Network & Infrastructure Engineer

About Keystone

Keystone is one of the largest and fastest-growing insurance brokerages in the country — ranked #26 among U.S. retail brokers and #4 fastest-growing in the Top 50 by Business Insurance. Our platform spans 33+ states, 180+ agency partners, and more than $500 million in revenue — uniting some of the country's most respected independent agencies with the scale, tools, and resources of a national brokerage. Through operational support in finance, HR, marketing, technology, producer development, and M&A, we empower agencies to grow while preserving what makes them who they are — their client relationships and their role in the communities they serve. Guided by our trademarked commitment, "Trust, our most important policy," Keystone is building the insurance solution every family and business can count on. For more information, visit https://mykeystone.com/.

Network & Infrastructure Engineer

Position Summary:

The primary function of this role is to own both the logical and physical network across all Keystone business locations, with the Meter platform as the standard. This role is the technical authority for network architecture — routing, switching, segmentation, and secure connectivity — and drives the adoption, standardization, and long-term direction of Meter across a large, distributed footprint. Most locations follow a simple, repeatable design; this engineer is also responsible for the more complex VLAN, QoS, NAT, and VPN configurations required by corporate and internal environments.

Beyond the logical network, the role owns the physical and on-premise infrastructure at every site: firewalls, switches, access points, onsite servers, structured cabling, ISP and circuit coordination, and facility-adjacent technology such as door access, cameras, and alarms. Partnering with MSP providers for day-to-day (Level 1–2) support and with Facilities and Security on physical systems, the engineer leads site onboarding and offboarding, enforces repeatable standards across legacy and modern environments, and serves as the Tier-3 escalation point for all network and infrastructure issues in a regulated (GLBA/HIPAA/NAIC) environment.

Key Responsibilities:

Meter Platform Ownership & Direction

• Own the Meter platform end-to-end from an engineering perspective, including controller/dashboard configuration, firmware and lifecycle management, network templates, and the roadmap for adoption across all locations.
• Drive Meter adoption and standardization as the organization’s standard network platform, defining how the platform is deployed at scale and setting the direction for future capabilities.
• Serve as the primary technical owner of the Meter vendor relationship — evaluating features, coordinating escalations, and aligning the product roadmap to Keystone’s needs.

Network Architecture & Protocol Design

• Define and maintain network architecture standards — routing, switching, and wireless design patterns — grounded in deep networking-protocol expertise (BGP, OSPF, 802.1Q VLANs, spanning tree, DHCP, DNS).
• Architect and maintain the complex VLAN segmentation, QoS, NAT, and VPN configurations required by corporate and internal environments, while keeping remote-site designs simple and repeatable.
• Own protocol-level design decisions that underpin a reliable, secure, and scalable network across the site footprint.

Physical & On-Site Infrastructure

• Own standards, lifecycle management, and configuration for firewalls, switches, access points, and onsite network/server infrastructure.
• Manage onsite network rooms, structured cabling standards, rack layouts, and equipment placement to a consistent standard across all locations.

Connectivity, ISP & Vendor Coordination

• Coordinate directly with ISPs and third-party vendors for circuits, installations, cutovers, upgrades, and outage triage and resolution.
• Own secure site-to-site and remote-access connectivity between locations, data centers, and cloud (Azure) environments.

Facility & Physical Security Technology

• Support facility-adjacent technology — door access systems, cameras, alarms, and related integrations — in partnership with Facilities and Security.
• Ensure physical and network infrastructure aligns with physical-security and regulated-environment requirements (GLBA/HIPAA/NAIC).

Standardization, Site Readiness & Escalation

• Establish and enforce site readiness standards, minimum-baseline checklists, runbooks, and complete site documentation — network diagrams, IP/VLAN plans, circuit details, and inventory.
• Lead site onboarding/offboarding and M&A cutovers, delivering standardized Meter configurations and validating end-to-end connectivity.
• Serve as the Tier-3 escalation point for complex network and infrastructure issues MSP partners cannot resolve, and establish monitoring, alerting, and performance baselines that reduce drift and reliance on tribal knowledge.
• Perform other duties as assigned.

Qualifications:

• Bachelor’s degree in Information Technology, Networking, or related field preferred; equivalent experience accepted.
• 5+ years of network engineering experience with a strong protocol foundation, plus hands-on multi-site physical infrastructure support.
• Demonstrated experience deploying and standardizing cloud-managed network platforms and managing physical network/server deployments and structured cabling across many locations.
• Networking certifications (CCNP, CCNA, JNCIP/JNCIA, Network+, or equivalent) preferred but not required.
• Extensive, hands-on expertise with networking protocols across routing and switching (e.g., BGP, OSPF, static routing, 802.1Q VLANs, spanning tree, DHCP, DNS).
• Deep experience designing and troubleshooting VLAN segmentation, QoS, NAT, and site-to-site and remote-access VPN.
• Strong knowledge of physical network and server infrastructure: firewalls, switches, wireless access points, structured cabling, and network-room/rack standards.
• Experience with cloud-managed networking / NaaS platforms (Meter, Meraki, or similar) and driving adoption and standardization at scale.
• Experience coordinating ISPs and vendors for circuit installs and cutovers, and troubleshooting end-to-end connectivity issues.
• Understanding of physical security systems (door access, cameras, alarms) and facility technology interfaces.
• Strong firewall, secure-connectivity, and network-security fundamentals appropriate for a regulated environment.
• Excellent documentation, change-control discipline, and cross-team and vendor communication skills.
• Regular travel may be required to support distributed locations, site installs and cutovers, and vendor engagements.
• Ability to pass a criminal background check, as permitted by law.

Work Environment: This position offers remote work options.

Salary Transparency Statement: In accordance with state and local pay transparency laws, we will provide the applicable salary range upon request to candidates who reside in jurisdictions where such disclosure is required.

Benefits:

• Competitive Compensation Package
• Health Insurance Plans (PPO, HSA, Copay Options)
• Dental Insurance
• Vision Insurance
• Company Paid Disability Insurance
• Supplemental Insurance including Critical Illness, Accident, Legal, Pet Insurance
• 401(k) with Safe Harbor Match
• Paid Time Off
• Paid Holidays

No Solicitation Notification to Agencies: Please note that Keystone and our Partner Agencies do not accept unsolicited resumes or calls from third-party recruiters or employment agencies. In the absence of a signed Master Service Agreement and approval from HR to submit resumes for a specific requisition, Keystone will not consider or approve payment to any third parties for hires made.