Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 62 days ago

Manager, Network Infrastructure

WME | IMG41 open roles

Pay
$138,750 a year
Where
CA Beverly Hills 9601 Wilshire
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowManager, Network InfrastructureWME | IMG · CA Beverly Hills 9601 Wilshire

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on WME | IMG's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

8.8% of postings close within 7 days. Measured by our own scanner across the market. WME | IMG postings stay open a median of 6 days.

Share of postings closed within
  1. 1.8%1 day
  2. 3.9%3 days
  3. 8.8%7 days
  4. 15.5%14 days
  5. 34.1%30 days
This job: posted 62 days ago

WME | IMG median: 6 days open

The posting

The Manager, Network Infrastructure leads WME's global network and voice estate — the connectivity, wireless, security, and telephony that every office and every user depends on across eight sites. This is a hands-on technical manager: the role both leads a team of four network and voice engineers and serves as the senior technical authority for the estate, staying close enough to the technology to make architecture and troubleshooting calls, not just manage them.

The role owns LAN / WAN and switching, Palo Alto firewall management — the platform WME routes and runs site-to-site connectivity from — enterprise wireless, network security and Zero Trust (802.1X and network access control), core network services (DNS / DHCP / IPAM), site-to-site connectivity and internet circuits, and voice / unified communications including Cisco Call Manager. It runs the network as a dependable service, works hand-in-hand with the cybersecurity function on security incident response and triage, and is the seat that finally puts management and backup coverage around a network and voice function that has carried single points of failure for too long.

The role builds and operates within the enterprise network and security architecture standards set by the Principal Enterprise Architect, and partners with the cybersecurity governance function and the managed security services partner on Zero Trust and network security.

Scope & Boundaries

  • In scope: people leadership of the global network and voice team; LAN / WAN, switching, Palo Alto firewall management (perimeter, routing, and site-to-site), enterprise wireless, network security (Zero Trust, 802.1X, NAC), segmentation, core network services (DNS / DHCP / IPAM), internet circuits and carrier management, and voice / UC including VoIP and Cisco Call Manager.
  • Team & single-point-of-failure mandate: leads four globally distributed network and voice engineers, and owns the backup-coverage plan that eliminates the documented single points of failure in the network and telecom functions — building bench depth rather than letting coverage default upward.
  • Owns the wireless contract resource: the WiFi Engineer (12-month contract) reports to this role, including the month-9 renew / convert / absorb decision.
  • Relationship to the Principal Enterprise Architect (#55): builds and operates within the enterprise network, Zero Trust, and security architecture standards #55 sets; owns the engineering and operation, not the enterprise standards.
  • Cloud connectivity boundary: this role owns the WAN / circuit side of hybrid cloud connectivity (e.g., Azure ExpressRoute / VPN); the Senior Platform Engineer (#61) and server & cloud function own the in-cloud network (VNets, NSGs, in-cloud routing).
  • Partnerships: the cybersecurity function on security incident response and triage; the Sr Manager, GRC (#53) on network security governance and audit; the Senior IAM Engineer (#62) on 802.1X / NAC identity integration; the managed security services partner on Zero Trust connectivity.

How This Team Works

Enterprise IT runs on one idea: operational excellence — infrastructure that just works, problems fixed at the root, and an engineering bar that keeps climbing. The network and voice estate is where users feel that most directly, and this role sets the standard for the team. Six operating foundations describe how the function works, and a Manager here models all six and builds them into the team.

  • Service management, done right. Runs network and voice as dependable services with clear ownership, SLAs, and root-cause fixes.
  • Continual improvement. Uses monitoring, incidents, and performance data to keep raising network reliability and experience.
  • AI fluency. Uses AI and AIOps tooling fluently in network operations, and builds that fluency into the team.
  • Ownership and documentation. Owns the estate end to end and leaves runbooks, topology documentation, and decision records that reduce key-person risk.
  • Security and risk by default. Designs Zero Trust, segmentation, and strong access control into the network by default.
  • Clarity and influence. Leads a distributed team well, and partners credibly with architecture, security, and the business.

Key Responsibilities

Responsibilities group into six pillars across leadership and the network and voice estate.

1. Team Leadership & People Management

  • Lead, develop, and grow a team of four globally distributed network and voice engineers — hiring, coaching, performance, and career development.
  • Own on-call, escalation, and coverage models; build backup coverage that eliminates single points of failure in the network and telecom functions.
  • Set team priorities and workload across time zones and sites; own the WiFi Engineer contract resource and its month-9 decision.

2. Network Infrastructure — LAN / WAN & Connectivity

  • Own LAN / WAN architecture and operations — Cisco switching and campus / data-center networking, with routing performed on the Palo Alto firewall platform.
  • Own site-to-site connectivity and inter-site VPN (terminated on the Palo Alto firewalls); own SD-WAN where deployed.
  • Manage internet circuits and carrier / ISP relationships — provisioning, performance, and lifecycle.
  • Own core network services — DNS, DHCP, and IP address management (IPAM).
  • Own hybrid cloud connectivity — the WAN / circuit side of Azure connectivity (ExpressRoute / VPN); the platform and server & cloud functions own the in-cloud network (VNets, NSGs).
  • Own load balancing and application delivery (F5 or equivalent) where deployed.

3. Enterprise Wireless

  • Own enterprise wireless (WLAN) architecture, performance, and operations across all sites.
  • Ensure a reliable, secure wireless experience for staff, executives, and guests.
  • Direct the WiFi Engineer contractor's RF design and remediation work.

4. Firewall, Network Security & Zero Trust

  • Own Palo Alto NGFW management — security policy and rule lifecycle, threat prevention (IPS), and URL filtering. The firewalls are also the platform for perimeter / inter-site routing and site-to-site VPN.
  • Implement and operate Zero Trust network architecture, segmentation, 802.1X, and network access control (NAC) — within the enterprise standards set by architecture; partner with the IAM function on identity-driven network access.
  • Own remote access VPN (e.g., Palo Alto GlobalProtect) and SASE / SSE connectivity, in partnership with the managed security services partner.
  • Partner with the cybersecurity function on security incident response and triage — the network and firewall estate is a primary control point and telemetry source.

5. Voice & Unified Communications

  • Own VoIP and unified communications across the estate, including Cisco Call Manager (CUCM) administration and operations.
  • Manage dial plans, SIP trunking, PSTN connectivity, and E911 / emergency-calling compliance across sites.
  • Own voice quality of service (QoS) end-to-end, including QoS across the network path.
  • Build backup coverage for the voice / telecom function to remove key-person risk.

6. Network Management, Operations & Vendor Lifecycle

  • Own network monitoring, observability, performance management, and capacity planning.
  • Own network resilience — redundancy, failover, and disaster-recovery posture for critical connectivity and voice.
  • Run change management for the network and voice estate; maintain topology and configuration documentation.
  • Own the physical network layer across sites — structured cabling, IDF / MDF, patching, and switch hardware lifecycle.
  • Drive network automation and infrastructure-as-code — Ansible, Python, and platform automation (e.g., Panorama) — to reduce manual change and configuration drift.
  • Manage network and voice vendors, hardware / circuit lifecycle, and renewals; apply AI / AIOps tooling to operations where it adds value.

Required Qualifications

  • 8+ years in network engineering with progressive responsibility, including team-lead or people-management experience.
  • Deep routing and switching — Cisco switching and campus / data-center networking, with routing and site-to-site VPN on Palo Alto firewalls.
  • Palo Alto NGFW management — security policy, threat prevention, URL filtering, and firewall-based routing / site-to-site VPN.
  • Core network services — DNS, DHCP, and IP address management (IPAM).
  • Enterprise wireless (WLAN) design and operations experience.
  • Network security expertise — Zero Trust network architecture, 802.1X, network access control (NAC), and segmentation.
  • Remote access VPN and secure connectivity — GlobalProtect, SASE / SSE, or equivalent.
  • Voice / unified communications — VoIP, Cisco Call Manager (CUCM), SIP trunking, PSTN, and E911.
  • Experience managing internet circuits and carrier / ISP relationships.
  • Hybrid cloud networking — Azure ExpressRoute / VPN and hybrid connectivity.
  • Load balancing / application delivery (F5 or equivalent), and network automation / scripting (Ansible, Python, or equivalent).
  • Experience partnering with security teams on incident response and triage.
  • Experience running distributed / global network operations across multiple sites and time zones.
  • People management — hiring, developing, and leading engineers, ideally distributed.
  • Strong written and verbal communication; demonstrated use of AI tooling in technical work.

Preferred Qualifications

  • CCNP or CCIE (Enterprise); wireless and security specializations a plus.
  • Palo Alto Networks certification (PCNSE).
  • Cisco ISE (NAC) and Zscaler / ZTNA experience.
  • SD-WAN design and operations experience.
  • Azure networking (AZ-700) or equivalent hybrid-cloud networking experience.
  • Cisco Unified Communications / Call Manager certification.
  • Experience in multi-region, high-availability, or media / entertainment environments.

Per local requirements and in the interest of transparency, the rate shown below reflects the prevalent current hiring range for this position. Hiring pay rates are based on a number of factors, including location and may vary depending on job-related qualifications, knowledge, skills and experience. The company strives to provide locally competitive rewards packages, which include base rate along with, as applicable, short- and long-term incentives, growth and developmental opportunities, and robust benefits, such as health care, retirement, vacation and other paid time off, and additional offerings.

Hiring Rate Minimum:

$138,750 annually (minimum will not fall below the applicable state/local minimum salary thresholds)

Hiring Rate Maximum:

$185,000 annually

WME is an equal opportunity employer and encourages applications from qualified and eligible candidates regardless of sex, race, disability, age, sexual orientation, or religion or belief.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against WME | IMG's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on WME | IMG's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    WME | IMG's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.