Lead Engineer - Network Modernization

Avantor is looking for the Lead Engineer - Network Modernization, reporting to the Manager, Data Network Services at Avantor, is responsible for building, implementing, and supporting enterprise network infrastructure across LAN, WAN, and cloud environments. This role emphasizes translating architectural designs into deployable solutions, validating configurations, and ensuring reliable, secure, and scalable network operations.

Key Responsibilities:

• Translate high-level architecture into detailed, deployable network designs (low-level designs)
• Build, plan, and validate new network configurations and capabilities across LAN, WAN, Wi-Fi, SD-WAN, and cloud environments
• Develop and maintain network diagrams, standards, and reusable design templates
• Contribute to capacity planning and scalability assessments
• Lead implementation of network solutions aligned with enterprise architecture and corporate standards
• Lab-test and pilot new network services, hardware, and policies prior to production rollout
• Execute network upgrades, migrations, and deployments with minimal business disruption
• Coordinate closely with architecture and modernization teams to ensure smooth handoffs
• Troubleshoot complex network performance and connectivity issues across on-prem and remote environments
• Support and optimize remote access solutions including VPN and secure access technologies
• Manage build requests, implementation backlogs, and configuration changes
• Implement network security controls including firewalls, segmentation, and secure connectivity solutions
• Ensure compliance with enterprise security policies and industry standards
• Support vulnerability remediation, audits, and risk mitigation efforts
• Partner with cloud, infrastructure, and security teams to deliver integrated solutions
• Participate in technical design discussions and reviews
• Maintain accurate documentation of configurations, procedures, and standards

Success Metrics:

• Timely completion of network implementation plans
• Successful lab validation and pilot deployments
• Reduction in network-related incidents through proactive improvements
• Number of reusable design templates and standardized configurations developed

Required Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or related field
• 10+ years of experience in network engineering or infrastructure roles.

Technical Expertise:

• Strong understanding of core networking protocols: TCP/IP, DNS, DHCP
• Routing & switching: hands-on experience with OSPF, BGP, and enterprise routing/switching across Cisco and HPE platforms
• WAN technologies: experience with Cisco SD-WAN and traditional WAN architectures
• Wireless networking: experience with Aruba Wireless and enterprise Wi-Fi deployments, wireless surveys, troubleshooting complex wireless-related issues
• Network security: strong knowledge of enterprise security principles including firewalls, segmentation, and access control
• Hands-on experience with security platforms and services such as Palo Alto firewalls, Zscaler (ZIA/ZPA), and secure access solutions
• Cloud networking: hands-on experience designing and implementing AWS VPC and Azure VNet architectures, including subnets, route tables, security groups, peering, NAT gateways, and hybrid connectivity (VPN, Direct Connect, ExpressRoute)
• Experience with secure remote access and zero trust architectures (e.g., ZPA)
• Strong troubleshooting, analytical, and problem-solving skills across complex, distributed network environment

Preferred Qualifications:

• Relevant certifications such as CCNP, CCIE, or equivalent (Routing & Switching, Enterprise, or Security)
• Experience with Cisco SD-WAN design, deployment, and operations in enterprise environments
• Exposure to Zero Trust Network Access (ZTNA) frameworks and secure access solutions (e.g., Zscaler ZIA/ZPA)
• Experience with network automation and scripting using tools such as Python or Ansible
• Familiarity with cloud-native security controls and advanced networking features in AWS and Azure
• Experience supporting large-scale, geographically distributed enterprise networks
• Exposure to load balancers, proxies, or application delivery technologies

Tools & Technologies:

• Networking & Infrastructure: Cisco (routing, switching, SD-WAN), HPE, Juniper
• Wireless: Aruba Wireless solutions, Cisco Wireless
• Security: Palo Alto firewalls, Zscaler (ZIA, ZPA), network segmentation and access control technologies
• Cloud Platforms: AWS (VPC), Azure (VNet), including hybrid connectivity (VPN, Direct Connect, ExpressRoute)
• Remote Access & Zero Trust: VPN technologies, ZTNA solutions
• Automation (optional but preferred): Python, Ansible

Skills

AWS, Azure, Network, SD-WAN