Network Engineer

Position Summary:

We are seeking a strong, hands-on Network Engineer to join our IT infrastructure team. Reporting to the Senior Network Engineer, this role owns the day-to-day operation, maintenance, and improvement of the company's network, firewall, and connectivity infrastructure across on-premises data centers and a growing Microsoft Azure environment, including the Cisco compute fabric, NetApp storage networking, and Palo Alto security platforms that support it. The ideal candidate is a deeply technical engineer with strong fundamentals, disciplined troubleshooting, and excellent documentation.

Work Location:
This is a full-time, in-person position based at our Boca Raton, Florida office. Remote and hybrid work arrangements are not available for this role.

Technical Environment:

• Security: Palo Alto Networks next-generation firewalls (PAN-OS) across on-premises data centers and Azure, GlobalProtect VPN, Cloudflare, and Zero Trust / network access control.
• Switching and compute fabric: Cisco Catalyst campus switching and Cisco Nexus (NX-OS) data-center switching; Cisco UCS X-Series (chassis, Fabric Interconnects, Intersight).
• Routing and WAN: BGP, OSPF, and EIGRP across a multi-site WAN (MPLS / DIA circuits) with site-to-site IPSec VPN.
• Storage networking: NetApp ONTAP (FAS / AFF) with SnapMirror replication; Tintri.
• Cloud: a substantial and growing Microsoft Azure networking footprint (hub-and-spoke VNets, peering, VPN Gateway, Azure Firewall, NSGs, and user-defined routes).
• Wireless and monitoring: UniFi wireless; Site24x7 monitoring.

Key Responsibilities:

• Operate, maintain, and monitor enterprise LAN, WAN, and UniFi wireless infrastructure across multiple sites.
• Administer Palo Alto Networks firewalls (PAN-OS), including security policy, NAT, threat prevention, URL filtering, and GlobalProtect VPN; tune App-ID and SSL / TLS decryption.
• Design, implement, and support Microsoft Azure networking, including hub-and-spoke VNets, peering, VPN Gateway, Azure Firewall, NSGs, and user-defined routes.
• Configure and troubleshoot routing and switching (BGP, OSPF, EIGRP) across Cisco Catalyst and Cisco Nexus (NX-OS) switches and the Cisco UCS X-Series Fabric Interconnect environment in a multi-site network.
• Build and maintain site-to-site IPSec VPN connectivity with business partners and vendors.
• Support NetApp ONTAP storage networking and replication.
• Administer network monitoring platforms; maintain alerting, dashboards, NetFlow, and device-health visibility.
• Administer and support network security applications and Zero Trust / network access control.
• Respond to network alerts and incidents; perform root-cause analysis and permanent remediation.
• Participate in planned maintenance windows, including change preparation, verification, and rollback procedures.
• Create and maintain network documentation, diagrams, IP address management (IPAM), and runbooks.
• Install, rack, and cable network hardware; support equipment lifecycle and refresh projects.
• Assist with network security tasks, including certificate management, vulnerability remediation, and access reviews.
• Participate in an on-call rotation.

Why Windward Risk Managers:

• Windward Risk Managers is proud to be recognized on Fortune's 2026 Best Medium Workplaces list, ranking #28 among the Top 100 companies
• 100% employer paid health insurance for employees
• Up to 6% 401(k) match with immediate vesting
• Long-term and short-term disability insurance
• 3 weeks PTO to start + generous paid holidays
• Tuition reimbursement and continuing education support
• Collaborative and growth focused culture