Lead Engineer- Network Modernization

The Opportunity: Avantor is looking for the Lead Engineer- Network Modernization, reporting to the Manager, Data Network Services at Avantor, is responsible for building, implementing, and supporting enterprise network, infrastructure across LAN, WAN, and cloud environments. This role emphasizes translating architectural designs into deployable solutions, validating configurations, and ensuring reliable, secure, and scalable network operations. Key Responsibilities Network Design & Build Engineering: Translate high-level architecture into detailed, deployable network designs (low-level designs) Build, plan, and validate new network configurations and capabilities across LAN, WAN, Wi-Fi, SD-WAN, and cloud environments Develop and maintain network diagrams, standards, and reusable design templates Contribute to capacity planning and scalability assessments Implementation & Deployment: Lead implementation of network solutions aligned with enterprise architecture and corporate standards Lab-test and pilot new network services, hardware, and policies prior to production rollout Execute network upgrades, migrations, and deployments with minimal business disruption Coordinate closely with architecture and modernization teams to ensure smooth handoffs Operations & Support: Troubleshoot complex network performance and connectivity issues across on-prem and remote environments Support and optimize remote access solutions including VPN and secure access technologies Manage build requests, implementation backlogs, and configuration changes Security & Compliance: Implement network security controls including firewalls, segmentation, and secure connectivity solutions Ensure compliance with enterprise security policies and industry standards Support vulnerability remediation, audits, and risk mitigation efforts Collaboration & Documentation: Partner with cloud, infrastructure, and security teams to deliver integrated solutions Participate in technical design discussions and reviews Maintain accurate documentation of configurations, procedures, and standards Success Metrics: Timely completion of network implementation plans Successful lab validation and pilot deployments Reduction in network-related incidents through proactive improvements Number of reusable design templates and standardized configurations developed Required Qualifications: Bachelor’s degree in Computer Science, Information Technology, or related field 10+ years of experience in network engineering or infrastructure roles. Technical Expertise: Strong understanding of core networking protocols: TCP/IP, DNS, DHCP Routing & switching: hands-on experience with OSPF, BGP, and enterprise routing/switching across Cisco and HPE platforms WAN technologies: experience with Cisco SD-WAN and traditional WAN architectures Wireless networking: experience with Aruba Wireless and enterprise Wi-Fi deployments, Wireless Surveys, troubleshooting complex wireless related issues. Network security: strong knowledge of enterprise security principles including firewalls, segmentation, and access control Hands-on experience with security platforms and services such as Palo Alto firewalls, Zscaler (ZIA/ZPA), and secure access solutions Cloud networking: hands-on experience designing and implementing AWS VPC and Azure VNet architectures, including subnets, route tables, security groups, peering, NAT gateways, and hybrid connectivity (VPN, Direct Connect, ExpressRoute) Experience with secure remote access and zero trust architectures (e.g., ZPA) Strong troubleshooting, analytical, and problem-solving skills across complex, distributed network environment Preferred Qualifications: Relevant certifications such as CCNP, CCIE, or equivalent (Routing & Switching, Enterprise, or Security) Experience with Cisco SD-WAN design, deployment, and operations in enterprise environments Exposure to Zero Trust Network Access (ZTNA) frameworks and secure access solutions (e.g., Zscaler ZIA/ZPA) Experience with network automation and scripting using tools such as Python or Ansible Familiarity with cloud-native security controls and advanced networking features in AWS and Azure Experience supporting large-scale, geographically distributed enterprise networks Exposure to load balancers, proxies, or application delivery technologies Tools & Technologies: Networking & Infrastructure: Cisco (routing, switching, SD-WAN), HPE, Juniper Wireless: Aruba Wireless solutions, Cisco Wireless. Security: Palo Alto firewalls, Zscaler (ZIA, ZPA), network segmentation and access control technologies Cloud Platforms: AWS (VPC), Azure (VNet), including hybrid connectivity (VPN, Direct Connect, ExpressRoute) Remote Access & Zero Trust: VPN technologies, ZTNA solutions Automation (optional but preferred): Python, Ansible Disclaimer: The above statements are intended to describe the general nature and level of work being performed by employees assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of employees assigned to this position. Avantor is proud to be an equal opportunity employer. Why Avantor? Dare to go further in your career. Join our global team of 14,000+ associates whose passion for discovery and determination to overcome challenges relentlessly advances life-changing science. The work we do changes people's lives for the better. It brings new patient treatments and therapies to market, giving a cancer survivor the chance to walk his daughter down the aisle. It enables medical devices that help a little boy hear his mom's voice for the first time. Outcomes such as these create unlimited opportunities for you to contribute your talents, learn new skills and grow your career at Avantor. We are committed to helping you on this journey through our diverse, equitable and inclusive culture which includes learning experiences to support your career growth and success. At Avantor, dare to go further and see how the impact of your contributions set science in motion to create a better world. Apply today! EEO Statement: We are an Equal Employment/Affirmative Action employer and VEVRAA Federal Contractor. We do not discriminate in hiring on the basis of sex, gender identity, sexual orientation, race, color, religious creed, national origin, physical or mental disability, protected Veteran status, or any other characteristic protected by federal, state/province, or local law. If you need a reasonable accommodation for any part of the employment process, please contact us by email at recruiting@avantorscie