The New York Public Library is hiring: Senior Network Engineer in New York

Senior Network Engineer

Join to apply for the Senior Network Engineer role at The New York Public Library.

Compensation

$120,000 - $130,000 / year

Department

Information Technology

Location

Crystal Building 40 W20th St

Overview

The IT Infrastructure & Operations Network Engineering department is responsible for the architecture, planning, implementation, installation and operations of NYPL's network infrastructure. NYPL covers three boroughs with 90+ branch locations, 12K+ endpoints, public/private cloud, and public/staff WiFi serving millions of New Yorkers every year. The Library’s network is highly redundant to ensure essential services are available with maximum uptime.

Key Accountabilities

• Engineering level administration of NYPL’s network including routing, firewalls, ACLs, VLAN designs, VPN and of NYPL’s Public and Staff WiFi networks
• Review initial business requirements and provide initial technical designs
• Provide installation and engineering level support of NYPL network equipment and services
• Liaise with business partners on projects as necessary

Mentorship & Teaching

• Support Network Engineers on the team
• Collaborate with other IT departments to ensure understanding of network considerations
• Engage colleagues across the business to set clear expectations

Learning & Development

• The Library’s unique place in providing network access as a means to accomplish its mission and bridge the digital divide
• Advanced networking administration and implementation methodologies
• Zero‑Trust network security models to prepare NYPL for the future
• E‑rate funding guidelines

Improvement Focus

• Monitoring and operation efficiency of the networking stack
• Network security tools and practices

Onboarding Timeline

1 month – Familiarize with IT practices, build relationships with vendors and stakeholders, understand NYPL’s network topology, review current project backlog, coordinate prioritization, set clear goals.

3 months – Plan for future bandwidth upgrades across branch locations, field change and support requests for most of the network, support key projects with minimal supervision.

6 months and beyond – Own WAN, VPN, and core routing administration, prepare for equipment upgrades, participate in roadmap development.

Responsibilities

• Architect, deploy, monitor and maintain the NYPL data network environment which consists largely of Cisco routers, switches and firewalls, as well as Extreme, & Cisco wireless network equipment
• Install, configure and maintain network firewalls (Cisco, Fortinet)
• Design and implement appropriate network level security controls at the Internet, datacenter, WiFi, and departmental LAN layers of the network (VLANS design, ACLs)
• Install and maintain data circuits between core locations, including dark and lit fiber at multigigabit speeds
• Prepare bid specifications for network routers, switches and security appliances, network monitoring systems, and core circuit connections, and participate in the evaluation of bids
• Plan future growth and integrate new technologies into the NYPL network
• Perform other assigned duties as necessary

Required Education, Experience & Skills

Required Education & Certifications

Bachelor’s degree

Required Experience

• 5+ years administering networks for a widely distributed organization
• Experience designing and implementing networks
• Experience collaborating across IT support groups and business units

Required Skills

• Deep hands‑on experience with Cisco IOS features and LAN/WAN switching & routing technologies, including BGP, OSPF, EIGRP & Spanning Tree protocols, VPN, port/etherchannel, VLAN design, and ACLs
• Excellent knowledge of Cisco network security practices and competent in configuring and supporting network firewalls (Cisco, Palo Alto)
• Familiarity with WAN circuits (Dark fiber, Megaport, MPLS, Point to Point Ethernet, virtual), including hardware provisioning and troubleshooting
• Ability to provision and support a cloud managed WiFi system, Cisco Meraki, ExtremeCloud, etc.
• Strong knowledge of networking in cloud environments (AWS, Azure, GCP, VMWare)
• Current CCNP certification in routing and switching preferred

Managerial/Supervisory Responsibilities

Mentor junior engineers as necessary

Work Environment

• Office setting
• Travel to NYPL sites as needed

Physical Duties

• Lifting/moving up to 49 lbs required

Schedule

• 9:00 AM - 5:00 PM, Monday - Friday
• Available on-call after hours and weekends
• Hybrid 3 days in office / 2 days remote as workload permits

Pre-Placement Physical Required?

No

Union / Non Union

Non-Union

FLSA Status

Exempt

Core Values

• Be Helpful to patrons and colleagues
• Be Resourceful in solving problems
• Be Curious in all aspects of your work
• Be Welcoming and Inclusive

Salary Statement

At the Library, we believe that pay transparency and pay equity are important to ensuring we source the best candidates and keep the best employees. When making a determination as to the appropriate salary for a candidate, we consider a variety of factors, including, but not limited to, the position requirements, the skills, prior experience, and educational background required or preferred for the job, the scope and impact of the role within the organization, internal peer equity, and the candidate's specific training, experience, education level, and skills. No single factor is conclusive; the Library reserves the right to consider any and all relevant factors and make a decision consistent with its policies. Union Salaries are determined by collective bargaining agreement(s).

Employment Notice

This job description represents the types and levels of responsibilities that will be required of the position and shall not be construed as a declaration of all of the specific duties and responsibilities for the role. Job duties may change if Library priorities change. Employees may be directed to perform job‑related tasks other than those specifically presented in this description as needed.