Network Engineer

Bank of Bird-in-Hand is built on integrity, excellence, and teamwork. When you join the Bank of Bird-in-Hand team, you'll be appreciated and celebrated for who you are every day. Bank of Bird-in-Hand is actively seeking a Network Engineer to join our team in Paradise. This role is responsible for the reliable, secure, and efficient operation of the Bank's wired, wireless, and wide area network infrastructure. This hands-on role configures, maintains, monitors, and troubleshoots network technologies across the data center, branch offices, administrative locations, and mobile banking environments. The position supports Fortinet firewalls and security services, Aruba switching and wireless platforms, internet and private network connectivity, VPN services, routing, segmentation, and related monitoring tools. This is a wonderful opportunity to join a community bank and make an impact in the local area! Responsibilities: 1. Configure, administer, monitor, and maintain the Bank's local area, wide area, wireless, internet, and virtual private network infrastructure across data center, branch, administrative, and mobile locations. 2. Administer next generation firewalls and related security services, including access policies, NAT, routing, VPN tunnels, firmware updates, configuration backups, logging, and availability monitoring. 3. Configure and support switches and wireless access points, including VLANs, link aggregation, spanning tree, PoE, secure wireless networks, and device lifecycle maintenance. 4. Monitor network availability, utilization, performance, and capacity; investigate alerts and trends and implement corrective actions before they affect business operations. 5. Troubleshoot and resolve complex network connectivity, latency, packet loss, routing, switching, wireless, DNS, DHCP, VPN, and carrier-related issues. 6. Serve as an escalation resource for network incidents and participate in major incident response, service restoration, root cause analysis, and corrective action planning. 7. Implement approved network designs, standards, security controls, and configuration baselines in partnership with the Systems Architect, Information Security, and other engineering resources. 8. Plan and execute network installations, upgrades, replacements, migrations, and maintenance activities with appropriate testing, change control, rollback planning, and post-implementation validation. 9. Coordinate with telecommunications carriers, managed service providers, equipment vendors, and technology partners to resolve service issues and deliver network changes. 10. Maintain accurate network diagrams, configurations, IP address assignments, circuit records, device inventories, support procedures, and recovery documentation. 11. Support network segmentation, secure connectivity, and access controls for business systems, third-party services, voice, wireless, and other technology platforms. 12. Perform periodic reviews of firewall rules, device configurations, firmware levels, support status, capacity, and network resiliency; document findings and complete assigned remediation activities. 13. Participate in disaster recovery and business continuity exercises by validating network dependencies, alternate connectivity, recovery procedures, and communications paths. 14. Provide technical support for projects and operational initiatives, share knowledge with IT staff, and participate in an on-call rotation and scheduled after-hours maintenance as required. 15. Perform other duties as required. Education and Experience: 1. Bachelor's degree in Information Technology, Computer Science, Information Systems, or a related technical discipline; equivalent combination of education, training, and relevant experience may be considered. 2. Minimum five (5) years of hands-on experience supporting enterprise network infrastructure in a multi-site environment. 3. Practical experience administering next gen ration firewalls, including policies, site-to-site and remote-access VPNs, routing, firmware maintenance, troubleshooting, and security services. 4. Practical experience configuring and supporting switches and wireless access points, including VLANs, trunking, link aggregation, spanning tree, PoE, SSIDs, authentication, and wireless troubleshooting. 5. Strong working knowledge of TCP/IP, IPv4 subnetting, DNS, DHCP, NAT, VLANs, VPNs, QoS, switching, routing, and common network diagnostic tools. 6. Experience supporting WAN and internet connectivity, carrier circuits, branch networks, network monitoring, configuration backup, performance analysis, and incident troubleshooting. 7. Ability to create and maintain accurate network diagrams, device inventories, configuration standards, implementation plans, and support procedures. 8. Experience in financial and/or banking sector, and familiarity with core systems, such as Jack Henry, is strongly desired. Here at Bank of Bird-in-Hand, we have a comprehensive benefit package for those who qualify. Below are the range of benefits we offer to meet the needs of our employees: 1. Competitive Medical, Dental, Vision Coverage 2. 401(k) Retirement Plan with 4% Match 3. Company Paid Life, STD, and LTD 4. Health Savings Account (HSA) & Flexible Spending Account (FSA) options 5. Paid Time Off (PTO), Volunteer Time Off (VTO), and Birthday PTO 6. 12 Paid Holidays 7. Tuition Reimbursement 8. Company Events and Picnics Equal Opportunity Employer The employment policy of Bank of Bird-in-Hand is to provide equal opportunity to all persons. No employee or applicant for employment will be discriminated against because of race, color, religion, creed, sex, pregnancy, national origin, ancestry, age, physical or mental disability, genetic information, military, and/or veteran status, or any other Federal or State legally protected classes.