Network Engineer- Security Services

Position Purpose The Network Engineer is the technical co-owner of Baltimore Aircoil Company's global network. This is a hands-on subject matter expert role responsible for the design, implementation, operation, and lifecycle management of all routing, switching, wireless, firewall, and WAN infrastructure across our corporate offices and manufacturing plants. The ideal candidate is a true network generalist who can architect a global solution in the morning, troubleshoot a plant-floor connectivity issue in the afternoon, and harden a firewall configuration before the day ends. They are equally comfortable working independently on long-term projects and collaborating with global teams to keep the business running.

Reports to:

Manager of IT Infrastructure, North America Location:

On-site at Jessup, MD Key Responsibilities Responsibilities include but are not limited to:

• Design, implement, and maintain global network architecture across LAN, WAN, WLAN, and data center environments, with primary stacks built on Cisco (routing, switching, wireless) and Cato Networks (SD-WAN/SASE).
• Serve as the technical lead for all network projects, including site builds, refreshes, migrations, and acquisitions — from initial design through implementation, testing, and documentation.
• Own day-to-day network operations: monitoring, capacity planning, performance tuning, configuration management, patching, and lifecycle management of all network hardware and software.
• Configure and manage firewalls, VPNs, ACLs, and network segmentation (including VLANs and OT/IT separation) to support both connectivity and security requirements.
• Lead network incident response — triage outages, perform root cause analysis, implement permanent fixes, and maintain runbooks and incident playbooks.
• Partner with manufacturing and controls engineering teams to design, deploy, and support Operational Technology (OT) network infrastructure on the plant floor, applying segmentation and reliability best practices appropriate to industrial environments.
• Collaborate with the BAC Global Business Services (GBS) team and global network peers on shared standards, remediation of identified gaps, and adherence to enterprise architecture.
• Support hybrid cloud connectivity, including site-to-cloud and inter-cloud networking for our cloud environments as required.
• Maintain accurate, up-to-date network documentation: diagrams, IP schemas, circuit inventories, configuration backups, and change records.
• Participate in disaster recovery planning, testing, and execution for all network-dependent systems.
• Contribute to internal and Amsted-driven audit and compliance activities by providing evidence, remediating findings, and maintaining controls within the network domain.
• Mentor junior IT staff and provide technical guidance on networking topics across the broader infrastructure team. Required Qualifications

•...