Lead Network Engineer

HealthPartners is currently hiring a Lead Network Engineer. The Lead Network Engineer serves as a subject matter expert across multiple areas of network infrastructure and plays a critical role in the design maintenance and monitoring of the organizations core network environment. This role ensures the reliability security and performance of the network infrastructure that supports enterprisewide connectivity.

The Lead Network Engineer partners closely with the business to help achieve optimal use of the network infrastructure by conducting needs assessments and supporting procurement installation configuration monitoring and ongoing optimization. The role is also responsible for maintaining strong security configuration and integrity practices supporting technical training efforts and leading effective troubleshooting and problem resolution activities.

As a technical leader the Lead Network Engineer provides direction mentorship and guidance to other team members contributing to the overall growth and effectiveness of the network engineering team. This position reports to the Senior Manager Network Infrastructure and works within a collaborative team of sixteen professionals including network engineers and a network architect.

Required Qualifications:

• Bachelors degree in network and security Infrastructure or similar or equivalent work experience
• Twelve (12) years of experience in Network Infrastructure design implementation and maintenance.
• Expertlevel knowledge of networking technologies with advanced troubleshooting experience in complex environments.
• Proven experience with network monitoring (e.g. PRTG) diagnostics and analytics tools in complex environments
• Excellent understanding of all network infrastructure components -switches routers Palo Alto firewalls F5 (LTM GTM and ASM environments) and NetScaler load balancers remote access systems including Palo Alto Global Protect Cisco wireless systems Internet infrastructure private line services including Lumen Wave and E-Access circuits and Comcast WAN circuits low voltage cabling and standards and carrier services
• Experience with Infoblox DNS/DHCP and its configuration.
• Experience with Software Defined Access Methodology Security & Segmentation including Implementation of both macro (virtual networks) and micro (specific user/device) segmentation to secure IoT and user devices.
• Experience with Azure cloud and other cloud services.
• Experience with scripting languages such as Python Bash or TCL
• Experience with and strong security and system infrastructure knowledge
• Excellent with protocol analyzers and protocol data flows
• Proficient at writing technical and business documentation
• Excellent verbal and written communication skills
• Experience with and strong knowledge of multiple operating systems e.g. Windows Linux iOS IOS NXOS ACI etc.
• Experience with providing work direction and mentoring staff.
• Experience with and strong capability for managing major projects and integrating project needs across IS&T groups for a multi-organization company.
• Ability to be on-call 24X7.

Preferred Qualifications:

• Relevant network certifications including Palo Alto PCNSE PCNSA PCCSA; Cisco CCNA CCNP CCDE; Azure Certifications AZ-900 AZ-500 AZ-303/304

Hours/Location:

• M-F; core business hours
• This position offers a hybrid work arrangement. While much of the work may be completed remotely onsite presence will be required during certain phases of projects.
• This Lead role requires 24/7 availability for phone support via pager or mobile phone.
• This role participates in a oneweek oncall rotation once per quarter.

Responsibilities:

• Design implement maintain and monitor all Network infrastructure components - switches routers firewalls load balancers remote access systems wireless systems Internet infrastructure private line services low voltage and carrier services.
• Participate in root cause analysis and recommend product enhancements or other appropriate actions to improve reliability and functionality.
• Provide Tier 3 Network troubleshooting and support at an expert level.
• Design configure maintain and manage network devices to achieve optimal performance and maximum availability.
• Perform automation customization and system administration for network infrastructure.
• Collaborate with other IS&T teams and business units on change contractual requirements new hardware and software installations and upgrades to enhance functionality in support of the business.
• Review and provide input on Network contractual agreements.
• Partner with Security; designing and developing the appropriate network structure for Securitys needs; design and oversee implementation of Network security architecture.
• Assess security risk and propose solutions for risk mitigation.
• Respond to Audits and Requests for information as applicable.
• Monitor network capacity and design and develop solutions and strategies for necessary architectural changes to accommodate current and future needs.
• Manage network projects across technical infrastructure services ensuring effective collaboration and timely completion.
• Define network controls and ensure that the appropriate best practices are in place.
• Provide daily work direction and mentorship to Network staff.
• Assess current architecture for gaps and design and recommend and prioritize needed changes.
• Create maintain and recommend technical and functional design documentation.