The Role
Lead design, deployment, and operations of enterprise and hybrid Azure networks across multiple sites. Maintain LAN/WAN/MPLS/BGP/OSPF, FortiGate firewalls, SD‑WAN/SASE, ExpressRoute/VPN connectivity, DR networking in Azure and on‑prem, network security/segmentation, observability (NetFlow/SNMP), and infrastructure lifecycle activities while supporting 24×7 operations and cloud migration projects.
Summary Generated by Built In
JOB PURPOSE
Reporting to the Director, IT Operations, the Senior Network and Cloud Specialist is a technical subject matter expert who owns, stabilizes and evolves our enterprise and plant-floor networks across multiple sites. This role requires advanced knowledge of enterprise networking protocols (MPLS, BGP, OSPF, ACLs, SD‑WAN/SASE), Azure network architecture (VNets, ExpressRoute, vWAN, private endpoints), and hybrid cloud connectivity. The successful candidate will also lead the technical design and buildout of the organization’s Disaster Recovery (DR) network environment, ensuring secure, resilient, and scalable hybrid infrastructure. The candidate will balance hands-on operations with architecture-level recommendations, ensuring uptime for 24×7 production while laying the groundwork for Zero Trust, SD‑WAN, and Cloud connectivity.
KEY DUTIES AND RESPONSIBILITIES
Hybrid Network Architecture & Operations
Network Security
Reporting to the Director, IT Operations, the Senior Network and Cloud Specialist is a technical subject matter expert who owns, stabilizes and evolves our enterprise and plant-floor networks across multiple sites. This role requires advanced knowledge of enterprise networking protocols (MPLS, BGP, OSPF, ACLs, SD‑WAN/SASE), Azure network architecture (VNets, ExpressRoute, vWAN, private endpoints), and hybrid cloud connectivity. The successful candidate will also lead the technical design and buildout of the organization’s Disaster Recovery (DR) network environment, ensuring secure, resilient, and scalable hybrid infrastructure. The candidate will balance hands-on operations with architecture-level recommendations, ensuring uptime for 24×7 production while laying the groundwork for Zero Trust, SD‑WAN, and Cloud connectivity.
KEY DUTIES AND RESPONSIBILITIES
Hybrid Network Architecture & Operations
- Oversee both on-premises and cloud environments networking, ensuring systems are secure, reliable, and scalable for office, warehouse and production areas.
- Design, deploy, and maintain on‑prem enterprise networks including LAN, WAN, MPLS, BGP, OSPF, VLANs, QoS, VPN, routing, switching.
- Configure and support FortiGate firewalls, SD‑WAN/SASE solutions, IPS/IDS, and network segmentation
- Manage Azure networking components VNets, vWAN, VNet peering, NSGs/ASGs, Private Endpoints, Load Balancers, UDRs.
- Investigate and troubleshoot issues with various network hardware, including firewalls, switches, APs, routers, and servers.
- Support hybrid connectivity technologies including ExpressRoute, Site‑to‑Site VPN, Private Link.
- Monitor network health, performance, and capacity using enterprise monitoring tools.
- Maintain high availability with redundant core/distribution, HA firewalls, and resilient links.
- Troubleshoot complex issues across cloud and on Prem hybrid architectures.
Network Security
- Administer NextGen firewalls, IPS/IDS, Web/App filtering, SSL inspection where appropriate.
- Lead network segmentation/micro‑segmentation, NAC (802.1X/MAB), and Zero Trust access patterns for users, devices, and other IT assets.
- Enforce policy-as-code where possible; coordinate with SOC/SIEM for monitoring, alerting, and incident response.
- Optimize M365/Azure connectivity (ExpressRoute/Direct Connect, private endpoints, split tunneling).
- Support SASE/CASB integrations with identity‑driven controls.
- Support Azure infrastructure components including IaaS workloads, storage access, identity integration, and network security policies.
- Acts as SME for major IT infrastructure projects, including cloud migrations (Azure), efficiency improvements and modernization initiatives.
- Collaborate on cloud modernization initiatives and infrastructure migrations.
- Lead the technical design and setup of Mevotech’s DR network environment
- Build and maintain DR failover networking in Azure and on Prem environments
- Conduct DR testing, network failover simulation, and system recovery validation
- Own network observability: NetFlow/sFlow, SNMP traps, telemetry, synthetic tests; establish SLOs and runbooks.
- Ensure smooth operations of complex server backups and monitoring software, oversee the IT Disaster Recovery plan, and manage and test the IT Disaster Recovery strategy.
- Lead the migration of workloads between environments and manages upgrades, backups, and disaster recovery strategies.
- Ensure the criticality of IT operations in a 24/7 environment is maintained while introducing innovative solutions to enhance platform stability, performance, and scalability.
- Support lifecycle planning, upgrades, patching, system migrations, and backup operations
- Provide advanced technical escalation for major incidents
- Collaborate with other IT teams on architecture reviews, security initiatives, and infrastructure modernization.
- Manage upgrading and tuning servers, VMs, routers, firewalls, switches, and cloud infrastructure as needed.
- Assist with vendor coordination and solution evaluation for network and security technologies
- Maintain detailed documentation for network topology, firewall rules, routing tables, Azure configurations, and DR procedures.
- Establish and maintain operational standards and best technical practices.
- Other duties as required
- Lead network refreshes (switching, firewalls, Wi‑Fi), telco carrier changes, and new site stand‑ups.
- Manage MSPs and OEMs, evaluate solutions, assist negotiate renewals, and drive root-cause problem management.
- Education: Bachelor's degree in Computer Science, Information Systems, or equivalent professional experience
- 7+ years of proven enterprise networking experience as SME.
- Experience supporting hybrid infrastructure environments
- Expert knowledge in BGP, OSPF, MPLS, VPN, SD‑WAN/SASE, Firewall configuration (FortiGate preferred), ACLs, NAT, segmentation, routing policies
- Deep technical expertise in Azure networking including VNets, vWAN, private endpoints, load balancers, Azure Firewall, ExpressRoute.
- Experience using automation tools such as PowerShell, Python, or Terraform (asset)
- Experienced with backup and restoration, high availability and disaster recovery design and testing procedures
- Strong IP sub-netting and IP management skills and thorough knowledge of public/private IP addressing management and network address translation.
- Strong leadership and communication skills
- Microsoft certification AZ-104 is required, other technical certifications (Fortinet NSE, AZ-700, MCSE, ITIL) are preferred.
- The physical demands and working conditions for this role may vary depending on the specific tasks and responsibilities assigned, it may include but not limited to sitting, standing and walking, lifting and carrying, dexterity and mobility, work in a typical office environment with controlled temperature and lighting conditions. However, they may also need to work in data centers, server rooms, or other IT infrastructure locations
- The work schedule may vary depending on business needs, project deadlines, and operational requirements. This may include regular office hours, as well as occasional evenings, weekends, or on-call responsibilities to address emergencies or system maintenance activities
- Standard office setting
- 4 days on site/week
- Occasional evening and weekend work to meet deadlines
- On-call availability
- Fast-paced office environment
Skills Required
- Bachelor's degree in Computer Science, Information Systems, or equivalent experience
- 7+ years enterprise networking experience
- Experience supporting hybrid infrastructure environments (on‑prem and cloud)
- Expert knowledge of BGP, OSPF, MPLS, VLANs, QoS, ACLs, NAT, routing and switching
- Firewall configuration and management (NextGen firewalls); FortiGate preferred
- Deep Azure networking expertise (VNets, vWAN, VNet peering, NSGs/ASGs, private endpoints, load balancers, Azure Firewall, UDRs)
- Experience with ExpressRoute, Site‑to‑Site VPN, Private Link/Private Endpoints
- Disaster recovery and high availability design, testing, and DR failover networking experience
- Network security skills: IPS/IDS, SSL inspection, Web/App filtering, NAC (802.1X/MAB), segmentation/Zero Trust
- Experience with network observability and monitoring (NetFlow, sFlow, SNMP, telemetry, synthetic tests)
- Automation experience using PowerShell, Python, or Terraform
- Strong IP subnetting and IP address management skills
- Microsoft AZ-104 certification
- Other technical certifications (Fortinet NSE, AZ-700, MCSE, ITIL)
- Strong leadership and communication skills; ability to provide advanced incident escalation
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Mevotech is a North American leader in the automotive aftermarket industry, specializing in the engineering, design, and manufacturing of high-performance chassis, steering, suspension, driveline, and braking parts. Since 1982, the company has been dedicated to providing innovative products and advanced technology to help technicians make the best auto part decisions, ensuring superior product performance, engineering excellence, and industry-leading support for technicians across the continent.
