Asks for

The ad says“Administer Cisco ISE, including 802.1X, NAC, RADIUS/TACACS+, guest access, and endpoint profiling.”
The ad says“Hands-on experience with F5 BIG-IP, including LTM and ASM/WAF; AFM experience is strongly preferred.”
The ad says“Integrate on-premises networks with AWS, Azure, and other cloud environments using Direct Connect, ExpressRoute, Transit Gateway, and IPsec VPN technologies.”
The ad says“Integrate on-premises networks with AWS, Azure, and other cloud environments using Direct Connect, ExpressRoute, Transit Gateway, and IPsec VPN technologies.”
The ad says“Configure and support advanced routing protocols, including BGP, OSPF, and EIGRP.”
The ad says“Manage Cisco ASA, Cisco Firepower/FMC, Palo Alto Networks, and other network security platforms.”
The ad says“Manage Cisco ASA, Cisco Firepower/FMC, Palo Alto Networks, and other network security platforms.”
The ad says“Administer Cisco ISE, including 802.1X, NAC, RADIUS/TACACS+, guest access, and endpoint profiling.”
The ad says“Configure and support advanced routing protocols, including BGP, OSPF, and EIGRP.”
The ad says“Configure and maintain F5 BIG-IP load balancers and web application firewalls.”
The ad says“Hands-on experience integrating on-premises networks with AWS, Azure, or GCP, including hybrid routing, connectivity, and security.”
The ad says“Hands-on experience with F5 BIG-IP, including LTM and ASM/WAF; AFM experience is strongly preferred.”
The ad says“Administer Cisco ISE, including 802.1X, NAC, RADIUS/TACACS+, guest access, and endpoint profiling.”
The ad says“Configure and support advanced routing protocols, including BGP, OSPF, and EIGRP.”
The ad says“Manage Cisco ASA, Cisco Firepower/FMC, Palo Alto Networks, and other network security platforms.”
The ad says“Administer Cisco ISE, including 802.1X, NAC, RADIUS/TACACS+, guest access, and endpoint profiling.”
The ad says“Design, implement, upgrade, and maintain routing and switching infrastructure across CES locations.”
The ad says“Design, implement, upgrade, and maintain routing and switching infrastructure across CES locations.”

Company Description

Customized Energy Solutions (CES) is a global energy services and technology company that helps market participants operate, comply, and compete in deregulated electricity and natural gas markets. Founded in 1998 and headquartered in Philadelphia, CES works with utilities, independent power producers, energy suppliers, developers, asset owners, and investors across North America and globally.

CES delivers market intelligence, regulatory and market design support, asset and portfolio management, retail market operations, and energy technology solutions. Our teams track and interpret ISO/RTO rules and policy developments, support resource planning and market participation, manage operational and settlement processes, and develop proprietary software platforms—including CES BLUE, GOLD, RED, GRIDBOOST, and CoMETS—that help clients manage risk, optimize performance, and respond effectively to market change.

CES is committed to advancing transparent, efficient, and non-discriminatory energy markets while delivering practical, high-quality solutions marked by integrity, rigor, and long-term client value.

CES has been nationally and regionally recognized for sustained growth and innovation, including listings on the Inc. 500|5000 and Philadelphia Business Journal’s Top 100 Companies, as well as a Best Places to Work designation with Hall of Fame status for five or more consecutive years.

With headquarters in Philadelphia and offices across the U.S., Canada, Japan, India, and Vietnam, CES offers a collaborative, flexible, and globally connected work environment for professionals passionate about the future of energy.

Job Description

The Senior Network Engineer is a hands-on technical leader responsible for designing, implementing, securing, and supporting CES’s enterprise network infrastructure across North America, India, Vietnam, and Japan. This position reports to the Senior Cloud and Network Security Architect.

The role serves as the primary owner of on-premises routing, switching, firewall, and network security platforms and supports their integration with CES’s cloud and hybrid environments. The successful candidate must be able to manage competing priorities, lead complex network projects, and maintain reliable day-to-day operations.

This position works directly with internal stakeholders and external clients to address connectivity requirements, resolve service-impacting issues, and communicate clearly with both technical and non-technical audiences.

This is an on-site position based at CES’s Philadelphia headquarters. A hybrid work arrangement may be considered in the future based on operational needs and demonstrated performance.

Key Responsibilities

Network Engineering

Design, implement, upgrade, and maintain routing and switching infrastructure across CES locations.
Manage a multi-site, multi-circuit WAN environment with appropriate redundancy, availability, and failover.
Configure and support advanced routing protocols, including BGP, OSPF, and EIGRP.
Establish and maintain network standards, configuration baselines, and change management procedures.
Lead network projects from requirements and planning through implementation, validation, and post-implementation review.
Evaluate and recommend network technologies, vendors, and platforms based on business, security, and growth requirements.

Network Security

Manage Cisco ASA, Cisco Firepower/FMC, Palo Alto Networks, and other network security platforms.
Administer Cisco ISE, including 802.1X, NAC, RADIUS/TACACS+, guest access, and endpoint profiling.
Configure and maintain F5 BIG-IP load balancers and web application firewalls.
Develop and maintain firewall rules, access control policies, and network segmentation strategies.
Serve as the senior escalation point for firewall and network security incidents.

WAN and Cloud Connectivity

Manage primary and failover circuits, carrier relationships, SLA performance, and connectivity issues.
Design and maintain site-to-site, DMVPN, and remote-access VPN infrastructure.
Implement QoS policies for business-critical traffic.
Integrate on-premises networks with AWS, Azure, and other cloud environments using Direct Connect, ExpressRoute, Transit Gateway, and IPsec VPN technologies.
Configure and support VPCs, VNets, security groups, routing tables, and network ACLs.
Collaborate with Cloud and IS teams on secure and scalable hybrid network architecture.

Operations and Support

Monitor network availability, performance, and capacity and proactively address potential issues.
Provide Tier 3 incident support, root cause analysis, and permanent corrective actions.
Maintain network diagrams, IP address records, runbooks, configuration documentation, and change history.
Coordinate with internal teams and external clients regarding connectivity and service-impacting incidents.
Manage multiple concurrent priorities and communicate status, risks, and recommendations to stakeholders.
Participate in a rotating on-call schedule supporting 24x7 network operations.
Mentor junior team members on networking technologies and operational practices.

Qualifications

Required Qualifications

Bachelor’s degree in Information Technology, Computer Science, Network Engineering, or a related field preferred; equivalent professional experience will be considered.
7+ years of hands-on enterprise network engineering experience in a multi-site, multi-vendor environment.
Experience supporting globally distributed networks across remote locations and hybrid on-premises and cloud infrastructure.
Advanced experience administering Cisco ASA and Cisco Firepower/FMC, including policy management, NAT, IPS/IDS, and SSL inspection.
Advanced experience with Cisco ISE, including 802.1X, NAC, RADIUS/TACACS+, endpoint profiling, and posture assessment.
Hands-on experience with F5 BIG-IP, including LTM and ASM/WAF; AFM experience is strongly preferred.
Advanced proficiency configuring and troubleshooting BGP, OSPF, and EIGRP in complex, multi-path environments.
Strong knowledge of WAN architecture, multi-circuit connectivity, redundancy, failover, and fault-tolerant design.
Hands-on experience integrating on-premises networks with AWS, Azure, or GCP, including hybrid routing, connectivity, and security.
Experience supporting physical network equipment across multiple vendors. Experience with Palo Alto Networks or Fortinet is preferred.
Ability to manage multiple projects and operational priorities in a fast-paced environment.
Excellent written and verbal communication skills, including the ability to communicate with technical and non-technical audiences.
Demonstrated client-facing experience coordinating solutions, explaining service impact, and managing high-pressure incidents

Preferred Experience

SD-WAN platforms such as Cisco Viptela, Meraki, Palo Alto Prisma, or comparable technologies.
Network automation and infrastructure-as-code tools such as Python, Ansible, or Terraform.
Regulated or compliance-driven environments, including SOC 2 or NERC CIP.
Enterprise monitoring and observability platforms such as SolarWinds, PRTG, or Kentik.
Zero-trust network access or Secure Service Edge frameworks.

Preferred Certifications

CCNP Enterprise or Security
CCIE
Cisco security or Firepower certification
Palo Alto Networks PCNSE
F5-CA or F5-CTS
Cisco ISE certification
Fortinet certification

Additional Information

CES offers a competitive salary commensurate with experience, plus a performance bonus, profit-sharing, a Medical Savings Account, comprehensive health insurance, disability and life insurance, 401(k) matching, and tuition reimbursement.

Beyond the package, here’s what you can expect at CES:

Meaningful responsibility and the opportunity to make a real impact in dynamic energy markets.
The chance to learn from and collaborate with experienced professionals across global teams.
Ongoing opportunities to strengthen your technical, analytical, and leadership skills.
A supportive culture that values initiative, accountability, and continuous professional growth.

Customized Energy Solutions provides equal employment opportunities to all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.