Network Engineer

Founded in 1898, Mutual of Enumclaw is a people-first insurer rooted in community, recognized as Washington’s Best Company to Work For for the 13th consecutive year, and proudly serving individuals, families, farms, and businesses through local independent agents across the West.

The IT Infrastructure Network Engineer is responsible for the implementation, maintenance, and support of MoE's enterprise network environment. Working under the guidance of senior engineers and IT leadership, this role helps operate and maintain our core network infrastructure, including Palo Alto next-generation firewalls, Aruba switching and wireless, and Palo Alto Strata Cloud SASE/VPN, while also supporting cloud network connectivity across Azure and AWS environments.

The Network Engineer collaborates with peers and stakeholders, supports infrastructure roadmap initiatives, and continues building subject matter expertise across network security, cloud connectivity, and infrastructure modernization initiatives. This role requires someone who is comfortable working in the CLI and following the change management process, and who is eager to grow those skills over time.

Location: The successful candidate will work on-site at our Home Offices in the Greater Seattle area. Candidates must live within driving distance of our Home Offices.

Hiring Range: $116,300 - $130,900*

Salary Range: $116,300 - $145,200

Candidates with more experience may be considered for a Sr. Network Engineer position. Compensation and position will be commensurate with experience.

Sr. Network Engineer

Hiring Range: $161,700 - $182,300*

Salary Range: $161,700 - $196,300

*The hiring range represents Mutual of Enumclaw’s current hiring pay scale for this role. Mutual of Enumclaw reserves the right to modify or update this range any time. Exact compensation may vary based on skills and experience. Compensation is only one part of our entire total rewards package. To see some of the benefits and perks we offer, please click here.

• Design, implement, and maintain enterprise network infrastructure including firewalls, switching, wireless, and WAN/SD-WAN/SASE solutions.
• Support and operate the Palo Alto firewall environment, including policy management, threat prevention, URL filtering, and ongoing tuning.
• Administer Aruba switching (CX/AOS-CX) and wireless infrastructure (Aruba Access Points, Aruba Central) across corporate and branch locations.
• Support and help optimize the Palo Alto Strata Cloud SASE platform for secure remote access, branch connectivity, and cloud-delivered security services.
• Support and maintain remaining Cisco switching infrastructure during active transition to Aruba.
• Support cloud network connectivity including Azure Virtual Networks (VNets), Azure ExpressRoute/VPN Gateway, AWS VPCs, Transit Gateway, and Direct Connect.
• Participate in network-related projects, from design through implementation and documentation, under the guidance of senior engineers of the IT Security & Network Manager.
• Proactively identify and address network security risks; contribute to the broader security program through network segmentation, lateral movement controls, and access policy enforcement.
• Develop and maintain network documentation including topology diagrams, runbooks, change records, and standard operating procedures.
• Provide on-call support and participate in incident response for network-related events.
• Collaborate with the security team on firewall policy reviews, network access controls, and compliance-related network configurations.
• Stay current on emerging technologies and share recommendations aligned with senior engineers and IT leadership.
• Participate in knowledge sharing and collaborative problem-solving across the infrastructure team.

Required Skills/Abilities: 

• Solid hands-on experience with Palo Alto Networks firewalls (PAN-OS, Panorama, policy management, threat profiles).
• Strong experience with Aruba switching (AOS-CX preferred) and Aruba wireless infrastructure; familiarity with Aruba Central for centralized management.
• Working knowledge of enterprise routing and switching: BGP, OSPF, VLAN design, STP, QoS, and related protocols.
• Hands-on experience with Palo Alto Strata Cloud (SASE, Prisma Access, GlobalProtect) for VPN and cloud-delivered security.
• Solid understanding of network security principles: zero trust architecture, network segmentation, micro-segmentation, and lateral movement prevention.
• Experience with cloud network connectivity: Azure VNets, VPN Gateway, ExpressRoute, NSGs; AWS VPCs, Transit Gateway, Direct Connect.
• Ability to prioritize competing demands and see projects through from design to completion, with guidance from senior team members as needed.
• Strong written and verbal communication skills; able to present technical topics clearly to both technical peers and non-technical leadership.
• Strong troubleshooting skills: systematic, thorough, and calm under pressure.
• Solid documentation habits and attention to detail.
• Familiarity with Cisco IOS/NX-OS for legacy switch management during transition.
• Scripting or automation experience (PowerShell, Python, Bash, Ansible) is a plus.

Education and Experience: 

• 3–5 years of relevant enterprise networking experience; BS in a STEM field preferred or equivalent practical experience.
• Hands-on experience managing enterprise-class network environments in a production setting.
• Proven experience with Palo Alto firewall platforms in production environments, required.
• Proven experience with Aruba switching and wireless infrastructure, required.
• Experience with Palo Alto Strata Cloud / Prisma Access / SASE platforms, preferred.
• 1–2 years of cloud networking experience with Azure and/or AWS, a plus.
• Relevant certifications preferred:
  • Palo Alto: PCNSA (Palo Alto Networks Certified Network Security Administrator); PCNSE a plus.
  • Aruba: ACCA, ACCP, or equivalent HPE Aruba certification.
  • Cisco: CCNA (legacy environment familiarity).
  • Cloud: AZ-700 (Azure Network Engineer Associate) or equivalent AWS networking certification.
  • Familiarity with enterprise DR/BCP network design and failover configurations.
  • Familiarity with network monitoring and logging tools; experience integrating network data into SIEM platforms (e.g Splunk) is a plus.

Physical Requirements: 

• Prolonged periods of sitting at a desk and working on a computer, including video conferencing.
• Occasional Data Center or Network Closet work.
• Must be able to lift up to 15 pounds.