Network Engineer - IT Security Operations at AAAG-LONE STAR LLC

Dallas, Texas, United States -

Full Time

Start Date

Immediate

Expiry Date

14 Jun, 26

Salary

0.0

Posted On

16 Mar, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Network Architecture, Cisco Meraki, Site-to-Site VPN, VLAN Segmentation, Firewall Rules, Azure Networking, Routing, Network Security, Zero Trust, SASE, Troubleshooting, Documentation, Incident Response, Hybrid Networking, Network Design, Traffic Policies

Industry

Motor Vehicle Manufacturing

Description

Description Network Engineer / Network Professional Department: IT Security Operations Reports To: IT Security Operations Lead America’s Auto Auction Group is a leading nationwide vehicle auction and remarketing company. Based in Carmel, Indiana, America’s Auto Auction operates across locations nationwide and continues to grow rapidly through acquisitions. Our mission is simple: deliver reliable, secure, and efficient operations that support our auctions, customers, and employees. We are seeking a Network Professional to own, secure, and evolve our multi-site network infrastructure across on-premises locations and cloud environments. This role is both hands-on and strategic, focused on building a secure, segmented, and reliable network that supports business operations while minimizing risk. This position works closely with IT leadership and Security to ensure our network architecture enables growth while reducing operational and security risk. The ideal candidate is comfortable working in complex, real-world environments, understands how attackers move through networks, and knows how to improve security without disrupting production systems. Work Location, Travel & Availability Work Location: Remote Travel: Occasional travel may be required, up to approximately 20%, to support critical initiatives such as site deployments, network cutovers, acquisitions, or incident response. Travel is typically planned and project-based rather than routine. On-Call / After-Hours Support: Participate in a rotational on-call schedule to support high-severity network incidents, outages, or security events. On-call responsibilities are escalation-focused rather than routine, with an emphasis on stability, planning, and reducing emergency changes over time. Responsibilities Network Architecture & Operations Design, implement, and maintain secure site-to-site VPN connectivity across dozens of geographically distributed locations Own and optimize Cisco Meraki MX infrastructure, including Auto-VPN, VLANs, firewall rules, and traffic policies Develop and maintain hub-and-spoke and segmented network designs that reduce lateral movement and blast radius Standardize network configurations, VLAN schemas, and routing practices across all locations Network Security & Segmentation Implement VLAN-based segmentation and role-based network access (users, servers, OT, printers, guest, etc.) Apply and maintain VPN firewall rules to restrict east-west traffic between sites Partner with the Security team to design networks aligned with least privilege and Zero Trust principles Support incident containment efforts by limiting network exposure during security events Cloud & Hybrid Networking Manage and troubleshoot Azure networking, including vNETs, routing tables, peering, and virtual firewalls Support and secure Meraki vMX and hybrid on-prem/cloud connectivity Understand and troubleshoot routing behavior between Azure subscriptions and on-prem environments Operational Excellence Create and maintain clear network documentation and diagrams Participate in change planning and execute changes safely in production environments Serve as an escalation point for complex network and connectivity issues Collaborate with IT, Security, and external vendors to resolve network-related problems Continuous Improvement Identify opportunities to reduce risk, complexity, and manual effort Help evaluate future architectures, including identity-based access and SASE-like approaches, when appropriate Mentor junior engineers and contribute to improving network standards and practices Requirements Required Qualifications 7+ years of overall IT experience, with 4–5+ years focused on networking Strong hands-on experience with: Enterprise routing, NAT, and firewall concepts Site-to-site and client VPN technologies Network segmentation and security design Practical experience securing multi-site environments Working knowledge of cloud networking, preferably Microsoft Azure Ability to troubleshoot at packet, route, and firewall levels Demonstrated experience improving and stabilizing existing networks Preferred Qualifications CCNP or equivalent experience Strong experience with Cisco Meraki (MX, Auto-VPN, VPN firewall rules) Security-focused certifications or background (CCNP Security, Azure Network Engineer, etc.) Familiarity with Zero Trust and SASE concepts Experience working closely with security teams or SOCs Comfortable supporting environments with legacy systems and operational constraints Why Join America’s Auto Auction Group You’ll play a key role in modernizing and securing a large, distributed infrastructure while working closely with leadership to shape long-term network architecture decisions. This role has real influence and visibility and directly supports the company’s security posture and operational maturity. America’s Auto Auction Group values its employees and invests in their growth and success. We offer a collaborative environment where IT is viewed as a strategic partner to the business.

Responsibilities

This role involves designing, implementing, and maintaining secure, multi-site network infrastructure across on-premises and cloud environments, focusing heavily on network security, segmentation, and optimization using technologies like Cisco Meraki and Azure networking.