Network Engineer (Mortgage Industry)

About the role

This role is responsible for designing, implementing, and managing enterprise network infrastructure across on-premises, hybrid, and Azure cloud environments. Key responsibilities include firewall and security operations, Azure networking management, and collaboration with application, security, and helpdesk teams.

Responsibilities

• Review and update Palo Alto security policies, NAT rules, and App-ID/User-ID configurations
• Monitor threat prevention alerts, URL filtering hits, and WildFire submissions
• Manage VPN tunnels (site-to-site and remote access) — check tunnel status, address drops or mismatches
• Monitor NSG flow logs, Azure Network Watcher, and Connection Monitor for anomalies
• Review hub-and-spoke topology health — VNet peering, private endpoints, DNS resolution
• Check Azure Firewall policy hits and deny logs
• Implement and document approved network changes (firewall rules, VLAN changes, routing updates)
• Maintain and update network documentation (topology diagrams, runbooks, IP addressing)
• Ticket & Problem Resolution: Respond to and triage network incidents, perform root cause analysis, and document findings for problem records
• Escalate complex issues to senior engineers or vendors with full diagnostic context (logs, captures, configs)
• Close resolved tickets with detailed resolution notes for knowledge base reuse
• Write or maintain PowerShell/Python/Bash scripts for operational tasks
• Update Terraform configs for infrastructure changes; validate and plan before apply

Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field — or equivalent hands-on experience
• 3–7+ years of network engineering experience in enterprise, multi-site, or hybrid cloud environments
• Deep understanding of TCP/IP, subnetting, routing, switching, VLANs, DNS, and DHCP
• Experience with Cisco Catalyst, Nexus and Meraki switches
• Hands-on experience with firewalls, including rule creation, NAT, and VPNs
• Palo Alto Networks Hands-on experience with Palo Alto NGFW: security policy management, NAT, App-ID, User-ID, and Content-ID
• Experience configuring site-to-site and remote access VPNs using Palo Alto firewalls
• Experience with threat prevention, URL filtering, and WildFire services
• Experience using Panorama / Strata Cloud Manager for centralized firewall management
• Understanding of Zero Trust Network Access (ZTNA) and modern SASE architectures
• Experience with monitoring & tooling: SolarWinds, Wireshark
• Familiarity with SD-WAN and enterprise wireless networking (802.11 standards, controllers, access points)
• Strong communication skills with the ability to work across technical and non-technical teams
• Strong analytical and problem-solving skills with attention to detail
• Ability to participate in on-call rotation as needed

Qualifications

• Core Networking Skills: Experience with BGP in enterprise or hybrid cloud environments, load balancing technologies, network segmentation, including Zero Trust design principles, strong troubleshooting capability across Layer 1–7, including incident response, root cause analysis, and performance optimization, strong understanding of network security concepts: Zero Trust architecture, IDS/IPS, and DDoS mitigation
• Preferred Certifications: Azure Network Engineer Associate, Palo Alto PCNSE, Cisco CCNA / CCNP
• Nice to Have: Strong experience with Azure networking: VNets, subnet design, and IP addressing strategies, experience configuring and managing NSGs, ASGs, and Azure Firewall policies, experience with Azure Load Balancer (Layer 4), Application Gateway (Layer 7), and Azure Front Door, experience designing hybrid connectivity: Site-to-Site VPN, Point-to-Site VPN, and ExpressRoute with BGP routing, experience with Private Endpoints, Private Link, VNet peering, hub-and-spoke architectures, and Azure Private DNS Zones, experience integrating PaaS resources with virtual networks (VNet integration, service endpoints), experience using Azure Network Watcher, Connection Monitor, NSG flow logs, and packet capture, scripting experience in Python, PowerShell, or Bash for automation and operational efficiency, experience with IaC tools: Terraform, ARM templates, and Bicep, familiarity with YAML for configuration, pipelines, and automation workflows, experience with Azure landing zones and large-scale hub-and-spoke architectures, experience with enterprise SASE deployments, experience in DevOps / NetDevOps environments, familiarity with compliance frameworks such as NIST or ISO 27001

Benefits

Base Compensation Information: For residents of the states of CA & CO, and for NY + other areas requiring disclosure, CMG pays a salary of $110,000.00 to $130,000.00 total compensation annually. Factors that affect salary may include: Education, years of experience in Network Engineering, prior work history for a first mortgage lender and software knowledge.