Information Technology
Network Administrator Job Description
A network administrator installs, configures and maintains the switches, routers, firewalls, wireless systems and VPN gateways that connect an organization's people, servers and cloud services. The role sits on the IT infrastructure team, between help desk staff who field user problems and network architects who design the topology, and it carries daily responsibility for uptime, access and network security controls. BLS counts the job within network and computer systems administrators, an occupation whose May 2025 median annual wage was $99,130, with the lowest 10 percent earning under $62,640 and the highest 10 percent above $155,050.
Last updated
Role at a glance
- Typical education
- A bachelor's degree in computer and information technology or a related field; some employers accept a certificate or associate's degree.
- Typical experience
- Typically two to four years of help desk, NOC or junior networking work before running a production network.
- Key certifications
- CompTIA Network+, Cisco CCNA, Cisco CCNP Enterprise, CompTIA Security+ and Cisco CCNA Automation.
- Top employer types
- Computer systems design firms, schools and colleges, finance and insurance, state and local government, and information companies.
- Growth outlook
- BLS projects a 4 percent decline for network and computer systems administrators from 2025 to 2035, with about 13,400 openings a year on average.
- AI impact (through 2030)
- BLS notes that some tasks are moving to DevOps-focused developers and Networks-as-a-Service providers, and that routine tasks are being automated.
Duties and responsibilities
- Configure and maintain campus and branch switching, routing and firewall equipment, keeping VLANs, routing and access policies aligned with written standards.
- Monitor link utilization, device health and latency with tools such as Nagios, SolarWinds or Wireshark, and act on alerts before users feel degradation.
- Administer DHCP scopes, DNS zones and the IP address plan so addressing stays accurate as new sites, devices and subnets are added.
- Provision and troubleshoot VPN and remote-access services, including client profiles, multifactor sign-in integration and site-to-site tunnels to partners or cloud providers.
- Implement firewall rules, access control lists and network segmentation requested by the security team, recording the business reason behind each change.
- Plan production changes through formal change control, with scheduled maintenance windows, peer-reviewed configuration diffs and a tested rollback for every affected device.
- Schedule firmware and operating system upgrades, track vendor end-of-support dates and test new releases in a lab before they reach production equipment.
- Diagnose outages and performance complaints layer by layer, from cabling and optics through spanning tree, routing adjacencies and DNS resolution problems.
- Write Ansible playbooks or Python scripts that automate repetitive work such as VLAN provisioning, configuration backups and interface error reporting across many devices.
- Maintain current network diagrams, IP plans, runbooks and as-built configurations so any teammate can restore service without calling the original builder.
Overview
A network administrator keeps an organization's wired, wireless and remote-access networks working from one day to the next. The job covers the access switches in the wiring closets, the routers and firewalls at the internet edge, the wireless controllers that serve offices and warehouses, and the VPN gateways that carry remote staff into internal systems. Where a network architect draws the design, the administrator lives with it: provisioning ports, adjusting VLANs, rotating credentials and repairing whatever breaks.
The day usually starts at the monitoring console. Overnight alerts from tools such as Nagios, SolarWinds or a cloud-managed dashboard show which links flapped, which access points dropped clients and which interfaces ran hot. Some of those alerts are noise, and the craft is telling a failing optic apart from a carrier's scheduled maintenance. When logs disagree with users, a packet capture in Wireshark usually settles the argument.
Ticket work fills the middle of the day. A new hire needs a switch port on the right VLAN, and a badge reader needs a reserved address. The finance team wants a firewall rule opened to a vendor's SFTP server, which means checking the request against policy, writing the rule with the narrowest source and destination that will work, and recording why it exists so the next audit can trace it. Anything that touches production goes through change control: a maintenance window, a peer-reviewed configuration diff and a rollback plan that someone has actually tested.
Address management sits underneath all of it. DHCP scopes, DNS zones and the IP address plan have to agree with each other, and a disciplined IPAM practice is what separates an orderly network from duplicate-address outages. Administrators also own the hardware and software lifecycle: tracking end-of-support dates, scheduling upgrades on switch stacks and testing new firewall releases in a lab before they reach the data center.
Security is built into the routine rather than bolted on. Administrators segment traffic so a compromised laptop cannot reach payroll servers, enforce 802.1X or another form of network access control on wired and wireless ports, review firewall and VPN logs, and close out findings from vulnerability scans. Where a separate security team exists, the administrator may be the person who implements the rule changes its analysts request.
Scripting turns repetitive work into repeatable work. An Ansible playbook that pushes a standard VLAN to every access switch in a building, or a short Python script that pulls interface error counters into a weekly report, removes typing errors and frees time for the problems that need judgment.
Documentation closes the loop. Current diagrams, IP plans, runbooks and as-built configurations are what let a colleague restore service in the middle of the night without phoning the person who built the network. At a small employer one administrator may own the whole stack, servers and phones included; at a large one the work may be split by campus LAN, WAN edge, wireless or data center fabric.
Qualifications
The usual starting point is a bachelor's degree in computer and information technology, computer science, information systems or a related field such as engineering. BLS lists a bachelor's degree as the typical entry-level education for network and computer systems administrators and notes that some employers accept a postsecondary certificate or an associate's degree instead. Coursework in networking, operating systems and scripting is the practical core of any of these programs.
Experience generally builds in stages. A typical route runs through help desk, desktop support or a network operations center seat, where a newcomer learns to work a ticket queue, trace a cable run and escalate cleanly. Plan on roughly two to four years of that support and junior networking work before taking ownership of a production network, though a strong home lab and a good mentor can shorten the climb.
BLS says employers may require administrators to be certified in the products they use, and that certification programs come either from vendors or from vendor-neutral providers. The credentials worth knowing:
- CompTIA Network+ (CompTIA): vendor-neutral grounding in addressing, protocols, cabling and troubleshooting method.
- CCNA (Cisco): the associate-level Cisco credential covering switching, routing, wireless basics and network security.
- CCNP Enterprise (Cisco): the professional-level step for campus and WAN work.
- CompTIA Security+ (CompTIA): security fundamentals for administrators who handle firewall and access-control work.
- CCNA Automation (Cisco): for administrators who script configuration and work with APIs.
- Microsoft Certified: Azure Network Engineer Associate (Microsoft): for hybrid environments with Azure cloud networks.
Anyone studying for the CCNA should watch the calendar. Cisco published new CCNA exam topics on May 20, 2026, calling it the first major CCNA blueprint change since 2019, and it set February 3, 2027 as the date the refreshed exam becomes available. One of the new blueprint's pillars is understanding the role of AI in network management and operations, and Cisco said the earlier exam would stay live until the changeover.
On the technical side, the fundamentals to master are subnetting without a calculator, VLANs and 802.1Q trunking, spanning tree behavior, OSPF and the basics of BGP, NAT, stateful firewall policy, DHCP relay and DNS. Comfort at a Linux shell, version control with Git and enough Python to read and modify an automation script round out the profile.
The soft skills are concrete. Administrators explain outages to people who do not care about routing protocols, write change requests that a reviewer can follow, and stay methodical under pressure instead of changing three things at once and hoping one of them worked.
Career outlook
The federal projections are the starting point, and they are not flattering. BLS counted 323,600 network and computer systems administrator jobs in 2025 and projects that employment will decline 4 percent from 2025 to 2035, to 310,400. For comparison, BLS projects 6 percent growth for computer occupations as a group and 3 percent for all occupations. The occupation combines network and systems administrators, so the figure describes both halves of the field, not network specialists alone.
A shrinking headcount still produces hiring. BLS expects about 13,400 openings a year on average over the decade, and it attributes all of them to the need to replace workers who move to other occupations or leave the labor force, for example to retire. Across the occupation, then, openings come from replacing people rather than from net growth.
BLS is specific about why the occupation is not growing. Administrators will continue to be needed to maintain and upgrade networks, it says, but some of their tasks are increasingly being done by software developers focused on DevOps, some tasks are being outsourced to companies that provide Networks-as-a-Service, and systems administrators are automating routine tasks. Each of those pressures maps to a skill. DevOps teams expect infrastructure changes to arrive as code that can be reviewed and tested. Managed-service contracts still need someone in-house who can write requirements, read the provider's reports and hold it to its service levels. Automation needs people who can build it and catch it when it goes wrong.
The wider August 27, 2026 BLS projections release adds context. BLS projects computer and mathematical occupations to be the fifth fastest growing major occupational group at 7.3 percent, largely from the continued spread of digital tools and AI solutions across the economy. The same release notes that while AI adoption is expected to support demand for some occupations, the associated productivity gains may dampen demand for others. Among the top 10 fastest growing detailed occupations, BLS names data scientists at 34.6 percent; network and computer systems administrators, by contrast, are projected to decline.
Where the jobs are matters for a search. BLS lists the largest employers of network and computer systems administrators as computer systems design and related services at 16 percent, educational services at 13 percent, finance and insurance at 9 percent, state and local government outside education and hospitals at 8 percent, and the information sector at 7 percent. Manufacturers, healthcare providers and government agencies also hire them.
The exits from the role are well marked. BLS notes that network administrators may advance to become computer network architects, or move into management as computer and information systems managers. Security engineering and cloud infrastructure roles draw on the same foundation of routing, firewall policy and troubleshooting discipline.
The practical takeaway for a working administrator is to own the parts of the job that a script or a service contract cannot: diagnosing the strange outage, translating business needs into a design request, judging the risk of a change, and keeping the documentation that lets everyone else move faster.
Sample cover letter
Dear Hiring Manager,
I am applying for the Network Administrator position at your organization. For the past four years I have run the network for a regional engineering firm with three offices, a small colocation cage and roughly two hundred staff who notice within minutes when the Wi-Fi misbehaves.
My daily work spans the full stack. I manage our Cisco Catalyst access and distribution switches, administer the firewall pair at our main office, maintain DHCP and DNS for all three sites, and handle every network escalation that our help desk cannot close. Last spring I replaced the aging wireless system at our two branch offices, which meant surveying both buildings, planning channel and power settings, staging the new access points after hours and cutting over one floor at a time so no team lost connectivity during a project deadline.
I also try to make the network easier for the next person to run. I wrote a set of Ansible playbooks that handle new VLAN requests and nightly configuration backups, and I keep our diagrams and runbooks in a shared repository that the help desk can search. When we had a switch stack fail during a storm last year, a colleague restored service using those runbooks while I was still driving in, which I count as the best result that documentation can produce.
I hold the CCNA and CompTIA Security+ and am studying for the CCNP Enterprise. I am looking for a larger environment with more complex routing, a formal change process and a team that reviews each other's configurations before they reach production.
Thank you for your time. I would welcome the chance to walk through how I would approach your network in its first ninety days.
Sincerely, Jordan Ellis
Frequently asked questions
- What does a Network Administrator do?
- A network administrator installs, configures and maintains the switches, routers, firewalls, wireless systems and VPN gateways that connect an organization's people, servers and cloud services. The role sits on the IT infrastructure team, between help desk staff who field user problems and network architects who design the topology, and it carries daily responsibility for uptime, access and network security controls. BLS counts the job within network and computer systems administrators, an occupation whose May 2025 median annual wage was $99,130, with the lowest 10 percent earning under $62,640 and the highest 10 percent above $155,050.
- What are the main duties of a Network Administrator?
- Core duties include: configure and maintain campus and branch switching, routing and firewall equipment, keeping VLANs, routing and access policies aligned with written standards; monitor link utilization, device health and latency with tools such as Nagios, SolarWinds or Wireshark, and act on alerts before users feel degradation; and administer DHCP scopes, DNS zones and the IP address plan so addressing stays accurate as new sites, devices and subnets are added.
- How much does a Network Administrator earn in different industries?
- Pay shifts with the type of employer. In May 2025, BLS put the median annual wage for network and computer systems administrators at $101,560 in computer systems design and related services, $101,110 in finance and insurance and $86,180 in educational services. State and local government, excluding education and hospitals, came in at $96,390.
- Will AI replace the Network Administrator?
- AI tools are entering the work, but someone still has to answer for a change that touches production. Cisco's new CCIE AI Deploy, Operate, and Optimize Module introduces an AI assistant for configuration, troubleshooting and code creation, and Cisco says expert candidates should be comfortable using such tools for repetitive tasks so they can focus on higher-level decisions. For administrators, that points toward validating what an assistant produces and owning the judgment calls it cannot make.
- How does a network administrator's job differ from a systems administrator's?
- BLS groups both in one occupation but describes a split in focus. Network administrators set up and maintain the infrastructure that connects an organization's computers, such as routers, switches and cables, while systems administrators set up and maintain the organization's software and enable user access. At a small employer one person may cover both.
- Do defense network jobs require specific certifications?
- Positions in the DoD cyber workforce fall under DoD Manual 8140.03, the Cyberspace Workforce Qualification and Management Program, which took effect February 15, 2023 and canceled the older DoD 8570.01-M. The manual identifies members of that workforce by the cyberspace work roles of the positions they hold, and qualification follows from those roles. Read the position description's requirements before choosing which credential to pursue.
- How is a Network Administrator different from a network engineer?
- Where both titles exist, the engineer or architect designs the network and plans major changes, while the administrator operates it day to day, handling provisioning, monitoring and incident response. The titles blur in practice: O*NET lists Network Engineer among the reported job titles for network and computer systems administrators. Read the duties in a posting rather than trusting the title.
Sources
Salary figures and role details on this page were checked against the following sources. Dates show when each was last reviewed.
- Network and Computer Systems Administrators, BLS Occupational Employment and Wage Statistics (May 2025)Checked Nov 2, 2026
- Network and Computer Systems Administrators, Occupational Outlook Handbook, U.S. Bureau of Labor Statistics (August 27, 2026)Checked Nov 2, 2026
- Employment Projections: 2025-2035 Summary, U.S. Bureau of Labor Statistics (August 27, 2026)Checked Nov 2, 2026
- Built for What's Next: Major Updates to CCNA, CCIE, and More, Cisco (May 20, 2026)Checked Nov 2, 2026
- DoD Manual 8140.03, Cyberspace Workforce Qualification and Management Program, DoD Chief Information Officer (February 15, 2023)Checked Nov 2, 2026
- 15-1244.00 Network and Computer Systems Administrators, O*NET OnLine (2026)Checked Nov 2, 2026
- Certifications, Cisco (2026)Checked Nov 2, 2026
- CompTIA Network+ Certification, CompTIA (2026)Checked Nov 2, 2026
- Microsoft Certified: Azure Network Engineer Associate, Microsoft Learn (2026)Checked Nov 2, 2026
Related job descriptions
See all Information Technology jobs →- Cloud Network Administrator$90K–$130K
Cloud Network Administrators manage the virtual networking infrastructure that connects cloud resources to each other, to on-premises environments, and to the internet. They configure VPCs, security groups, VPNs, DNS, and routing policies, and troubleshoot connectivity issues across hybrid cloud architectures.
- Senior Network Administrator$88K–$128K
Senior Network Administrators manage the day-to-day operation and configuration of enterprise network infrastructure including routers, switches, firewalls, and wireless systems. They handle complex troubleshooting, lead network change implementations, mentor junior network staff, and ensure that the organization's network delivers reliable connectivity for all users and applications.
- Cisco Certified Network Architect (CCNA)$85K–$130K
Network professionals holding the Cisco Certified Network Associate (CCNA) credential design, implement, and support enterprise networks: routing, switching, security, and wireless. CCNA validates foundational through intermediate Cisco networking skills and is the entry point for a track that runs through CCNP to CCIE; the title on the job posting is usually Network Engineer or Network Administrator, with Network Architect reserved for the most senior, design-focused positions this credential feeds into. Cisco's 2026 exam refresh added AI and automation content, reflecting how the daily work itself is changing. Practitioners work in corporate IT departments, managed service providers, and systems integrators.
- Cloud Content Delivery Network Engineer$110K–$160K
Cloud Content Delivery Network (CDN) Engineers design, operate, and optimize CDN infrastructure that distributes web content, video, and application data to end users with low latency from edge nodes around the world. They configure CDN policies, troubleshoot performance and caching issues, and integrate CDN layers with cloud origins, security services, and observability platforms.
- Cloud Network Architect$150K–$215K
Cloud Network Architects design the networking infrastructure that organizations build their cloud environments on — from VPC topology and transit connectivity to zero-trust access models and hybrid cloud interconnection. Their decisions create the security boundaries, performance characteristics, and operational constraints that shape cloud capability for years.
- Cloud Network Engineer$95K–$155K
Cloud Network Engineers design, implement, and operate network infrastructure within and between cloud environments — VPCs, virtual WANs, transit gateways, SD-WAN, and the hybrid connections bridging on-premises data centers to public clouds. They translate traditional networking concepts into infrastructure-as-code and maintain the performance, security, and availability of networks that modern applications depend on.