Senior Network Engineer

CCOB Mission Statement:

"As dedicated stewards of Broomfield, our community-focused team delivers meaningful and impactful services and support." The City and County of Broomfield IT Department's purpose is to strengthen trusted partnerships with our community that guide innovative, secure, and sustainable technology solutions. Do you want to be part of a high-achieving IT team? The IT team at the City and County of Broomfield is a tight-knit group and we're passionate about what we do. We are seeking a Senior Network Engineer who defines excellence through strategic planning and technical precision. You will serve as the final authority on complex escalations and the primary architect for our hybrid-cloud transition. If you are passionate about designing zero-trust segmentation, optimizing high-speed connectivity for a growing community, and mentoring a collaborative team toward enterprise-standard success, our search has you in mind. We need a leader who doesn't just manage infrastructure but owns the roadmap, ensuring our city remains connected, secure, and ready for the future.

About Us:

The IT department is made up of 42 staff in 6 divisions (GIS, DevOps, Customer Success, Project Management, Cybersecurity, and Administration) and is responsible for guiding and governing City and County technology focused on business solutions, reliability, innovations, and customer satisfaction. The department is responsible for providing: Strong leadership and vision to support the technology goals and objectives of a diverse, growing community based on solid partnerships with departments Reliable and secure infrastructure Responsive and knowledgeable support for business and enterprise technology systems, network services, and desktop support services Protection of the confidentiality and preservation of the integrity of the City's data Robust and scalable telecommunications systems Robust GIS environment that allows users to organize, visualize, and analyze different layers of data The IT leadership team fosters and encourages employee development and growth; offers a flexible, hybrid work schedule; provides a cooperative, collaborative, and FUN team environment; and appreciates and celebrates the team's accomplishments.

Senior Network Engineer Position Total Compensation Package Salary Range:

$111,300

• $150,571/ annually Free Recreation Center Pass (Gym & Pool) 19 days paid vacation + 10 sick days + 12 holidays per year Medical, dental, & vision insurance 6% employer retirement match Wellness discount on insurance premiums available

Who We're Looking For:

We need a Senior-level Network professional who is equal parts technical powerhouse and strategic planner.

The ideal candidate is:

A Strategic Architect:

You look ahead, planning the hardware and software lifecycles that will shape the future of our city and county network.

A Security & Performance Champion:

You are relentless about optimizing network health, hardening security, and ensuring bulletproof resiliency.

The Ultimate Problem Solver:

You are the final stop for complex technical escalations. You don't just fix the immediate issue; you find the root cause and design long-term solutions so it never happens again.

A Process Pioneer:

You enjoy laying down the framework for success by contributing to key policies, procedures, and enterprise standards. Provides expert technical services, security, and lifecycle management for a high-resiliency enterprise network standardized on Extreme Networks (Fabric Connect/SPB) and Palo Alto Networks (Next-Generation Firewalls) .

This includes:

Connectivity support to internal, regional, and multi-cloud solutions, ensuring high-speed access to Google Cloud (GCP), AWS, and Azure Configuration, installation, and lifecycle management of Extreme Networks switching/wireless assets and Palo Alto Next-Generation Firewalls (NGFW) Configuration and management of Palo Alto GlobalProtect remote access, site-to-site VPNs, and

SD-WAN/MPLS

edge solutions. Architecture and management of a hybrid-cloud environment, leading the strategic migration of primary data center assets from a legacy colocation facility to GCP-native services . Management and optimization of VMware NSX to support persistent on-premises data center capabilities required for SCADA and high-availability operational technology (OT) environments. Expert configuration of Extreme Fabric Connect (SPB) , BGP, OSPF, and high-availability protocols including SMLT and Multi-Chassis Link Aggregation . Strategic design and management of outside plant (OSP) fiber resources in close collaboration with the Outside Plant Manager to expand city-wide connectivity. Proactive response and resolution of system alerts, utilizing automation to minimize mean time to resolution (MTTR). Design, implementation, and operational support of fabric-based networking architectures, including technologies such as Extreme Fabric Connect, VXLAN/EVPN, or comparable network virtualization and segmentation platforms. Design and maintain hardened segmentation strategies for SCADA and OT environments, ensuring Zero Trust via Palo Alto policy enforcement and VMware NSX micro-segmentation. Analyzes, plans, coordinates, and implements network design changes and enhancements to improve and/or expand network services to the city/county as well as commercial and residential patrons as appropriate. Establishes and maintains a network architecture suited for the city/county services. Supports periodic and focused network assessments related to security, performance, or capacity. Participates in discussions, prepares plans, and coordinates implementation of changes to address findings or recommended enhancements. Collaborates with peers, management, and vendors to provide comprehensive network capabilities to meet the demands for connectivity to static and mobile computing technologies. Leads the technical planning and execution of large-scale infrastructure migrations, focusing on the modernization of off-site data center assets into a highly resilient, cloud-forward architecture. Develops city/county-wide relationships with senior technical, functional and departmental leaders to set long-term security strategies and to assess and act on short-term objectives and needs. Own and evolve the long-term enterprise network architecture roadmap in alignment with organizational growth, resiliency objectives, and security strategy. Education Bachelor's Degree from an accredited college or university in Computer Science, Computer Information Systems, or related field

• required CCNP (Cisco Certified Network Professional), or other network professional certification/accreditation
• preferred ITIL Foundation certification
• preferred Experience 6 years of progressive experience in network engineering
• required 3 years experience in a Senior or Lead capacity managing complex, multi-site enterprise environments
• required Preferred Applicant Traits and Skills Expert knowledge of Extreme Networks wired and wireless architectures, specifically Fabric Connect (SPB) and XIQ-Site Engine.

Expert knowledge of Palo Alto Next-Generation Firewalls (NGFW), including GlobalProtect, Panorama management, and User-ID/App-ID policies. Years of related experience may be substituted for required education, however education cannot be substituted for the necessary work experience. Candidates must meet the minimum required years of work experience.

NECESSARY SPECIAL REQUIREMENTS

(in addition to above requirements): New hires must, as a condition of employment, pass the following pre-offer and post-offer/hire processes: in-person or virtual interviews, reference checks, and background checks, which may include local police check and sex-offender registry. If this position is required to drive a CCOB vehicle a DMV check will be required Must possess and maintain a valid driver's license and safe driving record for continued employment. Fingerprint checks through CBI/FBI required. (The work environment characteristics and physical demands described here are representative of those an employee encounters while performing the essential functions of the job. Reasonable accommodation may be made to enable individuals with disabilities and neuro-differences to perform the essential functions.) Work is generally scheduled Monday

• Friday.

Work involves on-call duty which requires working weekends on a rotating basis and working all hours during emergencies as needed. Work is performed at City/County work locations with the ability to perform some duties remotely in accordance with Broomfield's remote work policy. Work is generally scheduled Monday through Friday with some weekend and holiday work required. Some evening and weekend hours.