Network Engineer

Founded in 1898 Mutual of Enumclaw is a people-first insurer rooted in community recognized as Washingtons Best Company to Work For for the 13th consecutive year and proudly serving individuals families farms and businesses through local independent agents across the West.

The IT Infrastructure Network Engineer is responsible for the implementation maintenance and support of MoEs enterprise network environment. Working under the guidance of senior engineers and IT leadership this role helps operate and maintain our core network infrastructure including Palo Alto next-generation firewalls Aruba switching and wireless and Palo Alto Strata Cloud SASE/VPN while also supporting cloud network connectivity across Azure and AWS environments.

The Network Engineer collaborates with peers and stakeholders supports infrastructure roadmap initiatives and continues building subject matter expertise across network security cloud connectivity and infrastructure modernization initiatives. This role requires someone who is comfortable working in the CLI and following the change management process and who is eager to grow those skills over time.

Location: The successful candidate will work on-site at our Home Offices in the Greater Seattle area. Candidates must live within driving distance of our Home Offices.

Hiring Range:$116300 - $130900*

Salary Range: $116300 - $145200

Candidates with more experience may be considered for a Sr. Network Engineer position. Compensation and position will be commensurate with experience.

Sr. Network Engineer

Hiring Range: $161700 - $182300*

Salary Range: $161700 - $196300

*The hiring range represents Mutual of Enumclaws current hiring pay scale for this role. Mutual of Enumclaw reserves the right to modify or update this range any time. Exact compensation may vary based on skills and experience. Compensation is only one part of our entire total rewards package. To see some of the benefits and perks we offer please click here.

• Design implement and maintain enterprise network infrastructure including firewalls switching wireless and WAN/SD-WAN/SASE solutions.
• Support and operate the Palo Alto firewall environment including policy management threat prevention URL filtering and ongoing tuning.
• Administer Aruba switching (CX/AOS-CX) and wireless infrastructure (Aruba Access Points Aruba Central) across corporate and branch locations.
• Support and help optimize the Palo Alto Strata Cloud SASE platform for secure remote access branch connectivity and cloud-delivered security services.
• Support and maintain remaining Cisco switching infrastructure during active transition to Aruba.
• Support cloud network connectivity including Azure Virtual Networks (VNets) Azure ExpressRoute/VPN Gateway AWS VPCs Transit Gateway and Direct Connect.
• Participate in network-related projects from design through implementation and documentation under the guidance of senior engineers of the IT Security & Network Manager.
• Proactively identify and address network security risks; contribute to the broader security program through network segmentation lateral movement controls and access policy enforcement.
• Develop and maintain network documentation including topology diagrams runbooks change records and standard operating procedures.
• Provide on-call support and participate in incident response for network-related events.
• Collaborate with the security team on firewall policy reviews network access controls and compliance-related network configurations.
• Stay current on emerging technologies and share recommendations aligned with senior engineers and IT leadership.
• Participate in knowledge sharing and collaborative problem-solving across the infrastructure team.

Required Skills/Abilities:

• Solid hands-on experience with Palo Alto Networks firewalls (PAN-OS Panorama policy management threat profiles).
• Strong experience with Aruba switching (AOS-CX preferred) and Aruba wireless infrastructure; familiarity with Aruba Central for centralized management.
• Working knowledge of enterprise routing and switching: BGP OSPF VLAN design STP QoS and related protocols.
• Hands-on experience with Palo Alto Strata Cloud (SASE Prisma Access GlobalProtect) for VPN and cloud-delivered security.
• Solid understanding of network security principles: zero trust architecture network segmentation micro-segmentation and lateral movement prevention.
• Experience with cloud network connectivity: Azure VNets VPN Gateway ExpressRoute NSGs; AWS VPCs Transit Gateway Direct Connect.
• Ability to prioritize competing demands and see projects through from design to completion with guidance from senior team members as needed.
• Strong written and verbal communication skills; able to present technical topics clearly to both technical peers and non-technical leadership.
• Strong troubleshooting skills: systematic thorough and calm under pressure.
• Solid documentation habits and attention to detail.
• Familiarity with Cisco IOS/NX-OS for legacy switch management during transition.
• Scripting or automation experience (PowerShell Python Bash Ansible) is a plus.

Education and Experience:

• 35 years of relevant enterprise networking experience; BS in a STEM field preferred or equivalent practical experience.
• Hands-on experience managing enterprise-class network environments in a production setting.
• Proven experience with Palo Alto firewall platforms in production environments required.
• Proven experience with Aruba switching and wireless infrastructure required.
• Experience with Palo Alto Strata Cloud / Prisma Access / SASE platforms preferred.
• 12 years of cloud networking experience with Azure and/or AWS a plus.
• Relevant certifications preferred:
  • Palo Alto: PCNSA (Palo Alto Networks Certified Network Security Administrator); PCNSE a plus.
  • Aruba: ACCA ACCP or equivalent HPE Aruba certification.
  • Cisco: CCNA (legacy environment familiarity).
  • Cloud: AZ-700 (Azure Network Engineer Associate) or equivalent AWS networking certification.
  • Familiarity with enterprise DR/BCP network design and failover configurations.
  • Familiarity with network monitoring and logging tools; experience integrating network data into SIEM platforms (e.g Splunk) is a plus.

Physical Requirements:

• Prolonged periods of sitting at a desk and working on a computer including video conferencing.
• Occasional Data Center or Network Closet work.
• Must be able to lift up to 15 pounds.