Design, implement, configure, maintain, and troubleshoot enterprise firewall solutions across complex IT and Operational Technology (OT) environments, primarily utilizing Check Point and Palo Alto Networks.
Responsibilities
Design, implement, configure, maintain, and troubleshoot enterprise firewall solutions across complex IT and Operational Technology (OT) environments.
Support the administration, optimization, and modernization of enterprise firewall infrastructure, primarily utilizing Check Point and Palo Alto Networks technologies.
Participate in firewall migration initiatives, including the transition from Check Point to Palo Alto.
Engineer and maintain firewall policies, access control rules, NAT configurations, VPN connectivity, and network security controls.
Collaborate with security architects, network engineers, infrastructure teams, and operations personnel to develop and implement secure network solutions.
In accordance with the Pay Transparency requirements, the following represents a good faith estimate of the compensation range for this position. At BJ’s Wholesale Club, we carefully consider a wide range of non-discriminatory factors when determining salary. Actual salaries will vary depending on factors including but not limited to location, education, experience, and qualifications. The pay range for this position is $128,500.00 - $164,000.00
Responsibilities
Lead end-to-end Aruba WiFi deployments for new and existing retail stores and distribution centers, from design through post-deployment validation.
Conduct professional RF site surveys using Ekahau Pro and similar predictive/post-installation tools; produce detailed heat maps, coverage reports, and capacity recommendations.
Design and maintain Aruba wireless infrastructure including APs (indoor/outdoor), Mobility Conductors/Gateways, and AOS-8/AOS-10 architecture.
Optimize RF environments for high-density retail and warehouse settings, including 2.4GHz/5GHz/6GHz band management, channel planning, and interference mitigation.
Develop and enforce wireless security standards (WPA3-Enterprise, 802.1X, PPSK) aligned with PCI-DSS requirements for retail payment environments.
Requirements
Bachelor's degree in Computer Science, Information Technology, Network Engineering, or equivalent
Nice to have: Aruba Certified Mobility Professional (ACMP)
Nice to have: Aruba Certified ClearPass Associate/Professional (ACCA/ACCP)
Responsible for designing, implementing, managing, securing, and troubleshooting enterprise network infrastructure, ensuring high availability, performance, and secure connectivity across multiple sites and cloud environments.
Responsibilities
Manage and troubleshoot Cisco and HPE Aruba network infrastructure, including BGP, OSPF, Static Routing, MPLS, VLANs, VRF, and Layer 2/Layer 3 technologies.
Configure and maintain core switches, including Aruba VSX/VSF, stacking, redundancy, and high-availability solutions.
Manage Aruba Wireless LAN Controllers (WLC), access points, SSIDs, and enterprise wireless networks.
Administer Aruba ClearPass Network Access Control (NAC), including 802.1X, RADIUS, TACACS+, and integration with Microsoft Azure AD and Intune.
Configure and manage FortiGate and Palo Alto firewalls, including security policies, NAT, SNAT, DNAT, IPsec VPN, and SSL VPN.
Requirements
Nice to have: Cisco CCNA
Nice to have: Cisco CCNP Enterprise
Nice to have: Fortinet NSE 4–7
Nice to have: Palo Alto Networks PCNSA
Nice to have: Aruba Switching and Campus Access certifications
Hands-on Field Network Engineer serving as a senior technical resource for the Intelligent Transportation Systems (ITS) program, responsible for design, deployment, and operations of secure ITS networks connecting traffic signals, video surveillance, and IoT devices.
Responsibilities
Deploy and support Cisco DMVPN (Phase 2/Phase 3) hub-and-spoke and spoke-to-spoke overlay networks
Configure and troubleshoot IPsec VPN profiles, GRE tunnels, NHRP mappings, and tunnel interfaces
Implement dynamic routing protocols (BGP, OSPF, EIGRP) over DMVPN tunnels
Design failover and redundancy strategies, including LTE/5G backup paths
Monitor tunnel health, latency, and throughput
Requirements
Bachelor’s degree in Computer Science
Information Technology
Network Engineering
Nice to have: CCIE Enterprise Infrastructure
Nice to have: Certified Fiber Optic Technician (CFOT)
Owns and manages the network architecture and infrastructure across Kids2’s US offices, Suwanee data center, Azure, Hong Kong, mainland China and Mexico.
Locations (5)
Atlanta, Georgia, United States
Suwanee, Georgia, United States
Hong Kong, Hong Kong
China
Mexico
Responsibilities
Own the network architecture, design standards and roadmap across all sites
Design, implement, and manage secure, resilient cloud connectivity solutions across Azure, SD‑WAN, and on‑prem data centres for HEINEKEN’s global operations.
Responsibilities
Define and maintain cloud connectivity standards and reference architectures
Design secure and resilient connectivity between Azure, data centres, SD‑WAN and external partners
Review technical designs to ensure alignment with enterprise architecture and security standards
Support cloud transformation, data centre migrations and M&A initiatives
Lead technical assessments, technology roadmaps and continuous improvement activities
Lead the architecture and implementation of a NATO pilot for post‑quantum cryptography, delivering a live demonstration of quantum‑safe operation between pilot nodes.
Locations (4)
Arlington, Virginia, United States
Mons, Wallonia, Belgium
Brussels, Brussels Capital, Belgium
The Hague, South Holland, Netherlands
Responsibilities
Own the architecture and cryptographic profiles
Develop and maintain high‑ and low‑level architecture
Maintain versioned cryptographic profiles
Design an automated cryptographic migration approach
Direct implementation of quantum‑safe key establishment and authentication