on qualifications, merit, and business needs. If you require reasonable accommodation during the application or interview process, please contact . Powered by JazzHR f5vtkjzXH7
11/12/2026
Full time
Job Description Job Description Job Title: DNS Subject Matter Expert - Engineer Company:Virtual Technologies Group (VTG) Location: Ft Meade (3 Days a week) Travel: 10% Position Type: Full-Time Employee Type: FTE Compensation Range: 200k-250K Based on Experience Company Overview: Virtual Technologies Group is a leading innovator in the technology sector, specializing in the development and implementation of advanced virtual solutions. Our mission is to empower businesses with cutting-edge technology that enhances efficiency, productivity, and connectivity. With a team of highly skilled professionals, we deliver customized solutions tailored to meet the unique needs of our clients across various industries. Our commitment to excellence, innovation, and customer satisfaction drives us to continuously push the boundaries of what is possible. At Virtual Technologies Group, we are dedicated to shaping the future of technology and making a positive impact on the world. Position Overview We are seeking a Principal-level DNS Subject Matter Expert (SME) to lead mission-critical network operations in a highly secure environment. This is a Key Personnel role requiring deep, hands-on expertise in DNS architecture, BGP routing, and cloud networking integration. This position requires an active Top Secret clearance (with SCI eligibility) and is located in Maryland, requiring on-site work a minimum of 3 days per week. Day-To-Day Duties and Responsibilities Technical Leadership: Serve as the primary technical authority for enterprise DNS architecture, engineering, and mission-critical network operations. Network Engineering: Manage, configure, and troubleshoot complex BGP routing and broader network infrastructure in highly secure, classified environments. Cloud Integration: Lead the design and secure management of cloud networking architectures (AWS, Azure, or hybrid) and their integration with on-premise classified networks. High Availability Operations: Ensure the absolute resiliency, zero-downtime availability, and security of core network services and critical infrastructure. Incident Response: Act as the ultimate technical escalation point for diagnosing and resolving severe network outages, DNS failures, or routing anomalies Minimum Qualifications Clearance: Active DoD Top Secret (TS) clearance, with the eligibility to obtain and hold SCI access. Location: Must be local to Maryland with the ability to work on-site a minimum of 3 days per week. Extensive professional experience managing network operations in secure, classified environments. Deep, hands-on engineering expertise in enterprise DNS architecture, implementation, and management. Expert-level knowledge of core networking protocols, specifically BGP routing and large-scale infrastructure operations. Proven hands-on experience designing and supporting cloud networking environments. Demonstrated ability to perform under pressure while supporting mission-critical, zero-downtime operations. Preferred Qualifications Active TS/SCI clearance (with or without polygraph). Expert-level networking certifications (e.g., CCIE, JNCIE, or equivalent). Advanced cloud networking certifications (e.g., AWS Certified Advanced Networking - Specialty). Previous experience operating within Fort Meade or similar high-security Intelligence Community (IC) environments. Why Join Us? At Virtual Technologies Group we provide more than just IT solutions-we offer a dynamic environment where you can learn, grow, and expand your skillset. As a leading managed services, cybersecurity, and IT consulting firm, we support a diverse range of customers, giving you the opportunity to tackle unique challenges and stay ahead in a rapidly evolving industry. Join a team that values innovation, collaboration, and professional development. Whether you're looking to sharpen your technical expertise, work with cutting-edge technology, or make a real impact, we're committed to helping you build a rewarding career. Benefits Overview: VTG offers a comprehensive benefits package to meet the needs of our employees and their families. Benefits include medical insurance plans, dental insurance, vision insurance, health savings accounts (HSA), flexible spending accounts (FSA), life insurance, short and long-term disability insurance, paid time off and holidays, and a 401(k) with employer match. EEO Statement: VTG is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other legally protected status. We believe that diversity strengthens our team and drives innovation. All employment decisions are based on qualifications, merit, and business needs. If you require reasonable accommodation during the application or interview process, please contact . Powered by JazzHR f5vtkjzXH7
Job Description Job Description Empowered to live. Inspired to work. Compeer Financial is a member-owned cooperative located in Illinois, Minnesota and Wisconsin. We bring together team members with a variety of backgrounds and experiences to help provide financial services to support agriculture and rural communities. Join us in a culture that not only promotes meaningful work and professional development, but provides a flexible, hybrid work environment and excellent benefits, which empower you to thrive both personally and professionally. How we support you: Hybrid model - up to 50% work from home Flexible schedules including ample flexibility in the summer months Up to 9% towards 401k (3% fixed Compeer contribution plus up to 6% match) Benefits: medical, dental, vision, HSA/FSA, life & AD&D insurance, short-term and long-term disability, wellness program & EAP Vacation, sick leave, holidays/floating holidays, parental leave, and volunteer paid time off Learning and development programs Mentorship programs Cross-functional committee opportunities (i.e. Inclusion Council, emerging professional groups, etc.) Professional membership/certification reimbursement and more! Casual/seasonal & intern team members are not eligible for benefits except for state-mandated programs. To learn more about Compeer Financial visit Where you will work: This position offers a hybrid work option up to 50% remote and is based out of the Bloomington, IL; Sun Prairie, WI; Lakeville, MN; Mankato, MN office locations. The contributions you will make: This position is an enterprise-level individual contributor and technical leader accountable for the engineering direction, reliability, and modernization of the organization's most complex network and telephony services. The role shapes multi-year technical direction, translates target-state architecture into scalable implementation patterns, leads high-impact cross-enterprise initiatives, and establishes standards for campus, branch, data center, cloud, WAN, wireless, voice, unified communications, carrier services, automation, security, and resilience. Influences leaders, engineers, and strategic vendors to deliver sustainable connectivity and communication capabilities across the enterprise. A typical day: Leads engineering direction, reference implementations, standards, and multi-year roadmaps for enterprise network and telephony services in partnership with architecture, product, security, cloud, and service management leaders. Designs and leads delivery of complex network transformations, WAN and wireless modernization, cloud-connectivity programs, telephony and unified communications migrations, carrier transitions, automation initiatives, and resilience improvements. Establishes reusable enterprise patterns for segmentation, routing, secure connectivity, quality of service, call routing, emergency calling, observability, automation, resiliency, lifecycle management, and operational support. Leads resolution of the highest-impact connectivity, performance, voice, carrier, and operational problems; performs deep technical analysis and drives systemic improvements across infrastructure, cloud, security, application, and vendor dependencies. Defines network and telephony engineering measures and practices for availability, performance, capacity, call quality, failover, recoverability, security, compliance, supportability, and production readiness. Serves as a trusted technical advisor to leaders and strategic vendors; mentors senior engineers; and influences investment, vendor, carrier, sequencing, resilience, and lifecycle decisions through executive-ready recommendations. The skills and experience we prefer you have: Bachelor's degree in computer science, information systems, engineering, cybersecurity, telecommunications, or a related field; or an equivalent combination of education and experience sufficient to perform the essential functions of the job. Minimum 10 or more years of progressive experience in network engineering, telecommunications, infrastructure engineering, systems engineering, technology operations, or a related field. Demonstrated success defining and leading enterprise-scale network and telephony strategy, modernization, automation, migrations, resilience improvements, and lifecycle initiatives across complex environments. Expert-level experience with routing, switching, wireless, WAN, cloud connectivity, network services, telephony, unified communications, carrier services, automation, observability, security, technical governance, and vendor or partner delivery. Valid driver's license required. Professional or expert level Cisco, Juniper, Aruba, Arista, or comparable network and telecommunications certifications preferred Experience shaping enterprise adoption of software-defined networking, cloud networking, network observability, infrastructure-as-code, or unified communications and contact-center technologies, preferred. Experience in a regulated financial-services environment or with audit, risk, and control requirements, preferred. Experience defining enterprise service-level objectives and indicators, network performance measures, capacity baselines, and availability reporting, preferred. Experience leading enterprise-scale wireless, carrier, contact-center, or multi-site network transformation initiatives, preferred. Knowledge, Skills & Abilities Deep expertise in enterprise network and telephony engineering, including routing, switching, wireless, SD-WAN, cloud connectivity, network services, segmentation, voice, call routing, quality of service, unified communications, and carrier services. Enterprise-level systems thinking and engineering judgment, with the ability to connect business strategy, architecture, technical dependencies, service outcomes, resilience, risk, and cost. Demonstrated ability to create clarity, establish direction, lead through ambiguity, and resolve complex technical and organizational problems. Exceptional technical leadership, facilitation, communication, storytelling, negotiation, and influencing skills, including communication with executive audiences. Ability to mentor senior engineers, establish enterprise standards and reusable patterns, and raise engineering capability without relying on formal authority. Strong financial, carrier, and vendor acumen, with the ability to evaluate investments, contracts, licensing, technology lifecycle, technical debt, and total cost of ownership. Advanced knowledge of cybersecurity, regulatory and emergency-calling requirements, change management, operational resilience, disaster recovery, and risk management in a financial services environment. How we will take care of you: Our job titles may span more than one career level (associate, senior, principal, etc.). The actual title and base pay offered is dependent upon many factors, such as: training, transferable skills, work experience, business needs and market demands. The base pay range is subject to change and may be modified in the future. This role is eligible for variable compensation and other benefits. Base Pay $118,500-$180,000 USD Compeer Financial is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Must be authorized to work for any employer in the United States. Compeer is unable to sponsor or take over sponsorship of an employment visa at this time. Click here to view federal employment laws applicable for applicants.
11/12/2026
Full time
Job Description Job Description Empowered to live. Inspired to work. Compeer Financial is a member-owned cooperative located in Illinois, Minnesota and Wisconsin. We bring together team members with a variety of backgrounds and experiences to help provide financial services to support agriculture and rural communities. Join us in a culture that not only promotes meaningful work and professional development, but provides a flexible, hybrid work environment and excellent benefits, which empower you to thrive both personally and professionally. How we support you: Hybrid model - up to 50% work from home Flexible schedules including ample flexibility in the summer months Up to 9% towards 401k (3% fixed Compeer contribution plus up to 6% match) Benefits: medical, dental, vision, HSA/FSA, life & AD&D insurance, short-term and long-term disability, wellness program & EAP Vacation, sick leave, holidays/floating holidays, parental leave, and volunteer paid time off Learning and development programs Mentorship programs Cross-functional committee opportunities (i.e. Inclusion Council, emerging professional groups, etc.) Professional membership/certification reimbursement and more! Casual/seasonal & intern team members are not eligible for benefits except for state-mandated programs. To learn more about Compeer Financial visit Where you will work: This position offers a hybrid work option up to 50% remote and is based out of the Bloomington, IL; Sun Prairie, WI; Lakeville, MN; Mankato, MN office locations. The contributions you will make: This position is an enterprise-level individual contributor and technical leader accountable for the engineering direction, reliability, and modernization of the organization's most complex network and telephony services. The role shapes multi-year technical direction, translates target-state architecture into scalable implementation patterns, leads high-impact cross-enterprise initiatives, and establishes standards for campus, branch, data center, cloud, WAN, wireless, voice, unified communications, carrier services, automation, security, and resilience. Influences leaders, engineers, and strategic vendors to deliver sustainable connectivity and communication capabilities across the enterprise. A typical day: Leads engineering direction, reference implementations, standards, and multi-year roadmaps for enterprise network and telephony services in partnership with architecture, product, security, cloud, and service management leaders. Designs and leads delivery of complex network transformations, WAN and wireless modernization, cloud-connectivity programs, telephony and unified communications migrations, carrier transitions, automation initiatives, and resilience improvements. Establishes reusable enterprise patterns for segmentation, routing, secure connectivity, quality of service, call routing, emergency calling, observability, automation, resiliency, lifecycle management, and operational support. Leads resolution of the highest-impact connectivity, performance, voice, carrier, and operational problems; performs deep technical analysis and drives systemic improvements across infrastructure, cloud, security, application, and vendor dependencies. Defines network and telephony engineering measures and practices for availability, performance, capacity, call quality, failover, recoverability, security, compliance, supportability, and production readiness. Serves as a trusted technical advisor to leaders and strategic vendors; mentors senior engineers; and influences investment, vendor, carrier, sequencing, resilience, and lifecycle decisions through executive-ready recommendations. The skills and experience we prefer you have: Bachelor's degree in computer science, information systems, engineering, cybersecurity, telecommunications, or a related field; or an equivalent combination of education and experience sufficient to perform the essential functions of the job. Minimum 10 or more years of progressive experience in network engineering, telecommunications, infrastructure engineering, systems engineering, technology operations, or a related field. Demonstrated success defining and leading enterprise-scale network and telephony strategy, modernization, automation, migrations, resilience improvements, and lifecycle initiatives across complex environments. Expert-level experience with routing, switching, wireless, WAN, cloud connectivity, network services, telephony, unified communications, carrier services, automation, observability, security, technical governance, and vendor or partner delivery. Valid driver's license required. Professional or expert level Cisco, Juniper, Aruba, Arista, or comparable network and telecommunications certifications preferred Experience shaping enterprise adoption of software-defined networking, cloud networking, network observability, infrastructure-as-code, or unified communications and contact-center technologies, preferred. Experience in a regulated financial-services environment or with audit, risk, and control requirements, preferred. Experience defining enterprise service-level objectives and indicators, network performance measures, capacity baselines, and availability reporting, preferred. Experience leading enterprise-scale wireless, carrier, contact-center, or multi-site network transformation initiatives, preferred. Knowledge, Skills & Abilities Deep expertise in enterprise network and telephony engineering, including routing, switching, wireless, SD-WAN, cloud connectivity, network services, segmentation, voice, call routing, quality of service, unified communications, and carrier services. Enterprise-level systems thinking and engineering judgment, with the ability to connect business strategy, architecture, technical dependencies, service outcomes, resilience, risk, and cost. Demonstrated ability to create clarity, establish direction, lead through ambiguity, and resolve complex technical and organizational problems. Exceptional technical leadership, facilitation, communication, storytelling, negotiation, and influencing skills, including communication with executive audiences. Ability to mentor senior engineers, establish enterprise standards and reusable patterns, and raise engineering capability without relying on formal authority. Strong financial, carrier, and vendor acumen, with the ability to evaluate investments, contracts, licensing, technology lifecycle, technical debt, and total cost of ownership. Advanced knowledge of cybersecurity, regulatory and emergency-calling requirements, change management, operational resilience, disaster recovery, and risk management in a financial services environment. How we will take care of you: Our job titles may span more than one career level (associate, senior, principal, etc.). The actual title and base pay offered is dependent upon many factors, such as: training, transferable skills, work experience, business needs and market demands. The base pay range is subject to change and may be modified in the future. This role is eligible for variable compensation and other benefits. Base Pay $118,500-$180,000 USD Compeer Financial is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Must be authorized to work for any employer in the United States. Compeer is unable to sponsor or take over sponsorship of an employment visa at this time. Click here to view federal employment laws applicable for applicants.
Job Description Job Description Job Description: In this position, you will serve as a Principal Network Engineer supporting multiple advanced defense and space programs with a primary focus on the Space Development Agency (SDA), U.S. Space Force, and other DoD customers. You will provide technical leadership for engineering teams responsible for designing, integrating, securing, testing, and evaluating space-based network architectures supporting next-generation satellite constellations and mission systems. The ideal candidate possesses extensive experience leading network engineering efforts supporting space systems, satellite communications (SATCOM), mission operations centers, and ground infrastructure. Experience designing secure end-to-end communications across satellites, tactical users, terrestrial networks, cloud environments, and ground stations is highly desirable. Experience working with commercial and government satellite operators, telecommunications providers, cloud service providers, and defense contractors on both technical and contractual matters is required. The candidate must be capable of directly interfacing with customers on highly technical engineering issues, systems architecture, technical risk management, and program execution. Strong leadership, exceptional communication skills, and outstanding analytical and problem-solving abilities are essential. Under the direction of the Program Manager, the candidate will lead engineering efforts supporting research, development, integration, testing, cyber assessments, and operational evaluation of networking technologies. Responsibilities include Secure integration of space communications components and systems; Network modeling and simulation; Technology demonstrations; Prototype evaluations; Mission assurance assessment support; Network performance analysis; Communications resiliency assessments; and Zero Trust implementation across hybrid network environments. Requirements: Required Education: BS in Computer Science, Computer Engineering, Electrical Engineering, Network Engineering, Information Technology, Cybersecurity, Aerospace Engineering, or related discipline. Desired Education: MS in Computer Science, Electrical Engineering, Network Engineering, Cybersecurity, Systems Engineering, Aerospace Engineering, or related discipline. Required Experience: x 10 years designing, engineering, integrating, or operating secure network infrastructures supporting space systems and defense communications architectures. x 10 years of experience supporting space vehicle communications, ground systems, mission operations, and satellite networking. x 10 years designing enterprise and tactical IP networks including IPv4/IPv6, BGP, OSPF, Ethernet switching, MPLS, SDN, QoS, WAN/LAN/MAN, multicast, and network resiliency. x 5 years leading technical teams supporting satellite networking, mission operations centers, ground stations, or hybrid terrestrial/non-terrestrial networking. x 5 years managing technical projects involving telecommunications providers, satellite operators, cloud providers, equipment manufacturers, and government customers. x 3 years supporting cybersecurity engineering including Zero Trust Architecture, network segmentation, firewalls, IDS/IPS, SIEM, RMF, DoD STIG implementation, vulnerability assessments, and cyber testing. x Experience supporting space networking test events, mission rehearsals, operational demonstrations, or developmental test activities. x Experience integrating commercial and government space systems into resilient mission architectures. Marathon TS is committed to the development of a creative, diverse and inclusive work environment. In order to provide equal employment and advancement opportunities to all individuals, employment decisions at Marathon TS will be based on merit, qualifications, and abilities. Marathon TS does not discriminate against any person because of race, color, creed, religion, sex, national origin, disability, age or any other characteristic protected by law (referred to as "protected status ").
11/12/2026
Full time
Job Description Job Description Job Description: In this position, you will serve as a Principal Network Engineer supporting multiple advanced defense and space programs with a primary focus on the Space Development Agency (SDA), U.S. Space Force, and other DoD customers. You will provide technical leadership for engineering teams responsible for designing, integrating, securing, testing, and evaluating space-based network architectures supporting next-generation satellite constellations and mission systems. The ideal candidate possesses extensive experience leading network engineering efforts supporting space systems, satellite communications (SATCOM), mission operations centers, and ground infrastructure. Experience designing secure end-to-end communications across satellites, tactical users, terrestrial networks, cloud environments, and ground stations is highly desirable. Experience working with commercial and government satellite operators, telecommunications providers, cloud service providers, and defense contractors on both technical and contractual matters is required. The candidate must be capable of directly interfacing with customers on highly technical engineering issues, systems architecture, technical risk management, and program execution. Strong leadership, exceptional communication skills, and outstanding analytical and problem-solving abilities are essential. Under the direction of the Program Manager, the candidate will lead engineering efforts supporting research, development, integration, testing, cyber assessments, and operational evaluation of networking technologies. Responsibilities include Secure integration of space communications components and systems; Network modeling and simulation; Technology demonstrations; Prototype evaluations; Mission assurance assessment support; Network performance analysis; Communications resiliency assessments; and Zero Trust implementation across hybrid network environments. Requirements: Required Education: BS in Computer Science, Computer Engineering, Electrical Engineering, Network Engineering, Information Technology, Cybersecurity, Aerospace Engineering, or related discipline. Desired Education: MS in Computer Science, Electrical Engineering, Network Engineering, Cybersecurity, Systems Engineering, Aerospace Engineering, or related discipline. Required Experience: x 10 years designing, engineering, integrating, or operating secure network infrastructures supporting space systems and defense communications architectures. x 10 years of experience supporting space vehicle communications, ground systems, mission operations, and satellite networking. x 10 years designing enterprise and tactical IP networks including IPv4/IPv6, BGP, OSPF, Ethernet switching, MPLS, SDN, QoS, WAN/LAN/MAN, multicast, and network resiliency. x 5 years leading technical teams supporting satellite networking, mission operations centers, ground stations, or hybrid terrestrial/non-terrestrial networking. x 5 years managing technical projects involving telecommunications providers, satellite operators, cloud providers, equipment manufacturers, and government customers. x 3 years supporting cybersecurity engineering including Zero Trust Architecture, network segmentation, firewalls, IDS/IPS, SIEM, RMF, DoD STIG implementation, vulnerability assessments, and cyber testing. x Experience supporting space networking test events, mission rehearsals, operational demonstrations, or developmental test activities. x Experience integrating commercial and government space systems into resilient mission architectures. Marathon TS is committed to the development of a creative, diverse and inclusive work environment. In order to provide equal employment and advancement opportunities to all individuals, employment decisions at Marathon TS will be based on merit, qualifications, and abilities. Marathon TS does not discriminate against any person because of race, color, creed, religion, sex, national origin, disability, age or any other characteristic protected by law (referred to as "protected status ").
Job Description Job Description Comments - No set days required in office, will be ad-hoc for meetings etc. and then perhaps some travel to the DC locations. Most work will be done remotely. Location (Complete Work Address with Zip code): 170 Data Dr, Waltham, MA 02451 55 Bearfoot Rd, Northborough, MA 01532 300 Erie Blvd West, Syracuse, NY 13202 2 Hanson Pl, Brooklyn, NY 11217 Role Purpose Principal Network Engineer within the Global Network Engineering team, responsible for delivering a major Internet Gateway Migration programme across the US and UK regions, owning the low-level design and implementation activities. Working closely with other Network engineers, Network Architects, Security Architects, Operations teams, and suppliers, you will design, build, test, migrate, and troubleshoot complex enterprise network services across Internet, WAN, SD-WAN, cloud, and security domains. This is a hands-on network engineering role. Key Responsibilities Design, build, test, and implement Internet Gateway migration solutions. Configure and troubleshoot complex routing environments including BGP, OSPF, MPLS, VRFs, route redistribution, and traffic engineering. Perform deep-dive troubleshooting across Internet edge, SD-WAN, WAN, LAN, cloud, security, and carrier connectivity domains. Develop and execute migration plans, implementation procedures, service cutovers, rollback strategies, and operational acceptance testing. Perform detailed dependency analysis across routing, security, DNS, DDI, remote access, cloud connectivity, and carrier services. Analyse technical dependencies and resolve migration blockers across network and security services. Create and review low-level designs, implementation plans, MOPs, and operational documentation. Work closely with Network Architects to translate target-state designs into deployable engineering solutions. Support and Lead on major implementation events, service transitions, and high-risk change activities. Drive engineering best practice, technical quality, and operational readiness. Required Skills & Experience CCIE (Cisco Certified Internetwork Expert) - Enterprise Infrastructure (mandatory) Expert-level BGP knowledge including Internet edge design, route policy, traffic engineering, route filtering, and multi-carrier connectivity. Extensive hands-on experience with Cisco enterprise routing and switching platforms. Proven experience designing and implementing enterprise Internet connectivity solutions. Strong SD-WAN engineering experience (Cisco Viptela). Strong understanding of OSPF, MPLS, VRFs, QoS, route redistribution, and high-availability network design. Experience delivering complex network migrations and transformation programmes. Experience integrating enterprise networks with Azure and hybrid-cloud environments. Advanced troubleshooting skills using packet captures, protocol analysis, routing diagnostics, and telemetry tools. Experience working directly with ISPs, carriers, and managed service providers. Experience producing implementation plans, migration runbooks, and low-level designs. Desirable Skills CCDE or equivalent design experience. Azure ExpressRoute and hybrid-cloud networking. Network automation using tools such as Python, Ansible, NetBrain. Experience within Utilities, Energy, Critical National Infrastructure, or highly regulated environments.
11/12/2026
Full time
Job Description Job Description Comments - No set days required in office, will be ad-hoc for meetings etc. and then perhaps some travel to the DC locations. Most work will be done remotely. Location (Complete Work Address with Zip code): 170 Data Dr, Waltham, MA 02451 55 Bearfoot Rd, Northborough, MA 01532 300 Erie Blvd West, Syracuse, NY 13202 2 Hanson Pl, Brooklyn, NY 11217 Role Purpose Principal Network Engineer within the Global Network Engineering team, responsible for delivering a major Internet Gateway Migration programme across the US and UK regions, owning the low-level design and implementation activities. Working closely with other Network engineers, Network Architects, Security Architects, Operations teams, and suppliers, you will design, build, test, migrate, and troubleshoot complex enterprise network services across Internet, WAN, SD-WAN, cloud, and security domains. This is a hands-on network engineering role. Key Responsibilities Design, build, test, and implement Internet Gateway migration solutions. Configure and troubleshoot complex routing environments including BGP, OSPF, MPLS, VRFs, route redistribution, and traffic engineering. Perform deep-dive troubleshooting across Internet edge, SD-WAN, WAN, LAN, cloud, security, and carrier connectivity domains. Develop and execute migration plans, implementation procedures, service cutovers, rollback strategies, and operational acceptance testing. Perform detailed dependency analysis across routing, security, DNS, DDI, remote access, cloud connectivity, and carrier services. Analyse technical dependencies and resolve migration blockers across network and security services. Create and review low-level designs, implementation plans, MOPs, and operational documentation. Work closely with Network Architects to translate target-state designs into deployable engineering solutions. Support and Lead on major implementation events, service transitions, and high-risk change activities. Drive engineering best practice, technical quality, and operational readiness. Required Skills & Experience CCIE (Cisco Certified Internetwork Expert) - Enterprise Infrastructure (mandatory) Expert-level BGP knowledge including Internet edge design, route policy, traffic engineering, route filtering, and multi-carrier connectivity. Extensive hands-on experience with Cisco enterprise routing and switching platforms. Proven experience designing and implementing enterprise Internet connectivity solutions. Strong SD-WAN engineering experience (Cisco Viptela). Strong understanding of OSPF, MPLS, VRFs, QoS, route redistribution, and high-availability network design. Experience delivering complex network migrations and transformation programmes. Experience integrating enterprise networks with Azure and hybrid-cloud environments. Advanced troubleshooting skills using packet captures, protocol analysis, routing diagnostics, and telemetry tools. Experience working directly with ISPs, carriers, and managed service providers. Experience producing implementation plans, migration runbooks, and low-level designs. Desirable Skills CCDE or equivalent design experience. Azure ExpressRoute and hybrid-cloud networking. Network automation using tools such as Python, Ansible, NetBrain. Experience within Utilities, Energy, Critical National Infrastructure, or highly regulated environments.
Job Description Job Description Empowered to live. Inspired to work. Compeer Financial is a member-owned cooperative located in Illinois, Minnesota and Wisconsin. We bring together team members with a variety of backgrounds and experiences to help provide financial services to support agriculture and rural communities. Join us in a culture that not only promotes meaningful work and professional development, but provides a flexible, hybrid work environment and excellent benefits, which empower you to thrive both personally and professionally. How we support you: Hybrid model - up to 50% work from home Flexible schedules including ample flexibility in the summer months Up to 9% towards 401k (3% fixed Compeer contribution plus up to 6% match) Benefits: medical, dental, vision, HSA/FSA, life & AD&D insurance, short-term and long-term disability, wellness program & EAP Vacation, sick leave, holidays/floating holidays, parental leave, and volunteer paid time off Learning and development programs Mentorship programs Cross-functional committee opportunities (i.e. Inclusion Council, emerging professional groups, etc.) Professional membership/certification reimbursement and more! Casual/seasonal & intern team members are not eligible for benefits except for state-mandated programs. To learn more about Compeer Financial visit Where you will work: This position offers a hybrid work option up to 50% remote and is based out of the Bloomington, IL; Sun Prairie, WI; Lakeville, MN; Mankato, MN office locations. The contributions you will make: This position is an enterprise-level individual contributor and technical leader accountable for the engineering direction, reliability, and modernization of the organization's most complex network and telephony services. The role shapes multi-year technical direction, translates target-state architecture into scalable implementation patterns, leads high-impact cross-enterprise initiatives, and establishes standards for campus, branch, data center, cloud, WAN, wireless, voice, unified communications, carrier services, automation, security, and resilience. Influences leaders, engineers, and strategic vendors to deliver sustainable connectivity and communication capabilities across the enterprise. A typical day: Leads engineering direction, reference implementations, standards, and multi-year roadmaps for enterprise network and telephony services in partnership with architecture, product, security, cloud, and service management leaders. Designs and leads delivery of complex network transformations, WAN and wireless modernization, cloud-connectivity programs, telephony and unified communications migrations, carrier transitions, automation initiatives, and resilience improvements. Establishes reusable enterprise patterns for segmentation, routing, secure connectivity, quality of service, call routing, emergency calling, observability, automation, resiliency, lifecycle management, and operational support. Leads resolution of the highest-impact connectivity, performance, voice, carrier, and operational problems; performs deep technical analysis and drives systemic improvements across infrastructure, cloud, security, application, and vendor dependencies. Defines network and telephony engineering measures and practices for availability, performance, capacity, call quality, failover, recoverability, security, compliance, supportability, and production readiness. Serves as a trusted technical advisor to leaders and strategic vendors; mentors senior engineers; and influences investment, vendor, carrier, sequencing, resilience, and lifecycle decisions through executive-ready recommendations. The skills and experience we prefer you have: Bachelor's degree in computer science, information systems, engineering, cybersecurity, telecommunications, or a related field; or an equivalent combination of education and experience sufficient to perform the essential functions of the job. Minimum 10 or more years of progressive experience in network engineering, telecommunications, infrastructure engineering, systems engineering, technology operations, or a related field. Demonstrated success defining and leading enterprise-scale network and telephony strategy, modernization, automation, migrations, resilience improvements, and lifecycle initiatives across complex environments. Expert-level experience with routing, switching, wireless, WAN, cloud connectivity, network services, telephony, unified communications, carrier services, automation, observability, security, technical governance, and vendor or partner delivery. Valid driver's license required. Professional or expert level Cisco, Juniper, Aruba, Arista, or comparable network and telecommunications certifications preferred Experience shaping enterprise adoption of software-defined networking, cloud networking, network observability, infrastructure-as-code, or unified communications and contact-center technologies, preferred. Experience in a regulated financial-services environment or with audit, risk, and control requirements, preferred. Experience defining enterprise service-level objectives and indicators, network performance measures, capacity baselines, and availability reporting, preferred. Experience leading enterprise-scale wireless, carrier, contact-center, or multi-site network transformation initiatives, preferred. Knowledge, Skills & Abilities Deep expertise in enterprise network and telephony engineering, including routing, switching, wireless, SD-WAN, cloud connectivity, network services, segmentation, voice, call routing, quality of service, unified communications, and carrier services. Enterprise-level systems thinking and engineering judgment, with the ability to connect business strategy, architecture, technical dependencies, service outcomes, resilience, risk, and cost. Demonstrated ability to create clarity, establish direction, lead through ambiguity, and resolve complex technical and organizational problems. Exceptional technical leadership, facilitation, communication, storytelling, negotiation, and influencing skills, including communication with executive audiences. Ability to mentor senior engineers, establish enterprise standards and reusable patterns, and raise engineering capability without relying on formal authority. Strong financial, carrier, and vendor acumen, with the ability to evaluate investments, contracts, licensing, technology lifecycle, technical debt, and total cost of ownership. Advanced knowledge of cybersecurity, regulatory and emergency-calling requirements, change management, operational resilience, disaster recovery, and risk management in a financial services environment. How we will take care of you: Our job titles may span more than one career level (associate, senior, principal, etc.). The actual title and base pay offered is dependent upon many factors, such as: training, transferable skills, work experience, business needs and market demands. The base pay range is subject to change and may be modified in the future. This role is eligible for variable compensation and other benefits. Base Pay $118,500-$180,000 USD Compeer Financial is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Must be authorized to work for any employer in the United States. Compeer is unable to sponsor or take over sponsorship of an employment visa at this time. Click here to view federal employment laws applicable for applicants.
11/12/2026
Full time
Job Description Job Description Empowered to live. Inspired to work. Compeer Financial is a member-owned cooperative located in Illinois, Minnesota and Wisconsin. We bring together team members with a variety of backgrounds and experiences to help provide financial services to support agriculture and rural communities. Join us in a culture that not only promotes meaningful work and professional development, but provides a flexible, hybrid work environment and excellent benefits, which empower you to thrive both personally and professionally. How we support you: Hybrid model - up to 50% work from home Flexible schedules including ample flexibility in the summer months Up to 9% towards 401k (3% fixed Compeer contribution plus up to 6% match) Benefits: medical, dental, vision, HSA/FSA, life & AD&D insurance, short-term and long-term disability, wellness program & EAP Vacation, sick leave, holidays/floating holidays, parental leave, and volunteer paid time off Learning and development programs Mentorship programs Cross-functional committee opportunities (i.e. Inclusion Council, emerging professional groups, etc.) Professional membership/certification reimbursement and more! Casual/seasonal & intern team members are not eligible for benefits except for state-mandated programs. To learn more about Compeer Financial visit Where you will work: This position offers a hybrid work option up to 50% remote and is based out of the Bloomington, IL; Sun Prairie, WI; Lakeville, MN; Mankato, MN office locations. The contributions you will make: This position is an enterprise-level individual contributor and technical leader accountable for the engineering direction, reliability, and modernization of the organization's most complex network and telephony services. The role shapes multi-year technical direction, translates target-state architecture into scalable implementation patterns, leads high-impact cross-enterprise initiatives, and establishes standards for campus, branch, data center, cloud, WAN, wireless, voice, unified communications, carrier services, automation, security, and resilience. Influences leaders, engineers, and strategic vendors to deliver sustainable connectivity and communication capabilities across the enterprise. A typical day: Leads engineering direction, reference implementations, standards, and multi-year roadmaps for enterprise network and telephony services in partnership with architecture, product, security, cloud, and service management leaders. Designs and leads delivery of complex network transformations, WAN and wireless modernization, cloud-connectivity programs, telephony and unified communications migrations, carrier transitions, automation initiatives, and resilience improvements. Establishes reusable enterprise patterns for segmentation, routing, secure connectivity, quality of service, call routing, emergency calling, observability, automation, resiliency, lifecycle management, and operational support. Leads resolution of the highest-impact connectivity, performance, voice, carrier, and operational problems; performs deep technical analysis and drives systemic improvements across infrastructure, cloud, security, application, and vendor dependencies. Defines network and telephony engineering measures and practices for availability, performance, capacity, call quality, failover, recoverability, security, compliance, supportability, and production readiness. Serves as a trusted technical advisor to leaders and strategic vendors; mentors senior engineers; and influences investment, vendor, carrier, sequencing, resilience, and lifecycle decisions through executive-ready recommendations. The skills and experience we prefer you have: Bachelor's degree in computer science, information systems, engineering, cybersecurity, telecommunications, or a related field; or an equivalent combination of education and experience sufficient to perform the essential functions of the job. Minimum 10 or more years of progressive experience in network engineering, telecommunications, infrastructure engineering, systems engineering, technology operations, or a related field. Demonstrated success defining and leading enterprise-scale network and telephony strategy, modernization, automation, migrations, resilience improvements, and lifecycle initiatives across complex environments. Expert-level experience with routing, switching, wireless, WAN, cloud connectivity, network services, telephony, unified communications, carrier services, automation, observability, security, technical governance, and vendor or partner delivery. Valid driver's license required. Professional or expert level Cisco, Juniper, Aruba, Arista, or comparable network and telecommunications certifications preferred Experience shaping enterprise adoption of software-defined networking, cloud networking, network observability, infrastructure-as-code, or unified communications and contact-center technologies, preferred. Experience in a regulated financial-services environment or with audit, risk, and control requirements, preferred. Experience defining enterprise service-level objectives and indicators, network performance measures, capacity baselines, and availability reporting, preferred. Experience leading enterprise-scale wireless, carrier, contact-center, or multi-site network transformation initiatives, preferred. Knowledge, Skills & Abilities Deep expertise in enterprise network and telephony engineering, including routing, switching, wireless, SD-WAN, cloud connectivity, network services, segmentation, voice, call routing, quality of service, unified communications, and carrier services. Enterprise-level systems thinking and engineering judgment, with the ability to connect business strategy, architecture, technical dependencies, service outcomes, resilience, risk, and cost. Demonstrated ability to create clarity, establish direction, lead through ambiguity, and resolve complex technical and organizational problems. Exceptional technical leadership, facilitation, communication, storytelling, negotiation, and influencing skills, including communication with executive audiences. Ability to mentor senior engineers, establish enterprise standards and reusable patterns, and raise engineering capability without relying on formal authority. Strong financial, carrier, and vendor acumen, with the ability to evaluate investments, contracts, licensing, technology lifecycle, technical debt, and total cost of ownership. Advanced knowledge of cybersecurity, regulatory and emergency-calling requirements, change management, operational resilience, disaster recovery, and risk management in a financial services environment. How we will take care of you: Our job titles may span more than one career level (associate, senior, principal, etc.). The actual title and base pay offered is dependent upon many factors, such as: training, transferable skills, work experience, business needs and market demands. The base pay range is subject to change and may be modified in the future. This role is eligible for variable compensation and other benefits. Base Pay $118,500-$180,000 USD Compeer Financial is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Must be authorized to work for any employer in the United States. Compeer is unable to sponsor or take over sponsorship of an employment visa at this time. Click here to view federal employment laws applicable for applicants.
Job Description Job Description APCO Holdings partners with dealerships across North America to deliver innovative vehicle protection products and services that enhance the ownership experience for customers and drive growth for our partners. Through our family of brands, we bring together industry expertise, technology, and data-driven insights to help dealers strengthen their finance and insurance performance and build lasting relationships with their customers. Our teams work collaboratively across operations, technology, risk, finance, marketing, and sales to deliver solutions that create measurable value and support the continued growth of APCO and the partners we serve. The Sr. Network Engineer & Connectivity Architect serves as the principal architect of the organization's enterprise connectivity platform ("The Backbone"), with a primary focus on Microsoft Azure networking, Cisco Meraki infrastructure, and identity-driven access (Active Directory & Entra ID). This role is responsible for designing and operating a secure, highly resilient, and cloud-aligned network architecture, where access decisions are governed by user identity, device posture, and real-time risk signals, rather than traditional network boundaries. Leveraging Infrastructure as Code (IaC), AIOps, and Zero Trust principles, this position ensures seamless, secure connectivity across Azure, on-prem environments, branch networks (Meraki), and SaaS platforms such as Microsoft 365, while enabling a scalable, automated, and self-healing infrastructure. Key Responsibilities Identity-Driven Network Architecture (CORE) Design and implement a network architecture where identity is the primary control plane. Integrate Active Directory (on-prem), Entra ID, and identity providers (Okta) with network enforcement points to enable real-time, identity-based access decisions. Active Directory & Hybrid Identity Ownership Architect and support enterprise-scale hybrid identity environments, including: Active Directory design (sites, replication, GPO strategy) Entra Connect (Azure AD Connect) synchronization Authentication protocols (Kerberos, NTLM, modern authentication) Secure integration with cloud and network services Entra ID & Conditional Access Engineering Design, implement, and optimize Conditional Access policies, including: MFA enforcement strategies Device compliance (Intune integration) Risk-based and session-based access controls Location-aware and Zero Trust access models Zero Trust & Identity Enforcement Lead the implementation of a Zero Trust architecture by aligning: Identity (Entra ID / Active Directory / Okta) Network (Azure, Meraki) Endpoint (Intune / device posture) Ensure consistent enforcement of least privilege access across all environments Microsoft 365 Identity & Access Optimization Ensure secure, high-performance access to Microsoft 365 by: Aligning identity policies with network routing and access controls Supporting modern authentication flows and token-based access Optimizing Teams, Exchange, and SharePoint connectivity Azure-Centric Network Architecture Design and implement scalable Azure networking solutions, including: Virtual Networks (VNet) and Hub-and-Spoke architectures Private Endpoints and Private Link Azure Firewall, NSGs, and routing strategies DNS architecture and name resolution Meraki Network Design & Operations Lead the design, deployment, and optimization of Cisco Meraki environments, including: MX (SD-WAN & security appliances) MS (switching) MR (wireless) Auto VPN and centralized cloud-based management Hybrid Connectivity & Interconnects Architect and manage secure connectivity between environments using: ExpressRoute VPN Gateways Meraki SD-WAN (Auto VPN) Ensure low latency, high availability, and seamless failover. Infrastructure as Code (IaC) & Automation Manage network and cloud configurations as code using: Terraform, Bicep, or ARM templates CI/CD pipelines (Azure DevOps, GitHub Actions) Ensure all deployments are standardized, repeatable, and auditable. AI Ops & Observability Implement monitoring and telemetry across Azure and Meraki using: Azure Monitor & Log Analytics Meraki Dashboard Observability tools (Dynatrace, Splunk, etc.) Enable proactive detection, anomaly identification, and automated remediation. Resiliency & Buiness Continuity Engineering (CRITICAL) Design and maintain a highly resilient network architecture across Azure, Meraki, on-prem, and SaaS environments: Eliminate single points of failure Implement redundancy across WAN, LAN, wireless, and cloud Design for automated failover and rapid recovery Ensure identity-dependent services remain available during outages Governance & Policy Enforcement Establish and enforce governance using: Azure Policy and tagging standards Policy-as-Code frameworks Identity governance (access reviews, RBAC, least privilege) Ensure compliance with security, regulatory, and enterprise standards. Technical Expertise Category Requirements Identity & Access (PRIMARY) Deep expertise in Active Directory (architecture, GPOs, replication), Entra ID, Conditional Access, MFA, federation (SAML, OAuth, OIDC), hybrid identity Zero Trust Architecture Experience implementing identity-driven access integrating network, endpoint, and SaaS Azure Networking (PRIMARY) VNets, ExpressRoute, VPN Gateway, Azure Firewall, Private Link, DNS, Hub-Spoke design Meraki (PRIMARY) MX (SD-WAN), MS (switching), MR (wireless), Auto VPN, Meraki Dashboard Automation & IaC Terraform, Bicep, ARM templates, CI/CD pipelines M365 Integration Identity and network dependency across Exchange, Teams, SharePoint Endpoint Integration Intune/device compliance integration with access policies Observability Azure Monitor, Log Analytics, Meraki Dashboard, Dynatrace, Splunk Scripting & DevOps PowerShell, Python, or similar scripting experience Education and Experience Bachelor's degree in Computer Science, Information Technology, or a related technical field; Master's degree in Information Systems Management preferred. In lieu of a degree, 12+ years of enterprise-level infrastructure experience with a proven track record of delivering automation-first networking projects. Required Experience 8-10+ years of enterprise networking experience 5+ years of Active Directory experience (enterprise scale) 3+ years of Entra ID (Azure AD), Conditional Access, and MFA 3+ years of Azure networking experience 3+ years of Cisco Meraki experience (SD-WAN, switching, wireless) Experience designing hybrid connectivity (ExpressRoute, VPN, SD-WAN) Experience implementing IaC (Terraform, Bicep, ARM) Experience integrating identity with network and Zero Trust frameworks Proven experience leading a transition from legacy "box-by-box" management to a centralized, API-driven orchestration model. Preferred Experience Microsoft 365 performance and connectivity optimization Certifications (Preferred) Microsoft Certified: Azure Network Engineer Associate (AZ-700) Microsoft Certified: Identity and Access Administrator (SC-300) Microsoft Certified: Azure Solutions Architect Expert Cisco Meraki Solutions Specialist (CMSS) Cisco Certified Internetwork Expert (CCIE) or CCNP Enterprise Cisco Certified DevNet Professional Hashi Corp Certified: Terraform Associate Certified Kubernetes Administrator (CKA) At APCO, the way we work matters just as much as the results we deliver. Our values guide how we work, how we partner, and how we deliver results. We C.A.R.E. C ommitted - We build strong, high-trust relationships with our partners and each other. A ccountable - We take ownership of outcomes and hold ourselves to the highest standards of performance and integrity. R esults-Driven - We focus on delivering measurable outcomes that create value for our partners and our business. E xcellent - We strive for excellence in everything we do while balancing short-term performance with long-term success. If you're excited about joining a team that values collaboration, accountability, and continuous improvement, we'd love to hear from you. By submitting your application, you acknowledge that you have read and understand our Privacy Policy and Terms & Conditions. APCO Holdings may collect personal information (such as name, contact details, and employment history) to evaluate your candidacy. We may share this data with our subsidiaries, affiliates, and service providers . click apply for full job details
11/12/2026
Full time
Job Description Job Description APCO Holdings partners with dealerships across North America to deliver innovative vehicle protection products and services that enhance the ownership experience for customers and drive growth for our partners. Through our family of brands, we bring together industry expertise, technology, and data-driven insights to help dealers strengthen their finance and insurance performance and build lasting relationships with their customers. Our teams work collaboratively across operations, technology, risk, finance, marketing, and sales to deliver solutions that create measurable value and support the continued growth of APCO and the partners we serve. The Sr. Network Engineer & Connectivity Architect serves as the principal architect of the organization's enterprise connectivity platform ("The Backbone"), with a primary focus on Microsoft Azure networking, Cisco Meraki infrastructure, and identity-driven access (Active Directory & Entra ID). This role is responsible for designing and operating a secure, highly resilient, and cloud-aligned network architecture, where access decisions are governed by user identity, device posture, and real-time risk signals, rather than traditional network boundaries. Leveraging Infrastructure as Code (IaC), AIOps, and Zero Trust principles, this position ensures seamless, secure connectivity across Azure, on-prem environments, branch networks (Meraki), and SaaS platforms such as Microsoft 365, while enabling a scalable, automated, and self-healing infrastructure. Key Responsibilities Identity-Driven Network Architecture (CORE) Design and implement a network architecture where identity is the primary control plane. Integrate Active Directory (on-prem), Entra ID, and identity providers (Okta) with network enforcement points to enable real-time, identity-based access decisions. Active Directory & Hybrid Identity Ownership Architect and support enterprise-scale hybrid identity environments, including: Active Directory design (sites, replication, GPO strategy) Entra Connect (Azure AD Connect) synchronization Authentication protocols (Kerberos, NTLM, modern authentication) Secure integration with cloud and network services Entra ID & Conditional Access Engineering Design, implement, and optimize Conditional Access policies, including: MFA enforcement strategies Device compliance (Intune integration) Risk-based and session-based access controls Location-aware and Zero Trust access models Zero Trust & Identity Enforcement Lead the implementation of a Zero Trust architecture by aligning: Identity (Entra ID / Active Directory / Okta) Network (Azure, Meraki) Endpoint (Intune / device posture) Ensure consistent enforcement of least privilege access across all environments Microsoft 365 Identity & Access Optimization Ensure secure, high-performance access to Microsoft 365 by: Aligning identity policies with network routing and access controls Supporting modern authentication flows and token-based access Optimizing Teams, Exchange, and SharePoint connectivity Azure-Centric Network Architecture Design and implement scalable Azure networking solutions, including: Virtual Networks (VNet) and Hub-and-Spoke architectures Private Endpoints and Private Link Azure Firewall, NSGs, and routing strategies DNS architecture and name resolution Meraki Network Design & Operations Lead the design, deployment, and optimization of Cisco Meraki environments, including: MX (SD-WAN & security appliances) MS (switching) MR (wireless) Auto VPN and centralized cloud-based management Hybrid Connectivity & Interconnects Architect and manage secure connectivity between environments using: ExpressRoute VPN Gateways Meraki SD-WAN (Auto VPN) Ensure low latency, high availability, and seamless failover. Infrastructure as Code (IaC) & Automation Manage network and cloud configurations as code using: Terraform, Bicep, or ARM templates CI/CD pipelines (Azure DevOps, GitHub Actions) Ensure all deployments are standardized, repeatable, and auditable. AI Ops & Observability Implement monitoring and telemetry across Azure and Meraki using: Azure Monitor & Log Analytics Meraki Dashboard Observability tools (Dynatrace, Splunk, etc.) Enable proactive detection, anomaly identification, and automated remediation. Resiliency & Buiness Continuity Engineering (CRITICAL) Design and maintain a highly resilient network architecture across Azure, Meraki, on-prem, and SaaS environments: Eliminate single points of failure Implement redundancy across WAN, LAN, wireless, and cloud Design for automated failover and rapid recovery Ensure identity-dependent services remain available during outages Governance & Policy Enforcement Establish and enforce governance using: Azure Policy and tagging standards Policy-as-Code frameworks Identity governance (access reviews, RBAC, least privilege) Ensure compliance with security, regulatory, and enterprise standards. Technical Expertise Category Requirements Identity & Access (PRIMARY) Deep expertise in Active Directory (architecture, GPOs, replication), Entra ID, Conditional Access, MFA, federation (SAML, OAuth, OIDC), hybrid identity Zero Trust Architecture Experience implementing identity-driven access integrating network, endpoint, and SaaS Azure Networking (PRIMARY) VNets, ExpressRoute, VPN Gateway, Azure Firewall, Private Link, DNS, Hub-Spoke design Meraki (PRIMARY) MX (SD-WAN), MS (switching), MR (wireless), Auto VPN, Meraki Dashboard Automation & IaC Terraform, Bicep, ARM templates, CI/CD pipelines M365 Integration Identity and network dependency across Exchange, Teams, SharePoint Endpoint Integration Intune/device compliance integration with access policies Observability Azure Monitor, Log Analytics, Meraki Dashboard, Dynatrace, Splunk Scripting & DevOps PowerShell, Python, or similar scripting experience Education and Experience Bachelor's degree in Computer Science, Information Technology, or a related technical field; Master's degree in Information Systems Management preferred. In lieu of a degree, 12+ years of enterprise-level infrastructure experience with a proven track record of delivering automation-first networking projects. Required Experience 8-10+ years of enterprise networking experience 5+ years of Active Directory experience (enterprise scale) 3+ years of Entra ID (Azure AD), Conditional Access, and MFA 3+ years of Azure networking experience 3+ years of Cisco Meraki experience (SD-WAN, switching, wireless) Experience designing hybrid connectivity (ExpressRoute, VPN, SD-WAN) Experience implementing IaC (Terraform, Bicep, ARM) Experience integrating identity with network and Zero Trust frameworks Proven experience leading a transition from legacy "box-by-box" management to a centralized, API-driven orchestration model. Preferred Experience Microsoft 365 performance and connectivity optimization Certifications (Preferred) Microsoft Certified: Azure Network Engineer Associate (AZ-700) Microsoft Certified: Identity and Access Administrator (SC-300) Microsoft Certified: Azure Solutions Architect Expert Cisco Meraki Solutions Specialist (CMSS) Cisco Certified Internetwork Expert (CCIE) or CCNP Enterprise Cisco Certified DevNet Professional Hashi Corp Certified: Terraform Associate Certified Kubernetes Administrator (CKA) At APCO, the way we work matters just as much as the results we deliver. Our values guide how we work, how we partner, and how we deliver results. We C.A.R.E. C ommitted - We build strong, high-trust relationships with our partners and each other. A ccountable - We take ownership of outcomes and hold ourselves to the highest standards of performance and integrity. R esults-Driven - We focus on delivering measurable outcomes that create value for our partners and our business. E xcellent - We strive for excellence in everything we do while balancing short-term performance with long-term success. If you're excited about joining a team that values collaboration, accountability, and continuous improvement, we'd love to hear from you. By submitting your application, you acknowledge that you have read and understand our Privacy Policy and Terms & Conditions. APCO Holdings may collect personal information (such as name, contact details, and employment history) to evaluate your candidacy. We may share this data with our subsidiaries, affiliates, and service providers . click apply for full job details
Job Description Job Description APCO Holdings partners with dealerships across North America to deliver innovative vehicle protection products and services that enhance the ownership experience for customers and drive growth for our partners. Through our family of brands, we bring together industry expertise, technology, and data-driven insights to help dealers strengthen their finance and insurance performance and build lasting relationships with their customers. Our teams work collaboratively across operations, technology, risk, finance, marketing, and sales to deliver solutions that create measurable value and support the continued growth of APCO and the partners we serve. The Sr. Network Engineer & Connectivity Architect serves as the principal architect of the organization's enterprise connectivity platform ("The Backbone"), with a primary focus on Microsoft Azure networking, Cisco Meraki infrastructure, and identity-driven access (Active Directory & Entra ID). This role is responsible for designing and operating a secure, highly resilient, and cloud-aligned network architecture, where access decisions are governed by user identity, device posture, and real-time risk signals, rather than traditional network boundaries. Leveraging Infrastructure as Code (IaC), AIOps, and Zero Trust principles, this position ensures seamless, secure connectivity across Azure, on-prem environments, branch networks (Meraki), and SaaS platforms such as Microsoft 365, while enabling a scalable, automated, and self-healing infrastructure. Key Responsibilities Identity-Driven Network Architecture (CORE) Design and implement a network architecture where identity is the primary control plane. Integrate Active Directory (on-prem), Entra ID, and identity providers (Okta) with network enforcement points to enable real-time, identity-based access decisions. Active Directory & Hybrid Identity Ownership Architect and support enterprise-scale hybrid identity environments, including: Active Directory design (sites, replication, GPO strategy) Entra Connect (Azure AD Connect) synchronization Authentication protocols (Kerberos, NTLM, modern authentication) Secure integration with cloud and network services Entra ID & Conditional Access Engineering Design, implement, and optimize Conditional Access policies, including: MFA enforcement strategies Device compliance (Intune integration) Risk-based and session-based access controls Location-aware and Zero Trust access models Zero Trust & Identity Enforcement Lead the implementation of a Zero Trust architecture by aligning: Identity (Entra ID / Active Directory / Okta) Network (Azure, Meraki) Endpoint (Intune / device posture) Ensure consistent enforcement of least privilege access across all environments Microsoft 365 Identity & Access Optimization Ensure secure, high-performance access to Microsoft 365 by: Aligning identity policies with network routing and access controls Supporting modern authentication flows and token-based access Optimizing Teams, Exchange, and SharePoint connectivity Azure-Centric Network Architecture Design and implement scalable Azure networking solutions, including: Virtual Networks (VNet) and Hub-and-Spoke architectures Private Endpoints and Private Link Azure Firewall, NSGs, and routing strategies DNS architecture and name resolution Meraki Network Design & Operations Lead the design, deployment, and optimization of Cisco Meraki environments, including: MX (SD-WAN & security appliances) MS (switching) MR (wireless) Auto VPN and centralized cloud-based management Hybrid Connectivity & Interconnects Architect and manage secure connectivity between environments using: ExpressRoute VPN Gateways Meraki SD-WAN (Auto VPN) Ensure low latency, high availability, and seamless failover. Infrastructure as Code (IaC) & Automation Manage network and cloud configurations as code using: Terraform, Bicep, or ARM templates CI/CD pipelines (Azure DevOps, GitHub Actions) Ensure all deployments are standardized, repeatable, and auditable. AI Ops & Observability Implement monitoring and telemetry across Azure and Meraki using: Azure Monitor & Log Analytics Meraki Dashboard Observability tools (Dynatrace, Splunk, etc.) Enable proactive detection, anomaly identification, and automated remediation. Resiliency & Buiness Continuity Engineering (CRITICAL) Design and maintain a highly resilient network architecture across Azure, Meraki, on-prem, and SaaS environments: Eliminate single points of failure Implement redundancy across WAN, LAN, wireless, and cloud Design for automated failover and rapid recovery Ensure identity-dependent services remain available during outages Governance & Policy Enforcement Establish and enforce governance using: Azure Policy and tagging standards Policy-as-Code frameworks Identity governance (access reviews, RBAC, least privilege) Ensure compliance with security, regulatory, and enterprise standards. Technical Expertise Category Requirements Identity & Access (PRIMARY) Deep expertise in Active Directory (architecture, GPOs, replication), Entra ID, Conditional Access, MFA, federation (SAML, OAuth, OIDC), hybrid identity Zero Trust Architecture Experience implementing identity-driven access integrating network, endpoint, and SaaS Azure Networking (PRIMARY) VNets, ExpressRoute, VPN Gateway, Azure Firewall, Private Link, DNS, Hub-Spoke design Meraki (PRIMARY) MX (SD-WAN), MS (switching), MR (wireless), Auto VPN, Meraki Dashboard Automation & IaC Terraform, Bicep, ARM templates, CI/CD pipelines M365 Integration Identity and network dependency across Exchange, Teams, SharePoint Endpoint Integration Intune/device compliance integration with access policies Observability Azure Monitor, Log Analytics, Meraki Dashboard, Dynatrace, Splunk Scripting & DevOps PowerShell, Python, or similar scripting experience Education and Experience Bachelor's degree in Computer Science, Information Technology, or a related technical field; Master's degree in Information Systems Management preferred. In lieu of a degree, 12+ years of enterprise-level infrastructure experience with a proven track record of delivering automation-first networking projects. Required Experience 8-10+ years of enterprise networking experience 5+ years of Active Directory experience (enterprise scale) 3+ years of Entra ID (Azure AD), Conditional Access, and MFA 3+ years of Azure networking experience 3+ years of Cisco Meraki experience (SD-WAN, switching, wireless) Experience designing hybrid connectivity (ExpressRoute, VPN, SD-WAN) Experience implementing IaC (Terraform, Bicep, ARM) Experience integrating identity with network and Zero Trust frameworks Proven experience leading a transition from legacy "box-by-box" management to a centralized, API-driven orchestration model. Preferred Experience Microsoft 365 performance and connectivity optimization Certifications (Preferred) Microsoft Certified: Azure Network Engineer Associate (AZ-700) Microsoft Certified: Identity and Access Administrator (SC-300) Microsoft Certified: Azure Solutions Architect Expert Cisco Meraki Solutions Specialist (CMSS) Cisco Certified Internetwork Expert (CCIE) or CCNP Enterprise Cisco Certified DevNet Professional Hashi Corp Certified: Terraform Associate Certified Kubernetes Administrator (CKA) At APCO, the way we work matters just as much as the results we deliver. Our values guide how we work, how we partner, and how we deliver results. We C.A.R.E. C ommitted - We build strong, high-trust relationships with our partners and each other. A ccountable - We take ownership of outcomes and hold ourselves to the highest standards of performance and integrity. R esults-Driven - We focus on delivering measurable outcomes that create value for our partners and our business. E xcellent - We strive for excellence in everything we do while balancing short-term performance with long-term success. If you're excited about joining a team that values collaboration, accountability, and continuous improvement, we'd love to hear from you. By submitting your application, you acknowledge that you have read and understand our Privacy Policy and Terms & Conditions. APCO Holdings may collect personal information (such as name, contact details, and employment history) to evaluate your candidacy. We may share this data with our subsidiaries, affiliates, and service providers . click apply for full job details
11/12/2026
Full time
Job Description Job Description APCO Holdings partners with dealerships across North America to deliver innovative vehicle protection products and services that enhance the ownership experience for customers and drive growth for our partners. Through our family of brands, we bring together industry expertise, technology, and data-driven insights to help dealers strengthen their finance and insurance performance and build lasting relationships with their customers. Our teams work collaboratively across operations, technology, risk, finance, marketing, and sales to deliver solutions that create measurable value and support the continued growth of APCO and the partners we serve. The Sr. Network Engineer & Connectivity Architect serves as the principal architect of the organization's enterprise connectivity platform ("The Backbone"), with a primary focus on Microsoft Azure networking, Cisco Meraki infrastructure, and identity-driven access (Active Directory & Entra ID). This role is responsible for designing and operating a secure, highly resilient, and cloud-aligned network architecture, where access decisions are governed by user identity, device posture, and real-time risk signals, rather than traditional network boundaries. Leveraging Infrastructure as Code (IaC), AIOps, and Zero Trust principles, this position ensures seamless, secure connectivity across Azure, on-prem environments, branch networks (Meraki), and SaaS platforms such as Microsoft 365, while enabling a scalable, automated, and self-healing infrastructure. Key Responsibilities Identity-Driven Network Architecture (CORE) Design and implement a network architecture where identity is the primary control plane. Integrate Active Directory (on-prem), Entra ID, and identity providers (Okta) with network enforcement points to enable real-time, identity-based access decisions. Active Directory & Hybrid Identity Ownership Architect and support enterprise-scale hybrid identity environments, including: Active Directory design (sites, replication, GPO strategy) Entra Connect (Azure AD Connect) synchronization Authentication protocols (Kerberos, NTLM, modern authentication) Secure integration with cloud and network services Entra ID & Conditional Access Engineering Design, implement, and optimize Conditional Access policies, including: MFA enforcement strategies Device compliance (Intune integration) Risk-based and session-based access controls Location-aware and Zero Trust access models Zero Trust & Identity Enforcement Lead the implementation of a Zero Trust architecture by aligning: Identity (Entra ID / Active Directory / Okta) Network (Azure, Meraki) Endpoint (Intune / device posture) Ensure consistent enforcement of least privilege access across all environments Microsoft 365 Identity & Access Optimization Ensure secure, high-performance access to Microsoft 365 by: Aligning identity policies with network routing and access controls Supporting modern authentication flows and token-based access Optimizing Teams, Exchange, and SharePoint connectivity Azure-Centric Network Architecture Design and implement scalable Azure networking solutions, including: Virtual Networks (VNet) and Hub-and-Spoke architectures Private Endpoints and Private Link Azure Firewall, NSGs, and routing strategies DNS architecture and name resolution Meraki Network Design & Operations Lead the design, deployment, and optimization of Cisco Meraki environments, including: MX (SD-WAN & security appliances) MS (switching) MR (wireless) Auto VPN and centralized cloud-based management Hybrid Connectivity & Interconnects Architect and manage secure connectivity between environments using: ExpressRoute VPN Gateways Meraki SD-WAN (Auto VPN) Ensure low latency, high availability, and seamless failover. Infrastructure as Code (IaC) & Automation Manage network and cloud configurations as code using: Terraform, Bicep, or ARM templates CI/CD pipelines (Azure DevOps, GitHub Actions) Ensure all deployments are standardized, repeatable, and auditable. AI Ops & Observability Implement monitoring and telemetry across Azure and Meraki using: Azure Monitor & Log Analytics Meraki Dashboard Observability tools (Dynatrace, Splunk, etc.) Enable proactive detection, anomaly identification, and automated remediation. Resiliency & Buiness Continuity Engineering (CRITICAL) Design and maintain a highly resilient network architecture across Azure, Meraki, on-prem, and SaaS environments: Eliminate single points of failure Implement redundancy across WAN, LAN, wireless, and cloud Design for automated failover and rapid recovery Ensure identity-dependent services remain available during outages Governance & Policy Enforcement Establish and enforce governance using: Azure Policy and tagging standards Policy-as-Code frameworks Identity governance (access reviews, RBAC, least privilege) Ensure compliance with security, regulatory, and enterprise standards. Technical Expertise Category Requirements Identity & Access (PRIMARY) Deep expertise in Active Directory (architecture, GPOs, replication), Entra ID, Conditional Access, MFA, federation (SAML, OAuth, OIDC), hybrid identity Zero Trust Architecture Experience implementing identity-driven access integrating network, endpoint, and SaaS Azure Networking (PRIMARY) VNets, ExpressRoute, VPN Gateway, Azure Firewall, Private Link, DNS, Hub-Spoke design Meraki (PRIMARY) MX (SD-WAN), MS (switching), MR (wireless), Auto VPN, Meraki Dashboard Automation & IaC Terraform, Bicep, ARM templates, CI/CD pipelines M365 Integration Identity and network dependency across Exchange, Teams, SharePoint Endpoint Integration Intune/device compliance integration with access policies Observability Azure Monitor, Log Analytics, Meraki Dashboard, Dynatrace, Splunk Scripting & DevOps PowerShell, Python, or similar scripting experience Education and Experience Bachelor's degree in Computer Science, Information Technology, or a related technical field; Master's degree in Information Systems Management preferred. In lieu of a degree, 12+ years of enterprise-level infrastructure experience with a proven track record of delivering automation-first networking projects. Required Experience 8-10+ years of enterprise networking experience 5+ years of Active Directory experience (enterprise scale) 3+ years of Entra ID (Azure AD), Conditional Access, and MFA 3+ years of Azure networking experience 3+ years of Cisco Meraki experience (SD-WAN, switching, wireless) Experience designing hybrid connectivity (ExpressRoute, VPN, SD-WAN) Experience implementing IaC (Terraform, Bicep, ARM) Experience integrating identity with network and Zero Trust frameworks Proven experience leading a transition from legacy "box-by-box" management to a centralized, API-driven orchestration model. Preferred Experience Microsoft 365 performance and connectivity optimization Certifications (Preferred) Microsoft Certified: Azure Network Engineer Associate (AZ-700) Microsoft Certified: Identity and Access Administrator (SC-300) Microsoft Certified: Azure Solutions Architect Expert Cisco Meraki Solutions Specialist (CMSS) Cisco Certified Internetwork Expert (CCIE) or CCNP Enterprise Cisco Certified DevNet Professional Hashi Corp Certified: Terraform Associate Certified Kubernetes Administrator (CKA) At APCO, the way we work matters just as much as the results we deliver. Our values guide how we work, how we partner, and how we deliver results. We C.A.R.E. C ommitted - We build strong, high-trust relationships with our partners and each other. A ccountable - We take ownership of outcomes and hold ourselves to the highest standards of performance and integrity. R esults-Driven - We focus on delivering measurable outcomes that create value for our partners and our business. E xcellent - We strive for excellence in everything we do while balancing short-term performance with long-term success. If you're excited about joining a team that values collaboration, accountability, and continuous improvement, we'd love to hear from you. By submitting your application, you acknowledge that you have read and understand our Privacy Policy and Terms & Conditions. APCO Holdings may collect personal information (such as name, contact details, and employment history) to evaluate your candidacy. We may share this data with our subsidiaries, affiliates, and service providers . click apply for full job details
Global Enterprise Services, LLC
Fort George G Meade, Maryland
Job Description Job Description GES is seeking a Principal Network Engineer specializing in routing and switching to serve as the senior technical authority for the routed and switched enterprise. The role is responsible for advancing network innovation through the execution of strategic design and implementation efforts that improve the security, scalability, resiliency, and performance of the enterprise network. This position is responsible for overall network engineering support across a broad range of efforts, including planning, designing, and evaluating the various components of the network. Duties include providing specifications for network architecture, evaluating and recommending new technologies to enhance current capabilities, performing needs assessments, and directing the installation, modification, testing, and servicing of network infrastructure. The successful candidate sets technical direction for routing and switching across the enterprise - defining standards, resolving the architecture questions no one else can, and directing the work of other engineers against designs they own. Days Required in Office: Five Days in Office Until Acclimated and then possibly One Day Remote Clearance Required: Secret Scope and Impact: Impact: Influences development of solutions that impact strategic project and program goals and business results. Recommends and develops new technical solutions, products, and standards. Leads and manages the work of other technical staff that has significant impact on project results and outputs. Complexity: Resolves highly complex problems through significant application of technical knowledge, conceptualization, reasoning, and interpretation. Develops solutions that are highly innovative and achieved through research and integration of best practices. Communication: Communicates with executive and client leadership on matters of significant technical importance. Presents architecture recommendations, implementation plans, risks, dependencies, and status to technical leadership, stakeholders, and approval boards, and works to build consensus around new concepts, practices, and approaches. Knowledge: In-depth understanding of network engineering principles, theories, and concepts and their application across a range of programs. Serves as a subject matter expert within the routing and switching domain. Primary Responsibilities: Architecture and Design Authority Own the enterprise routing and switching architecture, including core, distribution, access, WAN edge, and data center interconnect designs. Define routing architecture and policy standards across BGP, OSPF, EIGRP, and static routing, including addressing strategy, route filtering and summarization, path selection, redistribution boundaries, and convergence targets. Define Layer 2 and high-availability architecture, including VLAN and spanning-tree strategy, link aggregation, redundancy models, VRF and segmentation structure, multicast design, and QoS policy architecture. Evaluate the current network architecture, identify gaps and improvement opportunities, estimate level of effort, assess implementation risk, and develop practical engineering plans to improve enterprise capabilities. Provide specifications for network architecture, evaluate and recommend emerging technologies, and perform needs assessments to inform design and investment decisions. Establish and enforce configuration standards, design patterns, and technical baselines that other engineers build against. Project Execution Drive strategic engineering projects from concept through implementation, including architecture evaluation, requirements analysis, dependency identification, design coordination, planning, execution, validation, and transition to operations. Develop and manage implementation plans, schedules, cutover strategies, contingency plans, rollback procedures, validation steps, stakeholder communications, and change documentation for mission-critical network changes. Lead network modernization efforts such as segmentation, IPv4/IPv6 transition, network optimization, connectivity consolidation, lifecycle replacement, automation, and software-defined networking adoption. Coordinate change windows, maintenance activities, test validation, and rollback procedures for high-impact network activities. Partner with architecture, cybersecurity, operations, project management, and technical SME teams to resolve blockers, manage dependencies, and reduce delivery risk. Technical Leadership Serve as the final technical escalation point for complex routing, switching, transport, and performance problems spanning multiple domains and vendors. Provide technical direction, mentoring, and day-to-day guidance to network engineers, administrators, and analysts; review designs and implementation work for technical quality. Organize technical priorities, track details across concurrent efforts, manage competing demands, and maintain accountability against aggressive schedules. Continuously improve engineering processes, documentation standards, implementation playbooks, migration runbooks, technical standards, and execution models to accelerate delivery, reduce rework, improve operational handoff, and lower sustainment burden. Documentation Develop and maintain engineering and operational documentation, including: Logical and physical network designs and architecture diagrams Routing architecture, policy standards, and addressing plans Configuration standards, design patterns, and technical baselines Implementation and cutover plans with rollback and contingency procedures Test and validation plans Risk, dependency, and decision registers Technical standards, playbooks, and runbooks As-built and operations transition documentation This position requires more than a senior engineer executing assigned work. It requires the person who decides what the routing and switching architecture should be, defends that decision in front of leadership and approval boards, and then makes sure it gets built correctly. The successful engineer is equally credible in the deepest technical detail - a BGP path-selection argument, a convergence problem nobody else has reproduced - and in a room where the question is what the enterprise should do next and why. Required Qualifications: Bachelor's degree or equivalent experience and 12+ years of prior relevant experience, or Master's degree with 10+ years of experience. Specific experience, education, and training may be considered in lieu of a degree. Expert-level hands-on experience designing, engineering, and troubleshooting enterprise routing and switching infrastructure in large, complex environments. Deep knowledge of TCP/IP, BGP, OSPF, EIGRP, route policy and redistribution, VLANs, spanning tree, link aggregation, VRFs, MPLS, multicast, QoS, NAT, and high-availability design. Experience evaluating enterprise network architectures and developing improvement plans across LAN, WAN, WLAN, routing, switching, firewalls, VPN, proxies, software-defined networking, and cloud-connected environments. Experience leading network engineering projects from planning through implementation, including requirements analysis, dependency management, risk reduction, contingency planning, execution oversight, validation, and operational transition. Experience serving as a senior technical lead directing the work of other network engineers, administrators, or analysts. Hands-on experience with two or more of the following network technologies: Cisco, Aruba, Palo Alto, Dell, Infoblox, and Brocade. Experience documenting logical and physical network designs, implementation plans, risks, dependencies, decision points, and technical recommendations using tools such as Visio, PowerPoint, Cameo, or similar. Excellent written and verbal communication skills, including experience presenting architecture recommendations, implementation plans, risks, and status to technical leadership, stakeholders, and approval boards. Current IAT Level II or higher certification, such as Security+ or CISSP. Active DoD Secret clearance. Desired Qualifications: Cisco Certified Network Professional (CCNP) Enterprise, CCIE, or equivalent certification. Experience leading enterprise network innovation efforts such as segmentation, enterprise Wi-Fi modernization, IPv6 transition, automation, SDN, cloud connectivity, zero-trust-aligned networking, or security stack modernization. Experience with SD-WAN, SD-Access, Cisco Catalyst Center (DNA Center), or similar controller-based network architectures. Experience with network automation and infrastructure-as-code using Python, Ansible, REST APIs, or similar. Experience integrating enterprise networking with cloud infrastructure, including hybrid connectivity, cloud routing, and secure interconnects. Experience developing repeatable engineering execution frameworks, implementation playbooks, migration runbooks, technical standards, and risk-reduction processes. Experience with Jira, Confluence, or other project and knowledge-management tools used to coordinate technical work across distributed engineering teams. Understanding of Federal Government application, server, and network security requirements such as NIST, FedRAMP, FISMA, RMF, and DoD cybersecurity requirements.
11/12/2026
Full time
Job Description Job Description GES is seeking a Principal Network Engineer specializing in routing and switching to serve as the senior technical authority for the routed and switched enterprise. The role is responsible for advancing network innovation through the execution of strategic design and implementation efforts that improve the security, scalability, resiliency, and performance of the enterprise network. This position is responsible for overall network engineering support across a broad range of efforts, including planning, designing, and evaluating the various components of the network. Duties include providing specifications for network architecture, evaluating and recommending new technologies to enhance current capabilities, performing needs assessments, and directing the installation, modification, testing, and servicing of network infrastructure. The successful candidate sets technical direction for routing and switching across the enterprise - defining standards, resolving the architecture questions no one else can, and directing the work of other engineers against designs they own. Days Required in Office: Five Days in Office Until Acclimated and then possibly One Day Remote Clearance Required: Secret Scope and Impact: Impact: Influences development of solutions that impact strategic project and program goals and business results. Recommends and develops new technical solutions, products, and standards. Leads and manages the work of other technical staff that has significant impact on project results and outputs. Complexity: Resolves highly complex problems through significant application of technical knowledge, conceptualization, reasoning, and interpretation. Develops solutions that are highly innovative and achieved through research and integration of best practices. Communication: Communicates with executive and client leadership on matters of significant technical importance. Presents architecture recommendations, implementation plans, risks, dependencies, and status to technical leadership, stakeholders, and approval boards, and works to build consensus around new concepts, practices, and approaches. Knowledge: In-depth understanding of network engineering principles, theories, and concepts and their application across a range of programs. Serves as a subject matter expert within the routing and switching domain. Primary Responsibilities: Architecture and Design Authority Own the enterprise routing and switching architecture, including core, distribution, access, WAN edge, and data center interconnect designs. Define routing architecture and policy standards across BGP, OSPF, EIGRP, and static routing, including addressing strategy, route filtering and summarization, path selection, redistribution boundaries, and convergence targets. Define Layer 2 and high-availability architecture, including VLAN and spanning-tree strategy, link aggregation, redundancy models, VRF and segmentation structure, multicast design, and QoS policy architecture. Evaluate the current network architecture, identify gaps and improvement opportunities, estimate level of effort, assess implementation risk, and develop practical engineering plans to improve enterprise capabilities. Provide specifications for network architecture, evaluate and recommend emerging technologies, and perform needs assessments to inform design and investment decisions. Establish and enforce configuration standards, design patterns, and technical baselines that other engineers build against. Project Execution Drive strategic engineering projects from concept through implementation, including architecture evaluation, requirements analysis, dependency identification, design coordination, planning, execution, validation, and transition to operations. Develop and manage implementation plans, schedules, cutover strategies, contingency plans, rollback procedures, validation steps, stakeholder communications, and change documentation for mission-critical network changes. Lead network modernization efforts such as segmentation, IPv4/IPv6 transition, network optimization, connectivity consolidation, lifecycle replacement, automation, and software-defined networking adoption. Coordinate change windows, maintenance activities, test validation, and rollback procedures for high-impact network activities. Partner with architecture, cybersecurity, operations, project management, and technical SME teams to resolve blockers, manage dependencies, and reduce delivery risk. Technical Leadership Serve as the final technical escalation point for complex routing, switching, transport, and performance problems spanning multiple domains and vendors. Provide technical direction, mentoring, and day-to-day guidance to network engineers, administrators, and analysts; review designs and implementation work for technical quality. Organize technical priorities, track details across concurrent efforts, manage competing demands, and maintain accountability against aggressive schedules. Continuously improve engineering processes, documentation standards, implementation playbooks, migration runbooks, technical standards, and execution models to accelerate delivery, reduce rework, improve operational handoff, and lower sustainment burden. Documentation Develop and maintain engineering and operational documentation, including: Logical and physical network designs and architecture diagrams Routing architecture, policy standards, and addressing plans Configuration standards, design patterns, and technical baselines Implementation and cutover plans with rollback and contingency procedures Test and validation plans Risk, dependency, and decision registers Technical standards, playbooks, and runbooks As-built and operations transition documentation This position requires more than a senior engineer executing assigned work. It requires the person who decides what the routing and switching architecture should be, defends that decision in front of leadership and approval boards, and then makes sure it gets built correctly. The successful engineer is equally credible in the deepest technical detail - a BGP path-selection argument, a convergence problem nobody else has reproduced - and in a room where the question is what the enterprise should do next and why. Required Qualifications: Bachelor's degree or equivalent experience and 12+ years of prior relevant experience, or Master's degree with 10+ years of experience. Specific experience, education, and training may be considered in lieu of a degree. Expert-level hands-on experience designing, engineering, and troubleshooting enterprise routing and switching infrastructure in large, complex environments. Deep knowledge of TCP/IP, BGP, OSPF, EIGRP, route policy and redistribution, VLANs, spanning tree, link aggregation, VRFs, MPLS, multicast, QoS, NAT, and high-availability design. Experience evaluating enterprise network architectures and developing improvement plans across LAN, WAN, WLAN, routing, switching, firewalls, VPN, proxies, software-defined networking, and cloud-connected environments. Experience leading network engineering projects from planning through implementation, including requirements analysis, dependency management, risk reduction, contingency planning, execution oversight, validation, and operational transition. Experience serving as a senior technical lead directing the work of other network engineers, administrators, or analysts. Hands-on experience with two or more of the following network technologies: Cisco, Aruba, Palo Alto, Dell, Infoblox, and Brocade. Experience documenting logical and physical network designs, implementation plans, risks, dependencies, decision points, and technical recommendations using tools such as Visio, PowerPoint, Cameo, or similar. Excellent written and verbal communication skills, including experience presenting architecture recommendations, implementation plans, risks, and status to technical leadership, stakeholders, and approval boards. Current IAT Level II or higher certification, such as Security+ or CISSP. Active DoD Secret clearance. Desired Qualifications: Cisco Certified Network Professional (CCNP) Enterprise, CCIE, or equivalent certification. Experience leading enterprise network innovation efforts such as segmentation, enterprise Wi-Fi modernization, IPv6 transition, automation, SDN, cloud connectivity, zero-trust-aligned networking, or security stack modernization. Experience with SD-WAN, SD-Access, Cisco Catalyst Center (DNA Center), or similar controller-based network architectures. Experience with network automation and infrastructure-as-code using Python, Ansible, REST APIs, or similar. Experience integrating enterprise networking with cloud infrastructure, including hybrid connectivity, cloud routing, and secure interconnects. Experience developing repeatable engineering execution frameworks, implementation playbooks, migration runbooks, technical standards, and risk-reduction processes. Experience with Jira, Confluence, or other project and knowledge-management tools used to coordinate technical work across distributed engineering teams. Understanding of Federal Government application, server, and network security requirements such as NIST, FedRAMP, FISMA, RMF, and DoD cybersecurity requirements.
Job Description Job Description Job Title: Principal Network Engineer Location: Onsite Mode : Contract (6 Months) Note: Location (Complete Work Address with Zip code): 170 Data Dr, Waltham, MA 02451 55 Bearfoot Rd, Northborough, MA 01532 300 Erie Blvd West, Syracuse, NY 13202 2 Hanson Pl, Brooklyn, NY 11217 Comments - No set days required in office, will be ad-hoc for meetings etc. and then perhaps some travel to the DC locations. Most work will be done remotely. Role Purpose Principal Network Engineer within the Global Network Engineering team, responsible for delivering a major Internet Gateway Migration programme across the US and UK regions, owning the low-level design and implementation activities. Working closely with other Network engineers, Network Architects, Security Architects, Operations teams, and suppliers, you will design, build, test, migrate, and troubleshoot complex enterprise network services across Internet, WAN, SD-WAN, cloud, and security domains. This is a hands-on network engineering role. Key Responsibilities Design, build, test, and implement Internet Gateway migration solutions. Configure and troubleshoot complex routing environments including BGP, OSPF, MPLS, VRFs, route redistribution, and traffic engineering. Perform deep-dive troubleshooting across Internet edge, SD-WAN, WAN, LAN, cloud, security, and carrier connectivity domains. Develop and execute migration plans, implementation procedures, service cutovers, rollback strategies, and operational acceptance testing. Perform detailed dependency analysis across routing, security, DNS, DDI, remote access, cloud connectivity, and carrier services. Analyse technical dependencies and resolve migration blockers across network and security services. Create and review low-level designs, implementation plans, MOPs, and operational documentation. Work closely with Network Architects to translate target-state designs into deployable engineering solutions. Support and Lead on major implementation events, service transitions, and high-risk change activities. Drive engineering best practice, technical quality, and operational readiness. Required Skills & Experience CCIE (Cisco Certified Internetwork Expert) - Enterprise Infrastructure (mandatory) Expert-level BGP knowledge including Internet edge design, route policy, traffic engineering, route filtering, and multi-carrier connectivity. Extensive hands-on experience with Cisco enterprise routing and switching platforms. Proven experience designing and implementing enterprise Internet connectivity solutions. Strong SD-WAN engineering experience (Cisco Viptela). Strong understanding of OSPF, MPLS, VRFs, QoS, route redistribution, and high-availability network design. Experience delivering complex network migrations and transformation programmes. Experience integrating enterprise networks with Azure and hybrid-cloud environments. Advanced troubleshooting skills using packet captures, protocol analysis, routing diagnostics, and telemetry tools. Experience working directly with ISPs, carriers, and managed service providers. Experience producing implementation plans, migration runbooks, and low-level designs. Desirable Skills CCDE or equivalent design experience. Azure ExpressRoute and hybrid-cloud networking. Network automation using tools such as Python, Ansible, NetBrain. Experience within Utilities, Energy, Critical National Infrastructure, or highly regulated environments.
11/12/2026
Full time
Job Description Job Description Job Title: Principal Network Engineer Location: Onsite Mode : Contract (6 Months) Note: Location (Complete Work Address with Zip code): 170 Data Dr, Waltham, MA 02451 55 Bearfoot Rd, Northborough, MA 01532 300 Erie Blvd West, Syracuse, NY 13202 2 Hanson Pl, Brooklyn, NY 11217 Comments - No set days required in office, will be ad-hoc for meetings etc. and then perhaps some travel to the DC locations. Most work will be done remotely. Role Purpose Principal Network Engineer within the Global Network Engineering team, responsible for delivering a major Internet Gateway Migration programme across the US and UK regions, owning the low-level design and implementation activities. Working closely with other Network engineers, Network Architects, Security Architects, Operations teams, and suppliers, you will design, build, test, migrate, and troubleshoot complex enterprise network services across Internet, WAN, SD-WAN, cloud, and security domains. This is a hands-on network engineering role. Key Responsibilities Design, build, test, and implement Internet Gateway migration solutions. Configure and troubleshoot complex routing environments including BGP, OSPF, MPLS, VRFs, route redistribution, and traffic engineering. Perform deep-dive troubleshooting across Internet edge, SD-WAN, WAN, LAN, cloud, security, and carrier connectivity domains. Develop and execute migration plans, implementation procedures, service cutovers, rollback strategies, and operational acceptance testing. Perform detailed dependency analysis across routing, security, DNS, DDI, remote access, cloud connectivity, and carrier services. Analyse technical dependencies and resolve migration blockers across network and security services. Create and review low-level designs, implementation plans, MOPs, and operational documentation. Work closely with Network Architects to translate target-state designs into deployable engineering solutions. Support and Lead on major implementation events, service transitions, and high-risk change activities. Drive engineering best practice, technical quality, and operational readiness. Required Skills & Experience CCIE (Cisco Certified Internetwork Expert) - Enterprise Infrastructure (mandatory) Expert-level BGP knowledge including Internet edge design, route policy, traffic engineering, route filtering, and multi-carrier connectivity. Extensive hands-on experience with Cisco enterprise routing and switching platforms. Proven experience designing and implementing enterprise Internet connectivity solutions. Strong SD-WAN engineering experience (Cisco Viptela). Strong understanding of OSPF, MPLS, VRFs, QoS, route redistribution, and high-availability network design. Experience delivering complex network migrations and transformation programmes. Experience integrating enterprise networks with Azure and hybrid-cloud environments. Advanced troubleshooting skills using packet captures, protocol analysis, routing diagnostics, and telemetry tools. Experience working directly with ISPs, carriers, and managed service providers. Experience producing implementation plans, migration runbooks, and low-level designs. Desirable Skills CCDE or equivalent design experience. Azure ExpressRoute and hybrid-cloud networking. Network automation using tools such as Python, Ansible, NetBrain. Experience within Utilities, Energy, Critical National Infrastructure, or highly regulated environments.
Job Description Job Description Empowered to live. Inspired to work. Compeer Financial is a member-owned cooperative located in Illinois, Minnesota and Wisconsin. We bring together team members with a variety of backgrounds and experiences to help provide financial services to support agriculture and rural communities. Join us in a culture that not only promotes meaningful work and professional development, but provides a flexible, hybrid work environment and excellent benefits, which empower you to thrive both personally and professionally. How we support you: Hybrid model - up to 50% work from home Flexible schedules including ample flexibility in the summer months Up to 9% towards 401k (3% fixed Compeer contribution plus up to 6% match) Benefits: medical, dental, vision, HSA/FSA, life & AD&D insurance, short-term and long-term disability, wellness program & EAP Vacation, sick leave, holidays/floating holidays, parental leave, and volunteer paid time off Learning and development programs Mentorship programs Cross-functional committee opportunities (i.e. Inclusion Council, emerging professional groups, etc.) Professional membership/certification reimbursement and more! Casual/seasonal & intern team members are not eligible for benefits except for state-mandated programs. To learn more about Compeer Financial visit Where you will work: This position offers a hybrid work option up to 50% remote and is based out of the Bloomington, IL; Sun Prairie, WI; Lakeville, MN; Mankato, MN office locations. The contributions you will make: This position is an enterprise-level individual contributor and technical leader accountable for the engineering direction, reliability, and modernization of the organization's most complex network and telephony services. The role shapes multi-year technical direction, translates target-state architecture into scalable implementation patterns, leads high-impact cross-enterprise initiatives, and establishes standards for campus, branch, data center, cloud, WAN, wireless, voice, unified communications, carrier services, automation, security, and resilience. Influences leaders, engineers, and strategic vendors to deliver sustainable connectivity and communication capabilities across the enterprise. A typical day: Leads engineering direction, reference implementations, standards, and multi-year roadmaps for enterprise network and telephony services in partnership with architecture, product, security, cloud, and service management leaders. Designs and leads delivery of complex network transformations, WAN and wireless modernization, cloud-connectivity programs, telephony and unified communications migrations, carrier transitions, automation initiatives, and resilience improvements. Establishes reusable enterprise patterns for segmentation, routing, secure connectivity, quality of service, call routing, emergency calling, observability, automation, resiliency, lifecycle management, and operational support. Leads resolution of the highest-impact connectivity, performance, voice, carrier, and operational problems; performs deep technical analysis and drives systemic improvements across infrastructure, cloud, security, application, and vendor dependencies. Defines network and telephony engineering measures and practices for availability, performance, capacity, call quality, failover, recoverability, security, compliance, supportability, and production readiness. Serves as a trusted technical advisor to leaders and strategic vendors; mentors senior engineers; and influences investment, vendor, carrier, sequencing, resilience, and lifecycle decisions through executive-ready recommendations. The skills and experience we prefer you have: Bachelor's degree in computer science, information systems, engineering, cybersecurity, telecommunications, or a related field; or an equivalent combination of education and experience sufficient to perform the essential functions of the job. Minimum 10 or more years of progressive experience in network engineering, telecommunications, infrastructure engineering, systems engineering, technology operations, or a related field. Demonstrated success defining and leading enterprise-scale network and telephony strategy, modernization, automation, migrations, resilience improvements, and lifecycle initiatives across complex environments. Expert-level experience with routing, switching, wireless, WAN, cloud connectivity, network services, telephony, unified communications, carrier services, automation, observability, security, technical governance, and vendor or partner delivery. Valid driver's license required. Professional or expert level Cisco, Juniper, Aruba, Arista, or comparable network and telecommunications certifications preferred Experience shaping enterprise adoption of software-defined networking, cloud networking, network observability, infrastructure-as-code, or unified communications and contact-center technologies, preferred. Experience in a regulated financial-services environment or with audit, risk, and control requirements, preferred. Experience defining enterprise service-level objectives and indicators, network performance measures, capacity baselines, and availability reporting, preferred. Experience leading enterprise-scale wireless, carrier, contact-center, or multi-site network transformation initiatives, preferred. Knowledge, Skills & Abilities Deep expertise in enterprise network and telephony engineering, including routing, switching, wireless, SD-WAN, cloud connectivity, network services, segmentation, voice, call routing, quality of service, unified communications, and carrier services. Enterprise-level systems thinking and engineering judgment, with the ability to connect business strategy, architecture, technical dependencies, service outcomes, resilience, risk, and cost. Demonstrated ability to create clarity, establish direction, lead through ambiguity, and resolve complex technical and organizational problems. Exceptional technical leadership, facilitation, communication, storytelling, negotiation, and influencing skills, including communication with executive audiences. Ability to mentor senior engineers, establish enterprise standards and reusable patterns, and raise engineering capability without relying on formal authority. Strong financial, carrier, and vendor acumen, with the ability to evaluate investments, contracts, licensing, technology lifecycle, technical debt, and total cost of ownership. Advanced knowledge of cybersecurity, regulatory and emergency-calling requirements, change management, operational resilience, disaster recovery, and risk management in a financial services environment. How we will take care of you: Our job titles may span more than one career level (associate, senior, principal, etc.). The actual title and base pay offered is dependent upon many factors, such as: training, transferable skills, work experience, business needs and market demands. The base pay range is subject to change and may be modified in the future. This role is eligible for variable compensation and other benefits. Base Pay $118,500-$180,000 USD Compeer Financial is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Must be authorized to work for any employer in the United States. Compeer is unable to sponsor or take over sponsorship of an employment visa at this time. Click here to view federal employment laws applicable for applicants.
11/12/2026
Full time
Job Description Job Description Empowered to live. Inspired to work. Compeer Financial is a member-owned cooperative located in Illinois, Minnesota and Wisconsin. We bring together team members with a variety of backgrounds and experiences to help provide financial services to support agriculture and rural communities. Join us in a culture that not only promotes meaningful work and professional development, but provides a flexible, hybrid work environment and excellent benefits, which empower you to thrive both personally and professionally. How we support you: Hybrid model - up to 50% work from home Flexible schedules including ample flexibility in the summer months Up to 9% towards 401k (3% fixed Compeer contribution plus up to 6% match) Benefits: medical, dental, vision, HSA/FSA, life & AD&D insurance, short-term and long-term disability, wellness program & EAP Vacation, sick leave, holidays/floating holidays, parental leave, and volunteer paid time off Learning and development programs Mentorship programs Cross-functional committee opportunities (i.e. Inclusion Council, emerging professional groups, etc.) Professional membership/certification reimbursement and more! Casual/seasonal & intern team members are not eligible for benefits except for state-mandated programs. To learn more about Compeer Financial visit Where you will work: This position offers a hybrid work option up to 50% remote and is based out of the Bloomington, IL; Sun Prairie, WI; Lakeville, MN; Mankato, MN office locations. The contributions you will make: This position is an enterprise-level individual contributor and technical leader accountable for the engineering direction, reliability, and modernization of the organization's most complex network and telephony services. The role shapes multi-year technical direction, translates target-state architecture into scalable implementation patterns, leads high-impact cross-enterprise initiatives, and establishes standards for campus, branch, data center, cloud, WAN, wireless, voice, unified communications, carrier services, automation, security, and resilience. Influences leaders, engineers, and strategic vendors to deliver sustainable connectivity and communication capabilities across the enterprise. A typical day: Leads engineering direction, reference implementations, standards, and multi-year roadmaps for enterprise network and telephony services in partnership with architecture, product, security, cloud, and service management leaders. Designs and leads delivery of complex network transformations, WAN and wireless modernization, cloud-connectivity programs, telephony and unified communications migrations, carrier transitions, automation initiatives, and resilience improvements. Establishes reusable enterprise patterns for segmentation, routing, secure connectivity, quality of service, call routing, emergency calling, observability, automation, resiliency, lifecycle management, and operational support. Leads resolution of the highest-impact connectivity, performance, voice, carrier, and operational problems; performs deep technical analysis and drives systemic improvements across infrastructure, cloud, security, application, and vendor dependencies. Defines network and telephony engineering measures and practices for availability, performance, capacity, call quality, failover, recoverability, security, compliance, supportability, and production readiness. Serves as a trusted technical advisor to leaders and strategic vendors; mentors senior engineers; and influences investment, vendor, carrier, sequencing, resilience, and lifecycle decisions through executive-ready recommendations. The skills and experience we prefer you have: Bachelor's degree in computer science, information systems, engineering, cybersecurity, telecommunications, or a related field; or an equivalent combination of education and experience sufficient to perform the essential functions of the job. Minimum 10 or more years of progressive experience in network engineering, telecommunications, infrastructure engineering, systems engineering, technology operations, or a related field. Demonstrated success defining and leading enterprise-scale network and telephony strategy, modernization, automation, migrations, resilience improvements, and lifecycle initiatives across complex environments. Expert-level experience with routing, switching, wireless, WAN, cloud connectivity, network services, telephony, unified communications, carrier services, automation, observability, security, technical governance, and vendor or partner delivery. Valid driver's license required. Professional or expert level Cisco, Juniper, Aruba, Arista, or comparable network and telecommunications certifications preferred Experience shaping enterprise adoption of software-defined networking, cloud networking, network observability, infrastructure-as-code, or unified communications and contact-center technologies, preferred. Experience in a regulated financial-services environment or with audit, risk, and control requirements, preferred. Experience defining enterprise service-level objectives and indicators, network performance measures, capacity baselines, and availability reporting, preferred. Experience leading enterprise-scale wireless, carrier, contact-center, or multi-site network transformation initiatives, preferred. Knowledge, Skills & Abilities Deep expertise in enterprise network and telephony engineering, including routing, switching, wireless, SD-WAN, cloud connectivity, network services, segmentation, voice, call routing, quality of service, unified communications, and carrier services. Enterprise-level systems thinking and engineering judgment, with the ability to connect business strategy, architecture, technical dependencies, service outcomes, resilience, risk, and cost. Demonstrated ability to create clarity, establish direction, lead through ambiguity, and resolve complex technical and organizational problems. Exceptional technical leadership, facilitation, communication, storytelling, negotiation, and influencing skills, including communication with executive audiences. Ability to mentor senior engineers, establish enterprise standards and reusable patterns, and raise engineering capability without relying on formal authority. Strong financial, carrier, and vendor acumen, with the ability to evaluate investments, contracts, licensing, technology lifecycle, technical debt, and total cost of ownership. Advanced knowledge of cybersecurity, regulatory and emergency-calling requirements, change management, operational resilience, disaster recovery, and risk management in a financial services environment. How we will take care of you: Our job titles may span more than one career level (associate, senior, principal, etc.). The actual title and base pay offered is dependent upon many factors, such as: training, transferable skills, work experience, business needs and market demands. The base pay range is subject to change and may be modified in the future. This role is eligible for variable compensation and other benefits. Base Pay $118,500-$180,000 USD Compeer Financial is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Must be authorized to work for any employer in the United States. Compeer is unable to sponsor or take over sponsorship of an employment visa at this time. Click here to view federal employment laws applicable for applicants.
Job Description Job Description $125,000 - $180,000 + VIP Bonus $125,000 - $180,000 + VIP Bonus The insurance industry runs on Vertafore. We equip agencies, MGAs, and carriers with the core digital systems, specialized AI, and data-driven foundation to eliminate distribution drag across the insurance lifecycle, spanning sales, servicing, and back-office operations. Underpinned by unmatched speed and performance power, we are the trusted backbone that's taking the insurance industry from friction to flow with Distribution Velocity - speed, performance, and trust - to drive growth at scale. With over 95% of the top agencies and insurers and 50% of industry compliance transactions running through Vertafore, we lead at the intersection of innovation and trust, giving insurance professionals the confidence to transform and win in the AI era. Our reach is global, with headquarters in Denver, Colorado, and offices across the U.S., Canada, and India. The Principal Software Engineer helps shape the future of our technology platforms and lead how we build software in an AI-native world. As a senior technical leader who stays hands-on. This role set architectural direction, personally take on our hardest engineering problems, and show what an engineering organization can achieve when engineering excellence and AI are leveraged together. The role works closely with Product and Engineering leadership so that what we build delivers real value to our customers. Core Duties and Responsibilities: Design and guide scalable, secure, resilient architectures, making the tradeoffs between speed, quality, and long-term sustainability. Lead the modernization of legacy platforms toward cloud-native, API-first, and AI-enabled architectures. Identify and address technical debt, architectural risk, and performance bottlenecks early. Shape long-term technology strategy, and evaluate emerging technologies through hands-on experiments and proofs of concept. Stay hands-on in design, implementation, prototyping, and debugging, and personally take on our most complex problems. Build reference implementations, reusable components, and shared frameworks that speed up teams across the organization. Own technical outcomes, not just recommendations, with high standards for security, performance, reliability, and observability. Define engineering standards and design principles, and lead design reviews that encourage constructive debate. Mentor senior engineers, architects, and emerging technical leaders. Influence decisions across teams without direct authority, and partner with Product, Architecture, and Security to turn business strategy into technical plans. Other duties as assigned. Knowledge, Skills and Abilities: Advanced communication and interpersonal skills. Ability to facilitate productive discussions and resolve complex challenges. Strong analytical, critical-thinking, and problem-solving capabilities. Curiosity and commitment to continuous learning and professional development. Ability to establish, communicate, and promote adherence to technical standards and quality practices. Strategic decision-making skills with a focus on maintainability, scalability, security, and performance. Ability to collaborate effectively with globally distributed teams. Knowledge of high-performance and high-availability application design principles. Proficiency with multiple database technologies. Strong software design and implementation capabilities at the enterprise level. Ability to communicate effectively with both technical and non-technical stakeholders. Ability to explain and defend technical decisions and architectural approaches. Leadership and mentoring capabilities across multiple teams. Ability to partner with business stakeholders to design practical technology solutions. Qualifications: 10+ years of professional software engineering, with deep expertise in at least one of Java, C#/.NET, Node.js/JavaScript, or Python. A track record of designing and delivering large-scale enterprise systems, grounded in architecture, distributed systems, and APIs. Significant experience leading complex technical initiatives and influencing direction across multiple teams. Hands-on experience with AI-assisted development tools, and evidence that you've improved how teams work through automation. Production experience with cloud platforms, ideally AWS. Clear communication with both technical and nontechnical audiences. A bachelor's degree in Computer Science or a related field, or equivalent practical experience. Areas of depth Our platform spans a wide range of technologies, and we don't expect anyone to be an expert in all of them. We're looking for real depth in several of these areas and the curiosity to grow in the rest. Cloud and infrastructure: AWS services such as EKS, ECS, and EC2; containerization; cloud-native architecture. DevOps and delivery: CI/CD pipelines, deployment automation, observability, and DevSecOps. Data: relational databases such as Oracle, PostgreSQL, or SQL Server, including SQL development and performance tuning. Frontend: modern UI frameworks such as React or Angular. Modernization: evolving large-scale legacy applications into modern platforms. Applied AI: LLMs, retrieval-augmented generation, agents, and agentic workflows. Platform engineering: shared services, internal platforms, and developer productivity tools. Regulated environments: sensitive customer data, compliance requirements, and enterprise SaaS. Additional Requirements and Details: Travel required up to 10% of the time. Flexible hybrid work arrangement. Occasional lifting and/or moving up to 10 pounds. Frequent repetitive hand and arm movements required to operate a computer. Specific vision abilities required include close vision for computer-based work. Frequent sitting and/or standing. Is this role not an exact fit for you? Keep an eye on our Careers Page for other positions! Vertafore is a drug free workplace and conducts preemployment drug and background screenings . The selected candidate must be legally authorized to work in the United States. The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all the job responsibilities, duties, skill, or working conditions. In addition, this document does not create an employment contract, implied or otherwise, other than an "at will" relationship. Vertafore strongly supports equal employment opportunity for all applicants regardless of race, color, religion, sex, gender identity, pregnancy, national origin, ancestry, citizenship, age, marital status, physical disability, mental disability, medical condition, sexual orientation, genetic information, or any other characteristic protected by state or federal law. We do not accept resumes from agencies, headhunters, or other suppliers who have not signed a formal agreement with us.
11/12/2026
Full time
Job Description Job Description $125,000 - $180,000 + VIP Bonus $125,000 - $180,000 + VIP Bonus The insurance industry runs on Vertafore. We equip agencies, MGAs, and carriers with the core digital systems, specialized AI, and data-driven foundation to eliminate distribution drag across the insurance lifecycle, spanning sales, servicing, and back-office operations. Underpinned by unmatched speed and performance power, we are the trusted backbone that's taking the insurance industry from friction to flow with Distribution Velocity - speed, performance, and trust - to drive growth at scale. With over 95% of the top agencies and insurers and 50% of industry compliance transactions running through Vertafore, we lead at the intersection of innovation and trust, giving insurance professionals the confidence to transform and win in the AI era. Our reach is global, with headquarters in Denver, Colorado, and offices across the U.S., Canada, and India. The Principal Software Engineer helps shape the future of our technology platforms and lead how we build software in an AI-native world. As a senior technical leader who stays hands-on. This role set architectural direction, personally take on our hardest engineering problems, and show what an engineering organization can achieve when engineering excellence and AI are leveraged together. The role works closely with Product and Engineering leadership so that what we build delivers real value to our customers. Core Duties and Responsibilities: Design and guide scalable, secure, resilient architectures, making the tradeoffs between speed, quality, and long-term sustainability. Lead the modernization of legacy platforms toward cloud-native, API-first, and AI-enabled architectures. Identify and address technical debt, architectural risk, and performance bottlenecks early. Shape long-term technology strategy, and evaluate emerging technologies through hands-on experiments and proofs of concept. Stay hands-on in design, implementation, prototyping, and debugging, and personally take on our most complex problems. Build reference implementations, reusable components, and shared frameworks that speed up teams across the organization. Own technical outcomes, not just recommendations, with high standards for security, performance, reliability, and observability. Define engineering standards and design principles, and lead design reviews that encourage constructive debate. Mentor senior engineers, architects, and emerging technical leaders. Influence decisions across teams without direct authority, and partner with Product, Architecture, and Security to turn business strategy into technical plans. Other duties as assigned. Knowledge, Skills and Abilities: Advanced communication and interpersonal skills. Ability to facilitate productive discussions and resolve complex challenges. Strong analytical, critical-thinking, and problem-solving capabilities. Curiosity and commitment to continuous learning and professional development. Ability to establish, communicate, and promote adherence to technical standards and quality practices. Strategic decision-making skills with a focus on maintainability, scalability, security, and performance. Ability to collaborate effectively with globally distributed teams. Knowledge of high-performance and high-availability application design principles. Proficiency with multiple database technologies. Strong software design and implementation capabilities at the enterprise level. Ability to communicate effectively with both technical and non-technical stakeholders. Ability to explain and defend technical decisions and architectural approaches. Leadership and mentoring capabilities across multiple teams. Ability to partner with business stakeholders to design practical technology solutions. Qualifications: 10+ years of professional software engineering, with deep expertise in at least one of Java, C#/.NET, Node.js/JavaScript, or Python. A track record of designing and delivering large-scale enterprise systems, grounded in architecture, distributed systems, and APIs. Significant experience leading complex technical initiatives and influencing direction across multiple teams. Hands-on experience with AI-assisted development tools, and evidence that you've improved how teams work through automation. Production experience with cloud platforms, ideally AWS. Clear communication with both technical and nontechnical audiences. A bachelor's degree in Computer Science or a related field, or equivalent practical experience. Areas of depth Our platform spans a wide range of technologies, and we don't expect anyone to be an expert in all of them. We're looking for real depth in several of these areas and the curiosity to grow in the rest. Cloud and infrastructure: AWS services such as EKS, ECS, and EC2; containerization; cloud-native architecture. DevOps and delivery: CI/CD pipelines, deployment automation, observability, and DevSecOps. Data: relational databases such as Oracle, PostgreSQL, or SQL Server, including SQL development and performance tuning. Frontend: modern UI frameworks such as React or Angular. Modernization: evolving large-scale legacy applications into modern platforms. Applied AI: LLMs, retrieval-augmented generation, agents, and agentic workflows. Platform engineering: shared services, internal platforms, and developer productivity tools. Regulated environments: sensitive customer data, compliance requirements, and enterprise SaaS. Additional Requirements and Details: Travel required up to 10% of the time. Flexible hybrid work arrangement. Occasional lifting and/or moving up to 10 pounds. Frequent repetitive hand and arm movements required to operate a computer. Specific vision abilities required include close vision for computer-based work. Frequent sitting and/or standing. Is this role not an exact fit for you? Keep an eye on our Careers Page for other positions! Vertafore is a drug free workplace and conducts preemployment drug and background screenings . The selected candidate must be legally authorized to work in the United States. The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all the job responsibilities, duties, skill, or working conditions. In addition, this document does not create an employment contract, implied or otherwise, other than an "at will" relationship. Vertafore strongly supports equal employment opportunity for all applicants regardless of race, color, religion, sex, gender identity, pregnancy, national origin, ancestry, citizenship, age, marital status, physical disability, mental disability, medical condition, sexual orientation, genetic information, or any other characteristic protected by state or federal law. We do not accept resumes from agencies, headhunters, or other suppliers who have not signed a formal agreement with us.
Job Description Job Description Location: Denver, CO (hybrid - Tue/Wed/Thu in office) Reports to: CEO The role Ombud's platform runs production AI workloads for enterprise customers, and we're scaling toward a self-service motion where customers onboard, ingest content, and operate the product without manual implementation. That requires an infrastructure foundation that can handle multi-tenant scale, high reliability, and the unique demands of generative AI workloads - without ballooning the AWS bill. We're hiring a Principal Platform Engineer to own that foundation. This is a senior individual contributor role with broad architectural authority. You will not have direct reports. You will set the technical direction for our cloud infrastructure, partner with engineering on production scaling decisions, and operate the platform with the discipline a SOC 2 / ISO 27001 customer base requires. What you'll own Production Kubernetes (EKS) clusters: capacity planning, node group strategy, gen-AI workload isolation, blast-radius containment. AWS infrastructure end-to-end: RDS, DMS, Kafka (MSK), ECR, networking, IAM, multi-region deployments (including Ireland for EU data residency). Infrastructure-as-code in Terraform - modules, environments, drift management, peer review. CI/CD pipelines (Jenkins, GitHub Actions, or your recommended replacement) - fast, reliable, secure builds for backend and frontend services. Observability: Grafana dashboards, Prometheus metrics, log pipelines, on-call alerting, SLO definition. Cost optimization. AWS spend is one of our top three variable costs. Reducing it by 20% is a tangible objective for this seat. Security posture: secrets management (Consul/Vault), IAM hygiene, vulnerability patching, support for SOC 2 and ISO 27001 audit cycles. Architecture leadership on the self-service infrastructure roadmap: how we onboard a customer without human intervention and scale to 10x our current tenant count. Documentation and runbooks that let the rest of the engineering team operate the platform when you're unavailable. Must-haves 8+ years of platform, infrastructure, SRE, or DevOps experience, with at least 3+ years operating production Kubernetes at scale. Deep AWS expertise across compute, storage, networking, data services, and IAM. Production fluency with Terraform, Docker, Linux, and CI/CD systems. Track record of architectural decisions that materially improved reliability, cost, or developer velocity - with specific, measurable outcomes you can point to. Comfort operating as a senior IC who sets technical direction across teams without formal authority. Strong written communication - runbooks, architecture decision records, post-incident reviews. Willingness to be in-office Tuesday through Thursday in Denver. Nice-to-haves Production experience supporting generative AI or ML workloads (GPU node groups, vector databases, model serving). Experience with Qdrant, Pinecone, Weaviate, or other vector stores in production. PostgreSQL operational depth - replication, performance tuning, backup/restore. Experience scaling a multi-tenant SaaS platform from 100 customers to 1,000. SOC 2 Type II and ISO 27001 audit experience. Familiarity with event-driven architectures (Kafka, Kinesis, or equivalent). What success looks like First 30 days Complete a written audit of our current infrastructure: what we have, where the risks are, what's costing us money. Establish on-call rotation participation and respond to your first production incident. Identify the top three architectural debt items. First 60 days Deliver first architectural recommendation with implementation plan - typically cost optimization or scaling bottleneck. Refresh and own the observability stack. Document the production runbook for the rest of the engineering team. First 90 days Ship a measurable improvement: cost reduction, reliability uplift, deployment velocity, or scale headroom. Deliver the multi-tenant scale roadmap for the self-service motion. Establish quarterly architecture review cadence with the engineering team. Why Ombud You'll own the platform that runs production AI for some of the largest enterprise software companies in the world. The infrastructure decisions you make will directly enable our 2026 strategy of moving from response management to autonomous revenue execution. You'll work with a small, senior engineering team that ships fast and trusts each other. ABOUT OMBUD Ombud is a Denver-based B2B SaaS company building the agentic AI platform that powers Revenue Operations teams at enterprises like Workday, UKG, and Prudential. Our product, Ombuddy, automates the response work - RFPs, security questionnaires, proposals - that has historically eaten enterprise sales cycles. Our 2026 strategy is to extend this from response management into Orchestrated Revenue Operations: autonomous execution of the discrete sales processes that move revenue. Our 2035 BHAG is $1B ARR powering 80% of discrete B2B sales motions. We run on EOS. We hire for output, not pedigree. We expect honesty over politeness, decisions over discussions, and execution over enthusiasm. HOW WE WORK - PIRCC VALUES Progressive - We grow. We learn. We push the model forward, not protect the status quo. Integrity - We do the right thing and keep our commitments. Said and done are the same thing. Resourceful - We turn constraints into creativity. We do more with less and bring solutions, not problems. Customer-Centric - Our customers' success is the metric that matters. We anticipate their needs and earn their trust. Community - We build a team people want to be part of, and we invest in the communities we serve.
11/12/2026
Full time
Job Description Job Description Location: Denver, CO (hybrid - Tue/Wed/Thu in office) Reports to: CEO The role Ombud's platform runs production AI workloads for enterprise customers, and we're scaling toward a self-service motion where customers onboard, ingest content, and operate the product without manual implementation. That requires an infrastructure foundation that can handle multi-tenant scale, high reliability, and the unique demands of generative AI workloads - without ballooning the AWS bill. We're hiring a Principal Platform Engineer to own that foundation. This is a senior individual contributor role with broad architectural authority. You will not have direct reports. You will set the technical direction for our cloud infrastructure, partner with engineering on production scaling decisions, and operate the platform with the discipline a SOC 2 / ISO 27001 customer base requires. What you'll own Production Kubernetes (EKS) clusters: capacity planning, node group strategy, gen-AI workload isolation, blast-radius containment. AWS infrastructure end-to-end: RDS, DMS, Kafka (MSK), ECR, networking, IAM, multi-region deployments (including Ireland for EU data residency). Infrastructure-as-code in Terraform - modules, environments, drift management, peer review. CI/CD pipelines (Jenkins, GitHub Actions, or your recommended replacement) - fast, reliable, secure builds for backend and frontend services. Observability: Grafana dashboards, Prometheus metrics, log pipelines, on-call alerting, SLO definition. Cost optimization. AWS spend is one of our top three variable costs. Reducing it by 20% is a tangible objective for this seat. Security posture: secrets management (Consul/Vault), IAM hygiene, vulnerability patching, support for SOC 2 and ISO 27001 audit cycles. Architecture leadership on the self-service infrastructure roadmap: how we onboard a customer without human intervention and scale to 10x our current tenant count. Documentation and runbooks that let the rest of the engineering team operate the platform when you're unavailable. Must-haves 8+ years of platform, infrastructure, SRE, or DevOps experience, with at least 3+ years operating production Kubernetes at scale. Deep AWS expertise across compute, storage, networking, data services, and IAM. Production fluency with Terraform, Docker, Linux, and CI/CD systems. Track record of architectural decisions that materially improved reliability, cost, or developer velocity - with specific, measurable outcomes you can point to. Comfort operating as a senior IC who sets technical direction across teams without formal authority. Strong written communication - runbooks, architecture decision records, post-incident reviews. Willingness to be in-office Tuesday through Thursday in Denver. Nice-to-haves Production experience supporting generative AI or ML workloads (GPU node groups, vector databases, model serving). Experience with Qdrant, Pinecone, Weaviate, or other vector stores in production. PostgreSQL operational depth - replication, performance tuning, backup/restore. Experience scaling a multi-tenant SaaS platform from 100 customers to 1,000. SOC 2 Type II and ISO 27001 audit experience. Familiarity with event-driven architectures (Kafka, Kinesis, or equivalent). What success looks like First 30 days Complete a written audit of our current infrastructure: what we have, where the risks are, what's costing us money. Establish on-call rotation participation and respond to your first production incident. Identify the top three architectural debt items. First 60 days Deliver first architectural recommendation with implementation plan - typically cost optimization or scaling bottleneck. Refresh and own the observability stack. Document the production runbook for the rest of the engineering team. First 90 days Ship a measurable improvement: cost reduction, reliability uplift, deployment velocity, or scale headroom. Deliver the multi-tenant scale roadmap for the self-service motion. Establish quarterly architecture review cadence with the engineering team. Why Ombud You'll own the platform that runs production AI for some of the largest enterprise software companies in the world. The infrastructure decisions you make will directly enable our 2026 strategy of moving from response management to autonomous revenue execution. You'll work with a small, senior engineering team that ships fast and trusts each other. ABOUT OMBUD Ombud is a Denver-based B2B SaaS company building the agentic AI platform that powers Revenue Operations teams at enterprises like Workday, UKG, and Prudential. Our product, Ombuddy, automates the response work - RFPs, security questionnaires, proposals - that has historically eaten enterprise sales cycles. Our 2026 strategy is to extend this from response management into Orchestrated Revenue Operations: autonomous execution of the discrete sales processes that move revenue. Our 2035 BHAG is $1B ARR powering 80% of discrete B2B sales motions. We run on EOS. We hire for output, not pedigree. We expect honesty over politeness, decisions over discussions, and execution over enthusiasm. HOW WE WORK - PIRCC VALUES Progressive - We grow. We learn. We push the model forward, not protect the status quo. Integrity - We do the right thing and keep our commitments. Said and done are the same thing. Resourceful - We turn constraints into creativity. We do more with less and bring solutions, not problems. Customer-Centric - Our customers' success is the metric that matters. We anticipate their needs and earn their trust. Community - We build a team people want to be part of, and we invest in the communities we serve.
Job Description Job Description About Lantern Lantern is the specialty care platform connecting people with the best care when they need it most. By curating a Network of Excellence comprised of the nation's top specialists for surgery, cancer care, infusions and more, Lantern delivers excellent care with significant cost savings to employers and their workforces. Lantern also pairs members with a dedicated care team, including Care Advocates and nurses, for the entirety of their care journey, helping them get back to good health, back to their families and back to work. With convenient access to specialists nationwide, Lantern means quality care is within driving distance for most. Lantern is trusted by the nation's largest employers to deliver care to more than 6 million members across the country. Learn more about us at Lantern is the specialty care platform, connecting people with high-quality, affordable specialty care close to home. We operate in a regulated healthcare environment (HIPAA, HITRUST, SOC 2), we handle protected health information at scale, and we are becoming an AI healthcare company, with AI adoption a top company priority. This Principal IAM Engineer is a senior level, individual-contributor role and the technical authority for identity at Lantern. In an organization where the security perimeter is effectively identity, you will own the identity control plane end to end, and you will determine who can reach PHI and under what conditions. You will set the identity standard, build the automation behind it, and hold the verification bar that other teams operate against. You will report to the CISO and partner closely with our IAM engineer and with the platform, cloud, and service delivery teams that execute alongside you. This is a hands-on principal seat, not a people-management role today, with a clear path to expand into a leadership role as the identity function grows. Our security philosophy is open by default, secure by design. Security exists to help the business move fast, safely, and the default answer is "yes, safely," because guardrails are built into the platform, pipelines, and tooling rather than enforced by someone saying no. Gates exist only where risk genuinely warrants them, and even then they are automated, fast, and transparent. Location: Hybrid - at least 3 days/wk in our NYC, NY offices Responsibilities: Own the identity lifecycle: joiner, mover, and leaver provisioning and deprovisioning, automated from role- and attribute-based models (RBAC/ABAC), with deprovisioning verified against an entitlement inventory rather than assumed. Own access management, including Conditional Access, phishing-resistant MFA, and privileged access on a Zero Trust model, with least-privilege by default, just-in-time (JIT) elevation, and enforcement confirmed on every access path rather than only saved. Own directory and federation across Entra ID, single sign-on, SAML, OIDC, and OAuth2. Own secrets and non-human identity, including API keys, service accounts, and workload identity, and maintain an owner registry for them. Own key access governance and separation of duties in a model where another team operates the key management system. Own identity automation and identity-as-code, building lifecycle and access controls as reviewable, version-controlled infrastructure (Terraform and policy-as-code) rather than manual configuration. Own the identity-verification standard the service desk follows for password resets, MFA resets, and device enrollment. This is a hands-on control point, because helpdesk-initiated resets are a leading account-takeover vector. Key Deliverables in Your First Year: Conditional Access enforced by default on PHI-facing applications, with enforcement verified. Automated joiner, mover, and leaver provisioning and deprovisioning that meets its SLA every time. A secrets golden path, with vaulted secrets, none in code, and a populated key-to-owner registry. Strong, phishing-resistant MFA coverage on privileged accounts. Documented runbooks and depth across the control plane, so no critical control depends on a single person. How You Will Work: You will set standards that partner teams execute. Service Delivery performs provisioning tasks and resets against the verification bar you own. Cloud Engineering carries cloud access, workload identity, and key-management operations, with key access governed by you. HR events are the sole trigger for lifecycle changes. The Governance, Risk & Compliance team independently attests to the entitlements you produce, and access certification deliberately sits outside this role so that the team reviewing access is not the team granting it. Holding those boundaries cleanly is central to the job. Requirements: A minimum of 8 years in identity and access management, including principal- or staff-level ownership of an identity control plane. Deep Microsoft Entra ID engineering, including Conditional Access policy design, phishing-resistant MFA, single sign-on, and federation across SAML, OIDC, and OAuth2, and verifying that enforcement takes effect across every access path, not only the expected one. Identity lifecycle automation across cloud, SaaS, and privileged systems, with role- and attribute-based provisioning (RBAC/ABAC) and deprovisioning verified against an entitlement inventory. Zero Trust identity design, including least-privilege, just-in-time (JIT) access, and risk-based or adaptive access controls. Identity governance and administration (IGA) platform engineering, including privileged access management. Automation and scripting (PowerShell, Python, or similar) to build lifecycle workflows and custom connectors. Identity-as-code and policy-as-code practice, using Terraform with source-controlled change management (for example, GitHub). Secrets and non-human identity (API keys, service accounts, workload identity), and maintaining an owner registry for them. Key access governance and separation of duties in a model where another team operates the key management system. The ability to act as the technical authority for a function without formal people-management authority, working directly to a CISO. Bachelor's degree in a relevant field, or equivalent professional experience. Strong Candidates Will: Healthcare or another regulated environment where identity controls gate access to PHI. Hands-on Saviynt with PAM, Azure PIM, and Keeper, or transferable depth in comparable platforms. Experience remediating a Conditional Access enforcement gap or a deprovisioning failure, and making the structural change that prevented recurrence. Passkeys and FIDO2, or phishing-resistant authenticator experience, aligned with NIST SP 800-63 Rev. 4. Experience growing a technical scope into a broader leadership remit. Microsoft Identity and Access Administrator certification, CIMP, or equivalent. Who Thrives in This Role: Verified enforcement. You do not consider a control done until you have seen it working on every path. Automation bias. You remove the manual step rather than documenting it more carefully. Structural fixes. You solve the class of failure, not the instance. Boundary clarity. You hold the standard with partner teams without taking over their execution. Governance respect. You keep access certification independent rather than absorbing it. Benefits Medical Insurance Dental Insurance Vision Insurance Short & Long Term Disability Life Insurance 401k with company match Flexible Time Off Paid Parental Leave The salary range for this position is $175,000 - $225,000 annually, based on experience, skills, and qualifications. This position is also eligible for an annual bonus, separate from and in addition to the base salary range listed above. Lantern provides this range in good faith in compliance with New York's pay transparency requirements. About You: You use LOGIC in your decision making and understand that progress is critical to making change. You focus on the execution of your content while balancing a fast-paced environment and you take the time to celebrate both the small & big wins. INCLUSION is a core tenant of your personal beliefs. A diverse and inclusive environment is incredibly important to you. You understand and desire to be a part of a diverse team with different experiences and perspectives & you cherish the differences in each individual that you interact with. You have the GRIT, drive and ambition to tackle big problems. Big problems require big ideas and a team that supports new ideas. You care deeply for your customers are driven to keep HUMANITY in all decisions. Your customers aren't just the individuals using your product. They are the driving factor in your motivation to make a change. Integrity guides you in life. Focusing on the TRUTH vs. giving people the answers they want to hear. You thrive in a Team Environment. Collaboration is key in innovation and creating change. These pillars of LIGHT are a reminder to our team that we are making a difference by providing guidance and support in navigating the often complex and confusing landscape of healthcare. We hope that through this LIGHT, individuals can find their way to the best care, resources . click apply for full job details
11/12/2026
Full time
Job Description Job Description About Lantern Lantern is the specialty care platform connecting people with the best care when they need it most. By curating a Network of Excellence comprised of the nation's top specialists for surgery, cancer care, infusions and more, Lantern delivers excellent care with significant cost savings to employers and their workforces. Lantern also pairs members with a dedicated care team, including Care Advocates and nurses, for the entirety of their care journey, helping them get back to good health, back to their families and back to work. With convenient access to specialists nationwide, Lantern means quality care is within driving distance for most. Lantern is trusted by the nation's largest employers to deliver care to more than 6 million members across the country. Learn more about us at Lantern is the specialty care platform, connecting people with high-quality, affordable specialty care close to home. We operate in a regulated healthcare environment (HIPAA, HITRUST, SOC 2), we handle protected health information at scale, and we are becoming an AI healthcare company, with AI adoption a top company priority. This Principal IAM Engineer is a senior level, individual-contributor role and the technical authority for identity at Lantern. In an organization where the security perimeter is effectively identity, you will own the identity control plane end to end, and you will determine who can reach PHI and under what conditions. You will set the identity standard, build the automation behind it, and hold the verification bar that other teams operate against. You will report to the CISO and partner closely with our IAM engineer and with the platform, cloud, and service delivery teams that execute alongside you. This is a hands-on principal seat, not a people-management role today, with a clear path to expand into a leadership role as the identity function grows. Our security philosophy is open by default, secure by design. Security exists to help the business move fast, safely, and the default answer is "yes, safely," because guardrails are built into the platform, pipelines, and tooling rather than enforced by someone saying no. Gates exist only where risk genuinely warrants them, and even then they are automated, fast, and transparent. Location: Hybrid - at least 3 days/wk in our NYC, NY offices Responsibilities: Own the identity lifecycle: joiner, mover, and leaver provisioning and deprovisioning, automated from role- and attribute-based models (RBAC/ABAC), with deprovisioning verified against an entitlement inventory rather than assumed. Own access management, including Conditional Access, phishing-resistant MFA, and privileged access on a Zero Trust model, with least-privilege by default, just-in-time (JIT) elevation, and enforcement confirmed on every access path rather than only saved. Own directory and federation across Entra ID, single sign-on, SAML, OIDC, and OAuth2. Own secrets and non-human identity, including API keys, service accounts, and workload identity, and maintain an owner registry for them. Own key access governance and separation of duties in a model where another team operates the key management system. Own identity automation and identity-as-code, building lifecycle and access controls as reviewable, version-controlled infrastructure (Terraform and policy-as-code) rather than manual configuration. Own the identity-verification standard the service desk follows for password resets, MFA resets, and device enrollment. This is a hands-on control point, because helpdesk-initiated resets are a leading account-takeover vector. Key Deliverables in Your First Year: Conditional Access enforced by default on PHI-facing applications, with enforcement verified. Automated joiner, mover, and leaver provisioning and deprovisioning that meets its SLA every time. A secrets golden path, with vaulted secrets, none in code, and a populated key-to-owner registry. Strong, phishing-resistant MFA coverage on privileged accounts. Documented runbooks and depth across the control plane, so no critical control depends on a single person. How You Will Work: You will set standards that partner teams execute. Service Delivery performs provisioning tasks and resets against the verification bar you own. Cloud Engineering carries cloud access, workload identity, and key-management operations, with key access governed by you. HR events are the sole trigger for lifecycle changes. The Governance, Risk & Compliance team independently attests to the entitlements you produce, and access certification deliberately sits outside this role so that the team reviewing access is not the team granting it. Holding those boundaries cleanly is central to the job. Requirements: A minimum of 8 years in identity and access management, including principal- or staff-level ownership of an identity control plane. Deep Microsoft Entra ID engineering, including Conditional Access policy design, phishing-resistant MFA, single sign-on, and federation across SAML, OIDC, and OAuth2, and verifying that enforcement takes effect across every access path, not only the expected one. Identity lifecycle automation across cloud, SaaS, and privileged systems, with role- and attribute-based provisioning (RBAC/ABAC) and deprovisioning verified against an entitlement inventory. Zero Trust identity design, including least-privilege, just-in-time (JIT) access, and risk-based or adaptive access controls. Identity governance and administration (IGA) platform engineering, including privileged access management. Automation and scripting (PowerShell, Python, or similar) to build lifecycle workflows and custom connectors. Identity-as-code and policy-as-code practice, using Terraform with source-controlled change management (for example, GitHub). Secrets and non-human identity (API keys, service accounts, workload identity), and maintaining an owner registry for them. Key access governance and separation of duties in a model where another team operates the key management system. The ability to act as the technical authority for a function without formal people-management authority, working directly to a CISO. Bachelor's degree in a relevant field, or equivalent professional experience. Strong Candidates Will: Healthcare or another regulated environment where identity controls gate access to PHI. Hands-on Saviynt with PAM, Azure PIM, and Keeper, or transferable depth in comparable platforms. Experience remediating a Conditional Access enforcement gap or a deprovisioning failure, and making the structural change that prevented recurrence. Passkeys and FIDO2, or phishing-resistant authenticator experience, aligned with NIST SP 800-63 Rev. 4. Experience growing a technical scope into a broader leadership remit. Microsoft Identity and Access Administrator certification, CIMP, or equivalent. Who Thrives in This Role: Verified enforcement. You do not consider a control done until you have seen it working on every path. Automation bias. You remove the manual step rather than documenting it more carefully. Structural fixes. You solve the class of failure, not the instance. Boundary clarity. You hold the standard with partner teams without taking over their execution. Governance respect. You keep access certification independent rather than absorbing it. Benefits Medical Insurance Dental Insurance Vision Insurance Short & Long Term Disability Life Insurance 401k with company match Flexible Time Off Paid Parental Leave The salary range for this position is $175,000 - $225,000 annually, based on experience, skills, and qualifications. This position is also eligible for an annual bonus, separate from and in addition to the base salary range listed above. Lantern provides this range in good faith in compliance with New York's pay transparency requirements. About You: You use LOGIC in your decision making and understand that progress is critical to making change. You focus on the execution of your content while balancing a fast-paced environment and you take the time to celebrate both the small & big wins. INCLUSION is a core tenant of your personal beliefs. A diverse and inclusive environment is incredibly important to you. You understand and desire to be a part of a diverse team with different experiences and perspectives & you cherish the differences in each individual that you interact with. You have the GRIT, drive and ambition to tackle big problems. Big problems require big ideas and a team that supports new ideas. You care deeply for your customers are driven to keep HUMANITY in all decisions. Your customers aren't just the individuals using your product. They are the driving factor in your motivation to make a change. Integrity guides you in life. Focusing on the TRUTH vs. giving people the answers they want to hear. You thrive in a Team Environment. Collaboration is key in innovation and creating change. These pillars of LIGHT are a reminder to our team that we are making a difference by providing guidance and support in navigating the often complex and confusing landscape of healthcare. We hope that through this LIGHT, individuals can find their way to the best care, resources . click apply for full job details
