Manager, Network Infrastructure

About this role

The Manager, Network Infrastructure leads WME's global network and voice estate — the connectivity, wireless, security, and telephony that every office and every user depends on across eight sites. This is a hands-on technical manager: the role both leads a team of four network and voice engineers and serves as the senior technical authority for the estate, staying close enough to the technology to make architecture and troubleshooting calls, not just manage them. The role owns LAN / WAN and switching, Palo Alto firewall management — the platform WME routes and runs site-to-site connectivity from — enterprise wireless, network security and Zero Trust (802.1X and network access control), core network services (DNS / DHCP / IPAM), site-to-site connectivity and internet circuits, and voice / unified communications including Cisco Call Manager. It runs the network as a dependable service, works hand-in-hand with the cybersecurity function on security incident response and triage, and is the seat that finally puts management and backup coverage around a network and voice function that has carried single points of failure for too long. The role builds and operates within the enterprise network and security architecture standards set by the Principal Enterprise Architect, and partners with the cybersecurity governance function and the managed security services partner on Zero Trust and network security. Scope & Boundaries • In scope: people leadership of the global network and voice team; LAN / WAN, switching, Palo Alto firewall management (perimeter, routing, and site-to-site), enterprise wireless, network security (Zero Trust, 802.1X, NAC), segmentation, core network services (DNS / DHCP / IPAM), internet circuits and carrier management, and voice / UC including VoIP and Cisco Call Manager.

• Team & single-point-of-failure mandate: leads four globally distributed network and voice engineers, and owns the backup-coverage plan that eliminates the documented single points of failure in the network and telecom functions — building bench depth rather than letting coverage default upward.

• Owns the wireless contract resource: the WiFi Engineer (12-month contract) reports to this role, including the month-9 renew / convert / absorb decision.

• Relationship to the Principal Enterprise Architect (#55): builds and operates within the enterprise network, Zero Trust, and security architecture standards #55 sets; owns the engineering and operation, not the enterprise standards.

• Cloud connectivity boundary: this role owns the WAN / circuit side of hybrid cloud connectivity (e.g., Azure ExpressRoute / VPN); the Senior Platform Engineer (#61) and server & cloud function own the in-cloud network (VNets, NSGs, in-cloud routing).

• Partnerships: the cybersecurity function on security incident response and triage; the Sr Manager, GRC (#53) on network security governance and audit; the Senior IAM Engineer (#62) on 802.1X / NAC identity integration; the managed security services partner on Zero Trust connectivity.

How This Team Works Enterprise IT runs on one idea: operational excellence — infrastructure that just works, problems fixed at the root, and an engineering bar that keeps climbing. The network and voice estate is where users feel that most directly, and this role sets the standard for the team. Six operating foundations describe how the function works, and a Manager here models all six and builds them into the team. • Service management, done right. Runs network and voice as dependable services with clear ownership, SLAs, and root-cause fixes.

• Continual improvement. Uses monitoring, incidents, and performance data to keep raising network reliability and experience.

• AI fluency. Uses AI and AIOps tooling fluently in network operations, and builds that fluency into the team.

• Ownership and documentation. Owns the estate end to end and leaves runbooks, topology documentation, and decision records that reduce key-person risk.

• Security and risk by default. Designs Zero Trust, segmentation, and strong access control into the network by default.

• Clarity and influence. Leads a distributed team well, and partners credibly with architecture, security, and the business.

Key Responsibilities Responsibilities group into six pillars across leadership and the network and voice estate. 1.  Team Leadership & People Management • Lead, develop, and grow a team of four globally distributed network and voice engineers — hiring, coaching, performance, and career development.

• Own on-call, escalation, and coverage models; build backup coverage that eliminates single points of failure in the network and telecom functions.

• Set team priorities and workload across time zones and sites; own the WiFi Engineer contract resource and its month-9 decision.

2.  Network Infrastructure — LAN / WAN & Connectivity • Own LAN / WAN architecture and operations — Cisco switching and campus / data-center networking, with routing performed on the Palo Alto firewall platform.

• Own site-to-site connectivity and inter-site VPN (terminated on the Palo Alto firewalls); own SD-WAN where deployed.

• Manage internet circuits and carrier / ISP relationships — provisioning, performance, and lifecycle.

• Own core network services — DNS, DHCP, and IP address management (IPAM).

• Own hybrid cloud connectivity — the WAN / circuit side of Azure connectivity (ExpressRoute / VPN); the platform and server & cloud functions own the in-cloud network (VNets, NSGs).

• Own load balancing and application delivery (F5 or equivalent) where deployed.

3.  Enterprise Wireless • Own enterprise wireless (WLAN) architecture, performance, and operations across all sites.

• Ensure a reliable, secure wireless experience for staff, executives, and guests.

• Direct the WiFi Engineer contractor's RF design and remediation work.

4.  Firewall, Network Security & Zero Trust • Own Palo Alto NGFW management — security policy and rule lifecycle, threat

Similar jobs

• Manager, Network Engineering — Crescent · Houston, TX
• Manager, Networking — Datadog · Boston, Massachusetts, USA; Denver, Colorado, USA; New York, New York, USA
• Manager, Network and Infrastructure Security — NorthMark Strategies · Dallas, TX
• Senior Manager, Network Engineering & Infrastructure — Zoox · Foster City, CA
• Manager, Corporate Network Engineering — Anthropic · San Francisco, CA
• Manager, Infrastructure Engineering — Vb · Corporate Headquarters - Roanoke, IN
• Senior Manager, Network Operations — Natera · Austin, TX
• Manager - Network Security — Shi · Somerset, NJ USA | TX, Austin, HQ