SR. NETWORK ENGINEER

For over a century Charlotte Pipe and Foundry Company has been manufacturing pipe and fittings exclusively in the USA, employing 1,400 loyal, hard-working Americans. Today we manufacture the industry's broadest range of standard and specialty DWV products, including cast iron and plastic pipe and fittings.

Charlotte Pipe is headquartered in Charlotte, NC, and has seven plant locations across the United States.

Senior Network Engineer – Enterprise Architecture & Cloud Networking

Job Summary

The Senior Network Engineer is the senior technical owner for enterprise network architecture , responsible for designing, implementing, and supporting secure, scalable, and highly available connectivity across campus, branch, data center, and cloud environments. This role leads architecture decisions for routing, switching, segmentation, resiliency, traffic engineering, and hybrid connectivity, ensuring the enterprise network supports critical business, manufacturing, and cloud-hosted workloads.

This role requires deep hands-on expertise in enterprise network architecture, design, and implementation , including Layer 2/Layer 3 design, dynamic routing, high availability, segmentation, policy enforcement, and end-to-end troubleshooting across hybrid environments. The ideal candidate brings strong experience with Cisco Nexus -based data center fabrics, VMware NSX network virtualization and micro-segmentation, and the ability to lead complex infrastructure initiatives from architecture through deployment, migration, validation, and operational transition.

Core platforms in scope include Azure networking , Cisco Nexus , VMware NSX , VeloCloud SD-WAN , Zscaler Branch Connector , Zscaler Cloud Connector , and Zscaler Private Access (ZPA) . The engineer in this role must be capable of designing future-state reference architectures, defining implementation standards, validating traffic flows and failover behavior, supporting cutovers and migrations, and resolving complex issues involving overlay/underlay design, cloud egress, Zero Trust access, and interoperability across enterprise, data center, and cloud network domains.

Key Responsibilities

Enterprise Architecture, Azure Administration & Secure Access Leadership

Own the design and evolution of enterprise network architecture across campus, branch, data center, and Azure environments, including IP addressing strategy, route design, segmentation, resiliency, and security boundaries.

Serve as the lead engineer for Azure network administration , including VNets, subnets, route tables, peering, DNS, NSGs, load balancing, private connectivity, and hybrid network path design.

Design and validate hybrid connectivity patterns between on-premises networks and Azure-hosted services, including routing behavior, failover scenarios, traffic symmetry, and secure access controls.

Architect secure access solutions using Zscaler Branch Connector , Zscaler Cloud Connector , and Zscaler ZPA , with emphasis on private application access, cloud egress design, Zero Trust access patterns, and policy-based traffic steering.

Lead VeloCloud SD-WAN design and operations, including edge deployment, profile and policy design, path selection, QoS, transport failover, non-SD-WAN destinations, and cloud/security service integration.

Produce reference architectures, low-level designs, migration plans, implementation procedures, validation test plans, and operational runbooks for complex network changes.

Lead technical implementation efforts, change windows, testing, and cutover activities for infrastructure modernization, site deployments, cloud connectivity, and security transformation projects.

Data Center Core Network Support & Design

Design, support, and optimize data center core network infrastructure using Cisco Nexus platforms for high-performance, resilient switching and routing services.

Engineer and support data center segmentation, network virtualization, and distributed security policy using VMware NSX .

Develop highly available data center designs that account for redundancy, convergence, failover behavior, east-west traffic inspection, and north-south service integration.

Support data center migrations, network refreshes, capacity planning, performance tuning, and interoperability across compute, virtualization, storage, security, and cloud platforms.

Troubleshoot complex issues involving overlay/underlay behavior, VLANs, routing adjacency, segmentation policy, asymmetric traffic, and interoperability across Cisco Nexus, VMware NSX, Azure, and Zscaler-integrated services.

Network Operations, Monitoring & Incident Response

Monitor network health, performance, and availability across on‑prem and cloud environments.

Respond to incidents and outages by performing root-cause analysis and restoring service.

Escalate issues to vendors or internal teams as appropriate and provide clear status communications.

Participate in 24x7x365 on-call support rotation.

Manufacturing & Layer-1 Infrastructure Support

Design, install, and maintain Layer‑1 infrastructure including copper and fiber cabling, terminations, network cabinets, patch panels, and UPS systems.

Manage and coordinate large-scale cabling and network installation projects in manufacturing environments.

Ensure network reliability and performance for plant-floor and operational technology dependencies.

Change Management, Asset Management & Documentation

Follow ITSM-based processes for incident, problem, change, and project management.

Maintain accurate network asset inventories and configuration documentation.

Support network equipment procurement, ensuring timely delivery, correct configuration, and cost accuracy.

Perform system backups and maintain operational procedures.

Collaboration & Professional Development

Build strong working relationships with IT peers, security teams, vendors, and business stakeholders.

Communicate clearly with technical and non-technical audiences.

Stay current with networking, cloud, and security technologies through training and professional development.

Required Qualifications

Bachelor’s degree in Information Technology, Computer Science, Engineering, or equivalent experience preferred.

8+ years of progressive experience in enterprise network engineering, including architecture, design, implementation, migration, and advanced operational support.

Deep hands-on expertise in enterprise routing, switching, segmentation, DNS, DHCP, VPNs, and network security principles.

Strong experience administering and designing Azure networking services in hybrid cloud environments.

Advanced experience with Cisco Nexus in enterprise or data center core environments.

Practical experience designing, implementing, or supporting VMware NSX network virtualization and micro-segmentation solutions.

Hands-on experience with VeloCloud SD-WAN deployment, policy design, operations, and troubleshooting.

Experience implementing or administering Zscaler Branch Connector , Zscaler Cloud Connector , and/or Zscaler ZPA in enterprise environments.

Demonstrated ability to lead technical design reviews, implementation planning, cutovers, root-cause analysis, and cross-functional troubleshooting.

Strong documentation, communication, and technical leadership skills, with the ability to support after-hours changes and critical incident escalation.

Preferred Qualifications

Expert-level experience designing enterprise network architectures for large-scale hybrid environments.

Experience with Azure private connectivity, route design, and cloud network security architecture.

Experience integrating SD-WAN and security service edge platforms for branch, cloud, and private application connectivity.

Experience in manufacturing, industrial, or multi-site enterprise environments.

Familiarity with automation, scripting, infrastructure-as-code, and monitoring or observability platforms.

Cisco, VMware, Azure, VeloCloud, or Zscaler certifications.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or disability.