Lead Network EngineerDepartment:  Information TchnologyReports to: Director - Network Technology Location: In Office, Orange CT, Boston MAThe base salary range for this position is dependent upon experience and location, ranging from:·         $128,320 - $160,400 (Orange, CT)·         $134,080 - $167,600 (Boston, MA)Job SummaryWe are seeking a highly skilled Lead Network Engineer to design, implement, manage, and optimize our large-scale, complex network infrastructure spanning 350+ locations. This role involves managing MPLS, Dedicated Internet Access (DIA), point-to-point circuits (P2P), Cloud Connects, AWS Direct Connect, and Azure ExpressRoute, along with implementing IPSec VPN, advanced routing (BGP, EIGRP), security policies (NAT, ACLs, route maps), and network automation.The ideal candidate will also be responsible for proactive network monitoring, performance analysis, and security visibility using tools like SNMP-based monitoring, ExtraHop, and other network analytics platforms to ensure optimal uptime, security, and efficiency.Key Responsibilities<ul><li>Architects, deploys, and optimizes a scalable, highly available, and secure enterprise network across 350+ locations.</li><li>Designs and maintains MPLS, DIA, P2P circuits, AWS Direct Connect, and Azure ExpressRoute to ensure high-performance connectivity.</li><li>Engineers and supports IPSec VPN tunnels for secure remote access and inter-site connectivity.</li><li>Implements advanced routing policies using BGP, EIGRP, OSPF, static routes, prefix lists, ACLs, and route maps.</li><li>Designs and maintains enterprise wireless solutions including Cisco WLCs and Access Points.</li><li>Administers and maintains Cisco routers (ISR, ASR) and switches (Catalyst, Nexus).</li><li>Manages Infoblox DDI (DNS, DHCP, IPAM) for resilient name resolution.</li><li>Configures and maintains Cisco ISE for network access control and authentication policies.</li><li>Oversees network performance monitoring, SNMP-based alerting, and traffic analysis.</li><li>Utilizes ExtraHop and other deep packet inspection (DPI) tools for real-time traffic visibility and network security monitoring.</li><li>Troubleshoots network issues, latency, packet loss, and performance bottlenecks across WAN, LAN, and cloud interconnects.</li><li>Enforces AAA, TACACS+, RADIUS, and 802.1X authentication policies.</li><li>Develops and enforces firewall policies, NAT configurations, and access control lists (ACLs).</li><li>Ensures compliance with ISO 27001, NIST, PCI-DSS, and other industry security frameworks.</li><li>Works with Security Operations (SOC) teams to mitigate threats, monitor anomalies, and secure network boundaries.</li><li>Deploys and maintains SNMP-based monitoring solutions (SolarWinds, PRTG, Thousand Eyes, Cisco DNA Center, etc.).</li><li>Implements ExtraHop for deep packet analysis, application monitoring, and network anomaly detection.</li><li>Automates network tasks using Python, Ansible, Terraform, or equivalent.</li><li>Optimizes QoS policies, WAN acceleration, and traffic engineering techniques to enhance application performance.</li><li>Performs capacity planning and proactive performance analysis to optimize network usage and prevent congestion.</li><li>Designs, deploys, and manages hybrid cloud network architectures in AWS and Azure.</li><li>Implements AWS Direct Connect and Azure ExpressRoute for high-speed cloud connectivity.</li><li>Optimizes cloud Networks, VPN peering, and virtual network gateways.</li><li>Maintains up-to-date network documentation, topology diagrams, and runbooks.</li><li>Collaborates with IT, Security, and Infrastructure teams to align network initiatives with business objectives.</li><li>Provides technical mentorship to junior network engineers and cross-functional teams.</li></ul>Required Qualifications<ul><li>Bachelor’s degree in Computer Science, Network Engineering, or relevant field and a minimum of 7 years of hands-on experience with network engineering, architecture, and/or operations.  An equivalent combination of education and experience may be considered.</li><li>Strong expertise in MPLS, DIA, P2P circuits, AWS Direct Connect, and Azure ExpressRoute.</li><li>Deep knowledge of routing protocols (BGP, EIGRP, OSPF), IPSec VPN, NAT, ACLs, route maps.</li><li>Solid experience with Cisco routers (ISR, ASR) and switches (Catalyst, Nexus).</li><li>Proficiency in network monitoring and SNMP-based solutions (SolarWinds, PRTG, ThousandEyes, Cisco DNA Center, etc.).</li><li>Hands-on experience with ExtraHop for deep packet inspection and traffic analytics.</li><li>Experience with Infoblox (DNS, DHCP, IPAM) and Cisco ISE (802.1X, NAC, authentication).</li><li>Solid knowledge of wireless networking (Cisco WLCs, Access Points, RF design, and security policies).</li><li>Scripting and network automation experience (Python, Ansible, Terraform, or equivalent tools).</li><li>Ability to analyze packet captures, NetFlow, SNMP logs, and real-time network telemetry.</li></ul>Preferred Certifications <ul><li>Cisco CCNP / CCIE (Enterprise, Security, or Service Provider)</li><li>AWS Advanced Networking Specialty</li><li>Microsoft Certified: Azure Network Engineer Associate</li><li>ExtraHop Certified Professional (ECP)</li><li>Infoblox Core DDI Certificatio </li></ul>#LI-VF1#LI-OnsiteCompany:CONNECTICUT NATURAL GAS CORPORATIONMobility InformationPlease note that any applicant who is not a citizen of the country of the vacancy will be subject to compliance with the applicable immigration requirements to legally work in that country.At Avangrid we provide fair and equal employment and advancement opportunities for all employees and candidates regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status, disability, protected veteran status or any other status protected by federal, state, or local law. If you are an individual with a disability or a disabled veteran who is unable to use our online tool to search for or to apply for jobs, you may request a reasonable accommodation by contacting our People and Organization department at <a href="mailto:careers@avangrid.com">careers@avangrid.com</a>.Avangrid employees may be assigned a system emergency role and in the event of a system emergency, may be required to work outside of their regular schedule/job duties. This is applicable to employees that will work in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate functions.  This does not include those that will work for Avangrid Power.Avangrid employees may also be assigned a NERC Reliability Standards compliance role supporting Critical Infrastructure Protection (CIP) and/or Operations and Planning (O&amp;P) responsibilities. This is applicable to employees that will work in electric transmission, operations, and cyber security business areas in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate business areas. NERC Reliability Standards compliance roles and responsibilities may include additional access protections, training, audit engagement, and required evidence retention, and will be communicated by the employee’s management.Job Posting End Date:March-31-2026

Avangrid is a leading sustainable energy company transitioning America toward a clean and connected future headquartered in Orange, CT, and has a footprint in 24 states with $40 billion in assets. Our primary businesses are Networks, which serves 3.3 million electric and natural gas customers in the Northeast, and Renewables, the third-largest renewable energy company in the U.S. with a diverse onshore and offshore renewable energy portfolio. With more than 7,000 employees, Avangrid has built a culture that blends diversity, equity and inclusion guided by the company&rsquo;s ESG+F framework and the UN Sustainable Development Goals. This has led to recognition by JUST Capital in 2021 and 2022 as one of America&rsquo;s best corporate citizens and second in utilities for our commitment to the environment and the communities we serve. Avangrid has been named one of the World&rsquo;s Most Ethical Companies for four consecutive years by the Ethisphere Institute.

Lead Engineer - Network

Lead Network EngineerDepartment:  Information TchnologyReports to: Director - Network Technology Location: In Office, Orange CT, Boston MAThe base salary range for this position is dependent upon experience and location, ranging from:·         $128,320 - $160,400 (Orange, CT)·         $134,080 - $167,600 (Boston, MA)Job SummaryWe are seeking a highly skilled Lead Network Engineer to design, implement, manage, and optimize our large-scale, complex network infrastructure spanning 350+ locations. This role involves managing MPLS, Dedicated Internet Access (DIA), point-to-point circuits (P2P), Cloud Connects, AWS Direct Connect, and Azure ExpressRoute, along with implementing IPSec VPN, advanced routing (BGP, EIGRP), security policies (NAT, ACLs, route maps), and network automation.The ideal candidate will also be responsible for proactive network monitoring, performance analysis, and security visibility using tools like SNMP-based monitoring, ExtraHop, and other network analytics platforms to ensure optimal uptime, security, and efficiency.Key Responsibilities<ul><li>Architects, deploys, and optimizes a scalable, highly available, and secure enterprise network across 350+ locations.</li><li>Designs and maintains MPLS, DIA, P2P circuits, AWS Direct Connect, and Azure ExpressRoute to ensure high-performance connectivity.</li><li>Engineers and supports IPSec VPN tunnels for secure remote access and inter-site connectivity.</li><li>Implements advanced routing policies using BGP, EIGRP, OSPF, static routes, prefix lists, ACLs, and route maps.</li><li>Designs and maintains enterprise wireless solutions including Cisco WLCs and Access Points.</li><li>Administers and maintains Cisco routers (ISR, ASR) and switches (Catalyst, Nexus).</li><li>Manages Infoblox DDI (DNS, DHCP, IPAM) for resilient name resolution.</li><li>Configures and maintains Cisco ISE for network access control and authentication policies.</li><li>Oversees network performance monitoring, SNMP-based alerting, and traffic analysis.</li><li>Utilizes ExtraHop and other deep packet inspection (DPI) tools for real-time traffic visibility and network security monitoring.</li><li>Troubleshoots network issues, latency, packet loss, and performance bottlenecks across WAN, LAN, and cloud interconnects.</li><li>Enforces AAA, TACACS+, RADIUS, and 802.1X authentication policies.</li><li>Develops and enforces firewall policies, NAT configurations, and access control lists (ACLs).</li><li>Ensures compliance with ISO 27001, NIST, PCI-DSS, and other industry security frameworks.</li><li>Works with Security Operations (SOC) teams to mitigate threats, monitor anomalies, and secure network boundaries.</li><li>Deploys and maintains SNMP-based monitoring solutions (SolarWinds, PRTG, Thousand Eyes, Cisco DNA Center, etc.).</li><li>Implements ExtraHop for deep packet analysis, application monitoring, and network anomaly detection.</li><li>Automates network tasks using Python, Ansible, Terraform, or equivalent.</li><li>Optimizes QoS policies, WAN acceleration, and traffic engineering techniques to enhance application performance.</li><li>Performs capacity planning and proactive performance analysis to optimize network usage and prevent congestion.</li><li>Designs, deploys, and manages hybrid cloud network architectures in AWS and Azure.</li><li>Implements AWS Direct Connect and Azure ExpressRoute for high-speed cloud connectivity.</li><li>Optimizes cloud Networks, VPN peering, and virtual network gateways.</li><li>Maintains up-to-date network documentation, topology diagrams, and runbooks.</li><li>Collaborates with IT, Security, and Infrastructure teams to align network initiatives with business objectives.</li><li>Provides technical mentorship to junior network engineers and cross-functional teams.</li></ul>Required Qualifications<ul><li>Bachelor’s degree in Computer Science, Network Engineering, or relevant field and a minimum of 7 years of hands-on experience with network engineering, architecture, and/or operations.  An equivalent combination of education and experience may be considered.</li><li>Strong expertise in MPLS, DIA, P2P circuits, AWS Direct Connect, and Azure ExpressRoute.</li><li>Deep knowledge of routing protocols (BGP, EIGRP, OSPF), IPSec VPN, NAT, ACLs, route maps.</li><li>Solid experience with Cisco routers (ISR, ASR) and switches (Catalyst, Nexus).</li><li>Proficiency in network monitoring and SNMP-based solutions (SolarWinds, PRTG, ThousandEyes, Cisco DNA Center, etc.).</li><li>Hands-on experience with ExtraHop for deep packet inspection and traffic analytics.</li><li>Experience with Infoblox (DNS, DHCP, IPAM) and Cisco ISE (802.1X, NAC, authentication).</li><li>Solid knowledge of wireless networking (Cisco WLCs, Access Points, RF design, and security policies).</li><li>Scripting and network automation experience (Python, Ansible, Terraform, or equivalent tools).</li><li>Ability to analyze packet captures, NetFlow, SNMP logs, and real-time network telemetry.</li></ul>Preferred Certifications <ul><li>Cisco CCNP / CCIE (Enterprise, Security, or Service Provider)</li><li>AWS Advanced Networking Specialty</li><li>Microsoft Certified: Azure Network Engineer Associate</li><li>ExtraHop Certified Professional (ECP)</li><li>Infoblox Core DDI Certificatio </li></ul>#LI-VF1#LI-OnsiteCompany:CONNECTICUT NATURAL GAS CORPORATIONMobility InformationPlease note that any applicant who is not a citizen of the country of the vacancy will be subject to compliance with the applicable immigration requirements to legally work in that country.At Avangrid we provide fair and equal employment and advancement opportunities for all employees and candidates regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status, disability, protected veteran status or any other status protected by federal, state, or local law. If you are an individual with a disability or a disabled veteran who is unable to use our online tool to search for or to apply for jobs, you may request a reasonable accommodation by contacting our People and Organization department at <a href="mailto:careers@avangrid.com">careers@avangrid.com</a>.Avangrid employees may be assigned a system emergency role and in the event of a system emergency, may be required to work outside of their regular schedule/job duties. This is applicable to employees that will work in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate functions.  This does not include those that will work for Avangrid Power.Avangrid employees may also be assigned a NERC Reliability Standards compliance role supporting Critical Infrastructure Protection (CIP) and/or Operations and Planning (O&amp;P) responsibilities. This is applicable to employees that will work in electric transmission, operations, and cyber security business areas in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate business areas. NERC Reliability Standards compliance roles and responsibilities may include additional access protections, training, audit engagement, and required evidence retention, and will be communicated by the employee’s management.Job Posting End Date:March-31-2026

Lead Engineer - Network

About the Job

About the Company

Iberdrola

Similar Jobs

Staff Network Operations Engineer

Staff Network Operations Engineer

Network Systems Engineer

Network Systems Engineer

Network & Compliance Lead

Network & Compliance Lead

Lead Engineer - Network

Lead Engineer - Network

Sr. Engineer, IT Network Infrastructure

Sr. Engineer, IT Network Infrastructure

Senior Network Administrator

Senior Network Administrator

Lead Telecom Network Architect

Lead Telecom Network Architect

Principal Network Engineer

Principal Network Engineer

Network Engineer

Network Engineer

Staff Network Engineer

Staff Network Engineer