Sr. Network & Infrastructure Engineer - US

About the role

At Kids2, we're really good at what we do. And when we're great at our jobs, we help parents be great at their jobs.

Parenting is demanding, and that's where we come in. We want to reimagine how brands can make it easier for early stage parents - not by just selling them products, but by providing holistic solutions that transcend borders, categories and aisles.

No matter our title or department, at Kids2, our job is to create more tiny wins for parents, so they can create bright futures for their little ones. That's a big task!

We're serious about what we do, AND we love to have fun. Our team is hardworking, entrepreneurial, and passionate about helping families create millions, if not billions of tiny wins.

Summary

The Senior Network & Infrastructure Engineer owns the network that connects Kids2's US offices, the Suwanee data center, Azure, Hong Kong, mainland China and Mexico. This is a senior, hands-on role on a small Global IT team, owning network architecture and the roadmap as well as firewalls, WAN and site-to-site tunnels, remote access VPN, and Meraki wired and wireless networks.

Primary Responsibilities and Essential Functions

• Own the network architecture, design standards and roadmap across all sites.
• Lead network projects such as China connectivity and WAN and firewall refreshes, from design through cutover.
• Manage carriers and network vendors, and give input on the network budget.
• Administer FortiGate and Cisco ASA/FTD (FMC) firewalls, including rules, policies, upgrades and change requests.
• Review firewall rules and logs, and keep configurations backed up and documented.
• Operate the IPsec tunnels and carrier-managed WAN (DTNaaS) between the US, Azure, Hong Kong and China.
• Troubleshoot tunnel, routing and circuit issues, and work with carriers on outages and changes.
• Own Cisco Secure Client and Meraki client VPN, including configuration, client deployment, upgrades and user issues.
• Administer Cisco Meraki MX, MS and MR across all sites, including SSIDs, VLANs, switching, alerts and inventory.
• Operate certificate-based Wi-Fi (SCEPman, RADIUS/NPS) and work with the endpoint team on the device profiles that deliver certificates.
• Plan and lead office network buildouts and moves with the manager and regional IT staff.
• Renew public and internal certificates, including SAP system certificates.
• Manage internal and external DNS.
• Submit changes through Jira Service Management, review other network changes before they go through, and write runbooks for every system owned.
• Serve as the final technical escalation point for network issues.
• Mentor the help desk and regional IT staff on network work.
• Take part in after-hours maintenance windows across US and Asia business hours.

Qualifications & Experience

• 7 or more years of network engineering experience in a multi-site company.
• Production experience administering FortiGate or Cisco firewalls, site-to-site IPsec VPN and WAN routing.
• Experience with Cisco Meraki (MX, MS and MR) and remote access VPN such as Cisco Secure Client.
• Experience with network connectivity into mainland China and Azure networking.
• Experience leading network projects and managing carriers and vendors is preferred.

Education & Skills

• Education: Bachelor's degree in Information Technology, Computer Science or a related field, or equivalent experience.
• Certificate lifecycle and DNS administration; 802.1X wireless with RADIUS and certificate-based authentication.
• Clear written documentation and the ability to work with regional IT staff across time zones.

Certificates, Licenses, Registrations

• CCNP, Fortinet NSE 6 or NSE 7 preferred.

Computer/technical Skills

• Must be proficient with FortiGate, Cisco ASA/FTD and FMC, Cisco Meraki, Cisco Secure Client and IPsec VPN. Working knowledge of RADIUS/NPS, SCEPman, DNS, Azure networking, Jira Service Management, and PowerShell or Python for network tasks.

Physical Demands

• While performing the duties of this job, the team member is regularly required to talk or hear.
• The team member frequently is required to sit; have flexible use of hands; reach with hands and arms; and stoop, kneel, crouch, or crawl.
• The team member is occasionally required to stand and walk.
• The team member must regularly lift and/or move up to 10 pounds and occasionally lift and/or move up to 50 pounds, including racking network hardware.
• Specific vision abilities required by this job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus.

Work Environment

• General office environment in Atlanta, GA (hybrid)
• Regular on-site work at the Suwanee data center
• After-hours maintenance windows across US and Asia business hours

Pay and benefits

We offer competitive pay, flexible hours, and generous benefits. Plus, to keep things fun (because we are all kids at heart), we offer a host of team member activities and philanthropic efforts throughout the year and company-wide awards and recognition for a job well done!

Drug Free Workplace M/F/D/V