Network Engineer

About the role
We’re looking for a mid-level network engineer to design, deploy, and support wireless and wired networks across our locations. This is a hands-on role — you’ll be surveying sites, mounting and configuring APs, terminating cable, and building the VLAN and firewall policy behind it all.
What you’ll do
• Design and deploy wireless networks: AP placement, channel and power planning, SSID and band steering configuration
• Perform site surveys and spectrum analysis to identify interference, coverage gaps, and capacity problems
• Build and maintain UniFi networks end to end — controller, gateways, switches, and access points
• Design VLAN segmentation and inter-VLAN routing; separate corporate, guest, IoT, and management traffic
• Configure and manage PoE switching, including power budgeting and port profiles
• Stand up guest WiFi and hotspot portals with captive portal authentication, vouchers, bandwidth limits, and content filtering
• Manage DHCP, DNS, NAT, and firewall rules
• Run structured cabling projects and coordinate with low-voltage contractors
• Monitor network health, respond to outages, and troubleshoot client connectivity issues
• Document configurations, IP schemas, and network diagrams and keep them current
• Support ISP circuit provisioning, escalations, and vendor relationships
What we’re looking for
• 3–6 years of hands-on network engineering experience
• Strong wireless fundamentals: 802.11 standards, RF behavior, channel width tradeoffs, roaming, and client troubleshooting
• Practical experience with spectrum analysis and survey tools (Ekahau, Hamina, NetSpot, or similar)
• Solid grasp of VLANs, trunking, routing, DHCP, DNS, NAT, and firewall policy
• Direct experience with Ubiquiti UniFi in production
• Experience with PoE switching and power planning
• Comfortable with captive portal / hotspot configuration and guest network design
• Able to terminate and test cable, mount hardware, and work from a ladder
• Clear documentation habits and good communication with non-technical users
Nice to have
• Other platforms: Meraki, Aruba, Omada, Ruckus, MikroTik
• RADIUS / 802.1X and WPA2/WPA3-Enterprise
• VPN and site-to-site tunneling
• Monitoring and alerting tooling
• Scripting or automation (Python, Ansible, vendor APIs)
• Certifications: CWNA, CCNA, UBWA/UEWA, or equivalent
Physical requirements
• Ability to work on ladders, and access ceilings, closets, and equipment rooms
• Occasional after-hours work to avoid business disruption