Senior Network Engineer

Position Title: Senior Network Engineer Location: Indianapolis, IN Starting Pay for position: $100K - $130K per year, depending on qualifications and experience. JOIN OUR TEAM! About Herff Jones: Indianapolis-based Herff Jones is the leading provider of graduation and educational products and services designed to inspire achievement and create memorable experiences for students.

Herff Jones’ products include class rings and jewelry, caps and gowns, diplomas and announcements as well as motivation and recognition programs. Focused on building long-term relationships through a nationwide network of over 1,400 employees and sales partners, the professionals at Herff Jones have been helping elevate the student experience throughout the lifelong journey of education for more than 100 years.

For more information about Herff Jones, please visit www.herffjones.com . Your Opportunity: The Herff Jones IT Team is seeking a Senior Network Engineer to join our Infrastructure Services team. This role is the senior technical owner of the enterprise network across our multi-site, datacenter, and cloud environments: the person who designs it, keeps it resilient and secure, and drives it forward.

The Senior Network Engineer partners closely with the Security, Systems, and Cloud Engineering teams and serves as the top escalation point for network issues.

Key Responsibilities

Network Architecture & Engineering Design, implement, and maintain LAN, WAN, wireless, and datacenter networks across multiple sites, including routing, switching, SD-WAN, and remote access. Design and maintain secure hybrid connectivity between on-premises sites and public cloud environments. Identify and eliminate single points of failure and capacity constraints to improve network resiliency and scalability.

Develop and maintain network standards, reference designs, and documentation, including diagrams, IP address management, and configuration baselines. Contribute to the multi-year infrastructure roadmap for the network domain. Network Security & Segmentation Manage firewall policy, network access controls, and segmentation, including IT/OT segmentation, in partnership with the Security team.

Conduct periodic firewall rule and access reviews to reduce unnecessary exposure and lateral movement risk. Maintain firmware lifecycle, patching, and configuration hygiene across network devices, and remediate identified vulnerabilities. Support annual network risk assessments, PCI DSS requirements, and audit readiness with accurate documentation and evidence.

Network Operations & Incident Response Serve as the senior escalation point for network incidents; lead troubleshooting and root cause analysis for Priority 1–2 issues. Implement and tune network monitoring and alerting for availability, performance, and capacity. Plan and execute network changes and maintenance windows, with rollback plans, following the Change Management process.

Participate in an on-call rotation for after-hours support. Automation & Vendor Management Automate configuration management, backups, and compliance checks using scripting and infrastructure-as-code practices. Manage relationships with carriers and network vendors, ensuring services and deliverables align with internal architectural standards.

Support budget planning, hardware lifecycle forecasting, and circuit management. Mentor engineers and support staff and contribute to cross-training and knowledge sharing. Additional Responsibilities Other duties as assigned.

What You Will Bring

Required Qualifications: Bachelor's degree in computer science, Information Technology, Network Engineering, or a related field (or equivalent work experience). 7+ years of network engineering experience in multi-site enterprise environments, including at least 3 years in a senior or lead role. Expert knowledge of routing and switching (BGP, OSPF, VLANs, spanning tree), TCP/IP, DNS, and DHCP.

Hands-on experience with next-generation firewalls, site-to-site and remote access VPN, and network segmentation. Experience with SD-WAN, enterprise wireless, and hybrid cloud networking. Strong troubleshooting skills, including packet capture and analysis, and experience with network monitoring platforms. Scripting skills (Python or Power.

Shell) for network automation. Disciplined approach to documentation and change management.

Preferred Qualifications

Industry networking certifications such as Aruba ACMP, AWS Certified Advanced Networking – Specialty, Cisco CCNP Enterprise or CCIE, Fortinet NSE 7, Juniper JNCIP, Microsoft AZ-700, Palo Alto Networks PCNSE, or equivalent. Experience with IT/OT or industrial network environments. Familiarity with PCI DSS network requirements and with NIST or CIS frameworks.

Experience with network automation and infrastructure-as-code tools (e.g., Ansible, Terraform, or similar). Experience directing network consultants or managed service providers. Soft Skills: Strong problem-solving and analytical mindset. Ability to communicate complex technical concepts to non-technical stakeholders.

Composure and sound judgment under pressure during outages and high-severity incidents. Collaborative and proactive attitude with a focus on continuous improvement. Strong organizational skills and attention to detail. Herff Jones, Inc. and its affiliates are equal opportunity employers and maintain affirmative action plans to recruit, retain, develop, and promote qualified individuals without unlawful consideration of race, gender, gender identity, color, religion, sexual orientation, national origin, age, disability, citizenship status, veteran status, or any other characteristic protected by federal, state or local law.

Herff Jones strives to maintain a work environment free from unlawful discrimination and harassment, where associates are treated with respect and dignity. Any employment agency, person or entity that submits a résumé into this career site or to a hiring manager does so with the understanding that the applicant's résumé will become the property of Herff Jones.

Herff Jones will have the right to hire that applicant at its discretion without any fee owed to the submitting employment agency, person or entity.