insight - NC - Senior Level 3 Network Engineer
About the role
We are seeking a highly experienced Senior L3 Network Engineer with deep expertise across Cisco networking, Palo Alto security, SD-WAN, cloud networking, network automation, and Operational Technology (OT)/manufacturing environments. This is a senior-level, hands-on engineering role responsible for supporting complex enterprise, data center, cloud, WAN, and manufacturing networks. The ideal candidate must have strong troubleshooting and architecture experience and be comfortable supporting critical environments, leading modernization initiatives, resolving major incidents, and collaborating across security, cloud, compute, and infrastructure teams. Candidates must meet all of the core technical requirements listed below, including hands-on experience with both Ansible and Terraform.
The successful candidate will be a senior-level network engineer who can operate independently in complex enterprise environments and has demonstrated expertise across Cisco, Palo Alto, SD-WAN, multi-cloud networking, automation, and manufacturing/OT networks. This position requires a candidate who can combine deep hands-on troubleshooting capabilities with network design, automation, security, and modernization experience.
Responsibilities
- Provide Level 3 (L3) network support for enterprise, data center, cloud, and manufacturing network environments.
- Design, deploy, configure, maintain, and troubleshoot Cisco routing and switching infrastructure.
- Manage advanced routing technologies and protocols, including BGP, OSPF, EIGRP, MPLS, and route redistribution.
- Configure and support Layer 2 and Layer 3 networking technologies, including VLANs, Spanning Tree Protocol (STP), EtherChannel, HSRP, and Quality of Service (QoS).
- Administer and support Palo Alto Strata Next-Generation Firewalls, including Panorama, GlobalProtect, NAT, and security policies.
- Implement and support Zero Trust architectures, network segmentation, and IT/OT security controls.
- Design, deploy, and support enterprise SD-WAN solutions, including Cisco SD-WAN / Viptela and Palo Alto Prisma SD-WAN.
- Support projects within the Compute area, including the VMware vSAN project in the U.S. domestic region.
- Manage WAN connectivity across MPLS, Internet, Dedicated Internet Access (DIA), VPN, and hybrid network environments.
- Design, deploy, and support cloud networking across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP).
- Implement and maintain cloud connectivity and networking solutions, including Azure ExpressRoute, AWS Direct Connect, Cloud VPN, AWS Transit Gateway, and Azure Virtual WAN.
- Support Operational Technology (OT) and industrial network environments, including manufacturing networks, SCADA, PLC systems, MES environments, and other industrial systems.
- Perform root cause analysis, problem management, and major incident resolution for complex network outages and performance issues.
- Develop and maintain network automation and Infrastructure-as-Code (IaC) solutions using Terraform, Ansible, and Python.
- Monitor network performance, availability, and security using enterprise monitoring and security platforms.
- Create and maintain detailed technical documentation, network standards, diagrams, procedures, and operational documentation.
- Lead and contribute to network modernization initiatives and strategic infrastructure projects.
- Collaborate closely with security, cloud, compute, infrastructure, and application teams to deliver enterprise technology initiatives.
Requirements
- 10+ years of enterprise network engineering experience
- Work authorization: US Citizen or Green Card (no third‑party inquiries)
- Hands‑on experience with Ansible and Terraform (required)
Skills
- Cisco Routing & Switching: Catalyst, Nexus, ISR, ASR
- Palo Alto technologies: Strata, Panorama, GlobalProtect
- SD‑WAN technologies: Cisco Viptela, Palo Alto Prisma SD‑WAN
- Cloud networking: Microsoft Azure, Amazon Web Services (AWS), Google Cloud Platform (GCP)
- Advanced routing protocols: BGP, OSPF, EIGRP, MPLS
- Network security and