Principal Network Engineer @ Arctiq

Arctiq is a global, intelligence-driven technology services company delivering professional and managed services across Hybrid Cloud Infrastructure, Networking & Connected Experiences, Cybersecurity, Data & AI, Autonomous Operations & Intelligence, and Enterprise Service Management. We help organizations operate, secure, and modernize complex environments by unifying infrastructure, networking, data, security, automation, and observability under a single, integrated operating model. Our work focuses on helping customers reduce operational friction, improve resilience, and make better, faster decisions as their environments evolve. Arctiq builds on decades of industry expertise and a customer-centric ethos to deliver exceptional value to clients across diverse industries.

This is a contract-to-hire opportunity with one of Arctiq's clients. It is a requirement to be onsite in their Winston Salem, NC office 5 days/week.

The Principal Network Engineer serves as the senior-most technical authority for enterprise networking, network security, connectivity, and perimeter infrastructure across the client. This role is responsible for the architecture, engineering, implementation, and lifecycle management of highly available, secure, and scalable network solutions supporting branch locations, data centers, cloud services, contact centers, and digital banking platforms.

The Principal Network Engineer provides strategic and technical leadership for the client’s network infrastructure, with deep expertise in Fortinet and Palo Alto technologies. The position partners closely with Information Security, Infrastructure Engineering, Application Support, Cloud Operations, and business stakeholders to ensure network performance, operational resiliency, regulatory compliance, and cybersecurity protection.

This role acts as a technical mentor and escalation point for network engineers and operational support teams while driving modernization initiatives aligned with business objectives and regulatory expectations.

Essential Duties and Responsibilities

Network Architecture & Engineering

• Design, implement, and maintain enterprise-class network architectures supporting branch, campus, data center, cloud, and remote workforce connectivity.

• Develop strategic network roadmaps aligned with organizational growth, digital transformation, and cybersecurity initiatives.

• Architect highly available and redundant routing, switching, wireless, SD-WAN, VPN, and perimeter security solutions.

• Lead technology evaluations, proof-of-concepts, and infrastructure modernization efforts.

• Develop network standards, reference architectures, engineering guidelines, and operational procedures.

Security Engineering

• Serve as the subject matter expert for Palo Alto Networks and Fortinet security platforms.

• Design and manage next-generation firewall architectures utilizing:

• Palo Alto NGFW

• Panorama

• GlobalProtect

• Palo Alto DNS Security

• Advanced Threat Prevention

• URL Filtering

• WildFire

• FortiGate

• FortiManager

• FortiAnalyzer

• FortiWeb

• FortiAuthenticator

• FortiSwitch

• FortiAP

• FortiEDR integration

• Implement and maintain Zero Trust network principles.

• Design network segmentation strategies supporting PCI-DSS, FFIEC, NCUA, NIST, and cybersecurity frameworks.

• Support security assessments, audits, penetration testing, and vulnerability remediation activities.

Cloud & Hybrid Connectivity

• Design and support secure connectivity solutions for:

• Microsoft Azure

• Microsoft 365

• SaaS platforms

• Third-party financial service providers

• DR and business continuity environments

• Architect VPN, ExpressRoute, SD-WAN, and secure cloud interconnect solutions.

• Ensure optimized network performance and security across hybrid environments.

Operations & Reliability

• Function as highest-level escalation point for network-related incidents and complex problem resolution.

• Lead root cause analysis and corrective action planning for major incidents.

• Establish performance baselines and proactive monitoring strategies.

• Ensure network capacity planning, uptime, resiliency, and availability targets are achieved.

• Participate in disaster recovery and business continuity planning, testing, and validation activities.

Regulatory Compliance & Risk Management

• Ensure network infrastructure complies with:

• NCUA regulations

• FFIEC guidance

• GLBA requirements

• PCI-DSS standards

• NIST Cybersecurity Framework

• CIS Controls

• Support internal and external audits.

• Maintain documentation required for regulatory examinations and cybersecurity assessments.

• Identify and mitigate infrastructure risks through proactive engineering and governance practices.

Technical Leadership

• Mentor network engineers and infrastructure team members.

• Establish engineering standards, review designs, and provide technical governance.

• Participate in strategic planning and technology budgeting efforts.

• Lead major infrastructure projects and vendor engagements.

• Collaborate with Information Security leadership on enterprise cybersecurity initiatives.

Required Qualifications

Experience

• 10+ years of progressive enterprise network engineering experience.

• 5+ years designing and supporting large-scale Cisco, Fortinet, or Palo Alto environments.

• Experience supporting highly regulated financial services organizations preferred.

• Experience supporting multiple branch locations and geographically distributed networks.

• Experience designing highly available and fault-tolerant network architectures.

Technical Skills

Advanced Knowledge

• Enterprise Routing & Switching

• BGP

• OSPF

• EIGRP

• VLANs

• VRFs

• QoS

• Multicast

• Palo Alto Technologies

• NGFW

• Panorama

• GlobalProtect

• WildFire

• Threat Prevention

• DNS Security

• SD-WAN

• Fortinet Technologies

• FortiGate

• FortiManager

• FortiAnalyzer

• FortiWeb

• FortiSwitch

• FortiAP

• FortiAuthenticator

• Network Security

• Microsegmentation

• NAC

• IDS/IPS

• ZTNA

• SSL Inspection

• MFA Integration

• Cloud Networking

• Microsoft Azure

• Azure Networking

• ExpressRoute

• Hybrid Cloud Connectivity

• Microsoft 365 Networking

• Wireless Technologies

• Enterprise Wi-Fi

• Wireless Security

• Guest Access Design

Education

• Bachelor's degree in: Information Technology, Computer Science, Information Systems, Engineering or equivalent combination of education and experience.

Preferred Experience

• Cisco Nexus and Catalyst platforms

• F5 Load Balancers

• DNS/DHCP/IPAM

• Network Access Control

• SIEM integrations

• SASE architectures

• Automation and Infrastructure-as-Code

Arctiq is an equal opportunity employer. If you need any accommodations or adjustments throughout the interview process and beyond, please let us know. We celebrate our inclusive work environment and welcome members of all backgrounds and perspectives to apply.

We thank you for your interest in joining the Arctiq team! While we welcome all applicants, only those who are selected for an interview will be contacted.