Lead Network Engineer

HealthPartners is currently hiring a Lead Network Engineer. The Lead Network Engineer serves as a subject matter expert across multiple areas of network infrastructure and plays a critical role in the design, maintenance, and monitoring of the organization's core network environment. This role ensures the reliability, security, and performance of the network infrastructure that supports enterprisewide connectivity.

The Lead Network Engineer partners closely with the business to help achieve optimal use of the network infrastructure by conducting needs assessments and supporting procurement, installation, configuration, monitoring, and ongoing optimization. The role is also responsible for maintaining strong security configuration and integrity practices, supporting technical training efforts, and leading effective troubleshooting and problem resolution activities.

As a technical leader, the Lead Network Engineer provides direction, mentorship, and guidance to other team members, contributing to the overall growth and effectiveness of the network engineering team. This position reports to the Senior Manager, Network Infrastructure and works within a collaborative team of sixteen professionals, including network engineers and a network architect.

Required Qualifications:

• Bachelor's degree in network and security, Infrastructure or similar, or equivalent work experience
• Twelve (12) years of experience in Network Infrastructure design, implementation, and maintenance.
• Expertlevel knowledge of networking technologies, with advanced troubleshooting experience in complex environments.
• Proven experience with network monitoring (e.g. PRTG), diagnostics, and analytics tools in complex environments
• Excellent understanding of all network infrastructure components -switches, routers, Palo Alto firewalls, F5 (LTM, GTM, and ASM environments) and NetScaler load balancers, remote access systems including Palo Alto Global Protect, Cisco wireless systems, Internet infrastructure, private line services including Lumen Wave and E-Access circuits and Comcast WAN circuits, low voltage cabling and standards, and carrier services
• Experience with Infoblox DNS/DHCP and its configuration.
• Experience with Software Defined Access Methodology - Security & Segmentation, including Implementation of both macro (virtual networks) and micro (specific user/device) segmentation to secure IoT and user devices.
• Experience with Azure cloud and other cloud services.
• Experience with scripting languages, such as Python, Bash, or TCL
• Experience with and strong security and system infrastructure knowledge
• Excellent with protocol analyzers, and protocol data flows
• Proficient at writing technical and business documentation
• Excellent verbal and written communication skills
• Experience with and strong knowledge of multiple operating systems, e.g., Windows, Linux, iOS, IOS, NXOS, ACI, etc.
• Experience with providing work direction and mentoring staff.
• Experience with and strong capability for managing major projects and integrating project needs across IS&T groups for a multi-organization company.
• Ability to be on-call 24X7.

Preferred Qualifications:

• Relevant network certifications including Palo Alto PCNSE, PCNSA, PCCSA; Cisco CCNA, CCNP, CCDE; Azure Certifications AZ-900, AZ-500, AZ-303/304

Hours/Location:

• M-F; core business hours
• This position offers a hybrid work arrangement. While much of the work may be completed remotely, onsite presence will be required during certain phases of projects.
• This Lead role requires 24/7 availability for phone support via pager or mobile phone.
• This role participates in a oneweek oncall rotation once per quarter.

Responsibilities:

• Design, implement, maintain, and monitor all Network infrastructure components - switches, routers, firewalls, load balancers, remote access systems, wireless systems, Internet infrastructure, private line services, low voltage, and carrier services.
• Participate in root cause analysis and recommend product enhancements or other appropriate actions to improve reliability and functionality.
• Provide Tier 3 Network troubleshooting and support at an expert level.
• Design, configure, maintain, and manage network devices to achieve optimal performance and maximum availability.
• Perform automation, customization, and system administration for network infrastructure.
• Collaborate with other IS&T teams and business units on change, contractual requirements, new hardware, and software installations and upgrades to enhance functionality in support of the business.
• Review and provide input on Network contractual agreements.
• Partner with Security; designing and developing the appropriate network structure for Security's needs; design and oversee implementation of Network security architecture.
• Assess security risk and propose solutions for risk mitigation.
• Respond to Audits and Requests for information as applicable.
• Monitor network capacity and design and develop solutions and strategies for necessary architectural changes to accommodate current and future needs.
• Manage network projects across technical infrastructure services, ensuring effective collaboration and timely completion.
• Define network controls and ensure that the appropriate best practices are in place.
• Provide daily work direction and mentorship to Network staff.
• Assess current architecture for gaps and design and recommend and prioritize needed changes.
• Create, maintain, and recommend technical and functional design documentation.