Lead Network Engineer

BJ’s Wholesale Club is powered by more than 30,000 team members who make a real impact every day. Whether you're stocking shelves, solving problems or shaping strategy, your work helps families save on what matters most.

We’re a team built on purpose and opportunity. Join us and be part of something meaningful.

At BJ’s Wholesale Club, our team members are at the heart of everything we do. That’s why we offer a comprehensive benefits package designed to support your health, well-being and future – both on and off the job. When you grow, we grow.

• Weekly Pay: Get paid every week so that you can manage your money on your terms.
• Daily Pay: Access your earned pay before payday, giving you more flexibility when you need it. (fee may apply.)
• Free BJ’s Memberships: Enjoy a complimentary The Club Card Membership, plus a free Supplemental Membership for someone in your household.*
• Generous Paid Time Off: Take the time you need with vacation, personal, sick days, holidays, bereavement, and jury duty leave.*
• Flexible and Affordable Health Benefits: Choose from three medical plans, and access optional dental, vision, Health Savings Account (HSA), and flexible spending account options to fit your lifestyle.*
• 401(k) Retirement Savings Plan: Build your financial future with a company match (available to team members 18 and older).*
• Employee Stock Purchase Plan:  Accumulate funds through after-tax payroll deductions that can be used to purchase shares of BJ’s common stock at a 15% discount.*

*Eligibility requirements vary by position.

We are seeking an experienced Lead Network Engineer to design, deploy, and manage enterprise-grade network infrastructure across our retail store portfolio and distribution center operations. This role is the subject matter expert for Aruba wireless solutions, providing hands-on leadership for WiFi, LAN/WAN designs and deployments. The ideal candidate thrives in fast-paced retail and logistics environments, balances project work with escalation support, and brings a proactive mindset to network reliability and security.

• Lead end-to-end Aruba WiFi deployments for new and existing retail stores and distribution centers, from design through post-deployment validation.

• Conduct professional RF site surveys using Ekahau Pro and similar predictive/post-installation tools; produce detailed heat maps, coverage reports, and capacity recommendations.

• Design and maintain Aruba wireless infrastructure including APs (indoor/outdoor), Mobility Conductors/Gateways, and AOS-8/AOS-10 architecture.

• Optimize RF environments for high-density retail and warehouse settings, including 2.4GHz/5GHz/6GHz band management, channel planning, and interference mitigation.

• Develop and enforce wireless security standards (WPA3-Enterprise, 802.1X, PPSK) aligned with PCI-DSS requirements for retail payment environments.

• Administer Aruba ClearPass for network access control, guest management, and device onboarding as it relates to wireless policy enforcement.

• Design, deploy, and maintain switching infrastructure (Aruba CX, HP ProCurve) across retail stores and distribution centers.

• Manage VLAN segmentation strategies for POS systems, corporate devices, IoT/OT equipment, and guest networks.

• Configure and troubleshoot spanning tree (MSTP/RSTP), link aggregation (LACP), and Layer 3 routing protocols (OSPF, BGP).

• Perform capacity planning and lifecycle management for access-layer and distribution-layer switching infrastructure.

• Architect, deploy, and manage Fortinet SD-WAN solutions across retail branch locations, replacing or augmenting traditional MPLS circuits with broadband/LTE/5G overlays.

• Configure FortiGate firewall policies, IPSec VPN tunnels, and SD-WAN application steering rules aligned to business-critical retail applications (POS, inventory, ERP).

• Monitor WAN performance and SLA adherence using Fortinet analytics and third-party NMS tools; proactively identify and resolve connectivity degradation.

• Collaborate with ISPs and telecom vendors to manage circuit provisioning, failover configurations, and SLA enforcement.

• Maintain FortiManager and FortiAnalyzer for centralized policy management and log analytics across distributed locations.

• Serve as Level 3 escalation for network incidents, providing root-cause analysis and permanent corrective actions.

• Lead network workstreams for new store openings, store refreshes, and DC expansions — coordinating with construction, real estate, and IT project managers.

• Maintain comprehensive network documentation including topology diagrams, IP address management (IPAM), configuration standards, and runbooks.

• Define and enforce network standards, change management procedures, and configuration baselines across the enterprise.

• Mentor junior and mid-level network engineers and provide knowledge transfer on Aruba and Fortinet technologies.

• Aruba Certified Mobility Professional (ACMP) or Aruba Certified ClearPass Associate/Professional (ACCA/ACCP).

• CCNP (Enterprise or Security) or equivalent vendor-neutral certification.

• Experience with Aruba Central (cloud-managed networking) and Aruba AIOps.

• Familiarity with retail-specific systems: POS network requirements, IoT/OT device segmentation (HVAC, digital signage, self-checkout), and loss prevention systems.

• Experience with SD-WAN migration projects from legacy MPLS to hybrid WAN architectures.

• Familiarity with ITSM platforms (ServiceNow) and IPAM solutions (Infoblox, SolarWinds IPAM).

• Knowledge of cloud networking concepts (AWS/Azure VPN Gateways, Direct Connect/ExpressRoute).

• Experience with automation and scripting (Python, Ansible) for network configuration management.

• Hybrid work model — 3 days per week mandatory in-office at Marlborough, MA headquarters; remaining days remote.

• Up to 25% travel to retail stores and distribution centers for site surveys, new store openings, network installations, and infrastructure audits.

• Ability to work in active retail and warehouse environments, including walking distribution center floors and working in network closets/data rooms.

• Must be able to lift and carry network equipment (APs, switches, routers) up to 50 lbs and work on ladders when required for AP mounting.

• Occasional after-hours and weekend work required for maintenance windows, store openings, and critical incident response.

• On-call rotation participation for after-hours network support escalation.

This is a hybrid role. Tuesday through Thursday are in-office days at BJ's Club Support Center in Marlborough, MA and Monday and Friday are remote days.

• 7 – 10 years of progressive hands-on experience in enterprise network engineering.

• Minimum 3 years of experience in retail, hospitality, distribution center, or warehouse network environments with multi-site responsibility (50+ locations strongly preferred).

• Bachelor's degree in Computer Science, Information Technology, Network Engineering, or equivalent combination of education and experience.

• Aruba Wireless: Deep expertise in Aruba AP deployment, Mobility Controller/Conductor, AOS-8 and AOS-10, RF design, and troubleshooting.

• WiFi Site Survey Tools: Proficiency with Ekahau Pro (predictive design, post-installation validation)

• Aruba ClearPass: Working knowledge of CPPM for NAC, guest portals, and device profiling in support of wireless deployments.

• Fortinet SD-WAN: Demonstrated experience with FortiGate SD-WAN, FortiManager, FortiAnalyzer, and FortiOS policy management.

• Switching / LAN: Aruba CX, VLANs, 802.1Q trunking, LACP, STP/MSTP, Layer 3 inter-VLAN routing.

• WAN Protocols: BGP, OSPF, IPSec VPN, WAN circuit management.

• Security: Firewall policy management, 802.1X/NAC, PCI-DSS network segmentation requirements.

• Network Monitoring: Proficiency with SNMP-based NMS tools (SolarWinds, PRTG, or equivalent), packet capture analysis (Wireshark).

Strong analytical skills for diagnosing complex, multi-layer network issues in production retail environments.

Ability to manage multiple concurrent network projects (store openings, refreshes, DC expansions) from scoping through delivery.

Translates complex technical topics for non-technical stakeholders including retail operations and store leadership.

Maintains accurate, up-to-date network documentation, diagrams, and change records without prompting.

Works effectively across IT, security, vendor, and field operations teams; builds credibility through expertise and reliability.

Proactively identifies network performance gaps and proposes solutions before issues escalate.