Senior Network Engineer

Wilson Elser is a leading defense litigation law firm with more than 1400 attorneys in 46 offices throughout the United States. Founded in 1978, we rank among the top 100 law firms identified by The American Lawyer and 36 in the National Law Journal’s survey of the nation’s largest law firms. The PositionWe're looking for a Senior Network Engineer to own and evolve our enterprise network across multi-site and cloud environments. You'll be a key technical voice shaping infrastructure strategy, driving security posture through zero-trust principles, and ensuring high availability for business-critical systems — all while working remotely on a collaborative, senior-level team.Key ResponsibilitiesDesign & ArchitectureArchitect scalable, resilient network solutions including routing/switching, SD-WAN, firewalls, VPN, QoS, and zero-trust segmentation.Define requirements, evaluate technologies, and lead infrastructure changes from design through implementation.Develop and maintain business continuity and disaster recovery plans for all network components.Operations & MaintenancePerform proactive maintenance — patching, upgrades, tuning, and health monitoring across the networking estate.Manage vulnerability findings and vendor security advisories for network equipment and systems.Maintain accurate network documentation, configuration baselines, and topology diagrams.Own and resolve network-related incidents and service requests, driving issues to resolution.Collaboration & StrategyPartner with security, infrastructure, and application teams to support firm-wide initiatives.Evaluate emerging technologies and translate their impact into actionable recommendations.Serve as a technical mentor and backup resource across the Network Engineering team.Communicate clearly with technical and non-technical stakeholders at all levels.Qualifications10+ years of hands-on network engineering experience across multi-site enterprise environmentsBachelor's degree in Computer Science, Information Technology, or a related field — or equivalent professional experience. Palo Alto Firewalls - Production deployment, policy management, and troubleshooting of Palo Alto NGFW (Panorama experience a strong plus).Cisco ACI - Hands-on experience with Nexus 9300/9000 series in ACI mode — fabric design, EPG/contract configuration, and troubleshooting.Proven ability to architect, implement, and troubleshoot complex, multi-vendor network infrastructure.Strong documentation habits — you leave networks better documented than you found them.Ability to translate ambiguous business requirements into clear, implementable technical designs.Excellent communication skills — comfortable presenting to both engineers and executives.Strong project management instincts with the ability to juggle multiple workstreams independently.A collaborative, team-first mentality balanced with the ability to drive work autonomously.Routing & SwitchingDeep expertise in enterprise routing protocols (OSPF, BGP) and switching (VLANs, port channels, spanning tree, QoS) across multi-site environments.Cisco certification at the professional or expert level (CCNP, CCDP, or CCIE) strongly preferred.Experience in professional services, financial services, or legal industry environments.Familiarity with network automation tooling (Ansible, Python/Netmiko, Terraform for network infra).Experience with public cloud networking (AWS, Azure) and hybrid connectivity patterns.Exposure to Panorama for centralized Palo Alto management at scale.Core NetworkingSD-WAN (Silver Peak / HPE Aruba EdgeConnect) — deployment, policy, and optimizationDMVPN, IPSec VPN, and secure remote access architecturesLoad balancing (Citrix NetScaler / ADC) — configuration, SSL offload, and health monitoringWireless networking via Cisco Meraki — deployment, RF planning, and troubleshootingNetwork tapping and packet capture solutions for visibility and forensicsSecurity & Zero TrustZscaler (ZIA/ZPA) — implementation, policy configuration, and troubleshootingACL development and firewall policy lifecycle managementZero-trust network segmentation principles and implementationWAF configuration and proxy infrastructureCollaboration & VoiceCisco Call Manager (CUCM) and Unity Connection — administration and troubleshootingNetwork monitoring and management platforms (SolarWinds, PRTG, or equivalent)A variety of factors are considered in making compensation decisions, including but not limited to experience, education, licensure and/or certifications, geographic location, market demands, other business and organizational needs, and other factors permitted by law. Final salary wages offered may be outside of this range based on other reasons and individual circumstances. This position is considered full-time and therefore qualifies for benefits including 401(k) retirement savings plan, medical, dental, vision, disability, and life insurance. Details of participation in these benefit plans will be provided if an employee receives