Senior Network Engineer

About the Role

The Senior Network Engineer is responsible for the design, engineering, implementation, and support of the organization's IT network infrastructure. This hands-on role requires advanced technical expertise in enterprise-class network platforms and technologies, with a focus on security. The position involves managing and maintaining a wide range of network platforms, including Cisco switches and routers, LAN/WAN technologies, and an SD-WAN environment connecting all locations and multiple data centers using VeloCloud appliances, while adhering to security best practices. The role also supports a cloud-based Ubiquiti wireless environment and network-attached video surveillance systems at each site.

Responsibilities

• Design, engineer, implement, and support IT network infrastructure, including configuration of enterprise routing protocols (BGP, OSPF, ECMP) and SD-WAN technologies.
• Configure and manage FortiGate and Palo Alto firewalls, routers, switches, wireless access controllers, and other networking devices.
• Manage and maintain network software and toolsets, including Palo Alto Panorama, FortiManager, and FortiAnalyzer.
• Troubleshoot technical problems associated with network hardware, connectivity, and performance for team members and remote location users.
• Provide after-hours and weekend support (remote and onsite) to minimize business interruptions, including network outages and major issue troubleshooting.
• Serve as Tier 3 support for escalation of Service Desk tickets.
• Collaborate on special networking projects and other duties as required.
• Configure and manage Layer-2 switching, VLAN segmentation, and Layer-3 routing protocols.
• Build and troubleshoot IPSec VPN and SSL VPN tunnels.
• Maintain and support data center operations, including VXLAN configurations for multi-data-center connectivity (preferred).
• Create and maintain technical diagrams using Microsoft Visio or similar applications.

Requirements

• BS/A degree in a relevant field and 3-5 years of advanced experience in design, maintenance, and support of network infrastructure, or 5-8 years of advanced experience in lieu of a degree.
• Hands-on experience managing Palo Alto Firewalls through Panorama, including NAT, DoS, decryption, and security policies.
• Experience with Palo Alto environments, including SLR report analysis, Global Protect, Panorama, Prisma Cloud, and general security best practices.
• Hands-on experience centrally managing and monitoring FortiGates through FortiManager and FortiAnalyzer.
• 3-5 years of experience supporting a VeloCloud SD-WAN environment or other SD-WAN solutions.
• Experience with enterprise routing protocols (BGP, OSPF, ECMP) and SD-WAN technologies.
• Advanced experience supporting large-scale infrastructure projects.
• Minimum 3-5 years of experience with Cisco Layer-2 switching, Layer-3 routing protocols, and VLAN segmentation.
• 2-4 years of experience with Palo Alto Prisma Access in the Cloud.
• Experience working in a NOC environment or handling Tier 2 network escalations.
• In-depth knowledge of TCP/IP protocol and experience troubleshooting IPSEC VPN environments.
• Strong problem-solving skills and ability to devise creative, flexible solutions.
• Excellent communication skills, including the ability to articulate technical information clearly.
• Highly motivated, self-starting, and committed to achieving results with a strong sense of ownership.
• Organizational proficiency to multitask in a fast-paced environment with minimal supervision.

Preferred Qualifications

• Cisco Certified Network Professional (CCNP) or Cisco Certified Network Associate (CCNA) certification.
• VMware SD-WAN (VeloCloud) certification or equivalent vendor certification.
• Palo Alto Networks Certified Network Security Engineer (PCNSE) or Palo Alto Networks Certified Network Security Administrator (PCNSA) certification.
• Experience with Fortinet, Check Point, or other next-generation firewalls.
• Working experience with ITIL practices and incident/change management processes.
• Experience with network monitoring tools such as NetBox, Zabbix, Rconfig, or SolarWinds.
• Scripting or automation experience (e.g., Python, Ansible, or PowerShell).
• Working knowledge of industrial networking or operational technologies.
• Exposure to cloud networking (AWS, Azure, or GCP) and hybrid infrastructure environments.