Staff Network Engineer

About the role

You enjoy designing and implementing secure, high performance network topologies for Internet-facing SaaS applications. You can conduct security assessments and make recommendations on networks with multiple VLANs, DMZ, point-to-point connections between our data centers, WAFs, and Internet connectivity for a SaaS application. You can configure and upgrade Dell switches, routers and PAN firewalls. You know how to conduct incident triage and response, including working with firewall and device logs, investigating security events, and protecting the forensic value of data. You can improve and extend monitoring for better incident reporting and response. You embrace the ethic of “network as code” to provide consistency and security for both Public Cloud and data center deployments. You hold yourself to a high standard when writing clean, performant, and maintainable code for deployments and configuration management. You enjoy finding new ways to improve the design, performance, and testing of the network systems that you deploy and operate.

Responsibilities

• Conduct security assessments and make recommendations on networks with multiple VLANs, DMZ, point-to-point connections between our data centers, WAFs, and Internet connectivity for a SaaS application.
• Configure and upgrade Dell switches, routers and PAN firewalls.
• Conduct incident triage and response, including working with firewall and device logs, investigating security events, and protecting the forensic value of data.
• Improve and extend monitoring for better incident reporting and response.
• Embrace the ethic of “network as code” to provide consistency and security for both Public Cloud and data center deployments.
• Write clean, performant, and maintainable code for deployments and configuration management.
• Find new ways to improve the design, performance, and testing of the network systems that you deploy and operate.

Requirements

• Hold a Bachelor’s degree in a technical field and have at least 8 years of professional industry experience as a Network Engineer.
• Be a great team player who has a strong desire to build and operate secure high performance networks for Machine Learning-driven Internet facing SaaS applications and APIs.
• Have extensive background in planning and crafting projects and analyzing existing network systems and procedures for security and performance efficiencies.
• Have professional experience with Dell OS10, Dell network switches, and PAN firewalls.
• Have professional experience with Cloud-based WAFs such as Cloudflare or Akamai.
• Have a deep understanding of network security systems, intrusion detection systems and protocols including ACE, ACS, VPN, GRE, IPSEC, IKE, TACACS, RADIUS, ACLs, 802.1x, audits, log files, etc.
• Have experienced understanding of networking and routing protocols such as TCP/IP, BGP4 (multi-homing), OSPF (multi-area), RIP, ISIS, etc.
• Have working knowledge in the operation of Ethernet LAN switching protocols and standards including VLANs, VLAN aggregation, EtherChannel, PVLANs, Spanning Tree & Rapid Spanning Tree, 802.1Q.
• Have strong scripting experience in automated firewall policy management and network automation and analytics using Ansible and Python.
• Have professional experience using Ansible for configuration management tools.
• Have experienced with Git workflows to foster collaboration.
• Have professional experience with Linux and Unix style network equipment operating systems at the command line.
• Have professional experience with Public Cloud platforms (IaaS/PaaS), especially AWS.
• Have experience with multi-tier architectures, including standard methodologies for tier isolation.
• Have experienced with uptime/availability engineering, performance metrics, and monitoring.
• Have professional experience using monitoring tools like Nagios, Munin, and Zenoss.
• Have professional experience in the design, implementation and testing of business continuity and disaster recovery plans.
• Be well-versed in commercial InfoSec requirements and standards, including risk analysis, compliance obligations, and periodic change reviews.
• Have a professional information security certification (CISSP, CRISC, CISM) as a plus.
• Have excellent communication, presentation and collaborative problem-solving skills.

Qualifications

You are legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.

Skills

• Network Security Systems
• Intrusion Detection Systems
• Routing Protocols
• Networking and Routing Protocols
• Linux and Unix
• Public Cloud Platforms
• Multi-Tier Architectures
• Monitoring Tools
• Business Continuity and Disaster Recovery
• Information Security Certifications

Benefits

We offer a competitive salary, company equity, exceptional benefits package, flexible vacation and paid time off, employer-matched 401(k) plan, and a fun environment where work-life balance is valued. The California base salary range for this full-time position is $195,000 to $220,000. Our salary ranges are determined by role, level, and location, and the range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. Within the range, individual pay is determined by work location, role-related knowledge and skills, depth of experience, relevant education or training, and additional role-related considerations. Depending on the position offered, equity, bonuses, commission, or other forms of compensation may also be provided as part of a total compensation package, in addition to a full range of medical, financial, and other benefits.

Pay

The California base salary range for this full-time position is $195,000 to $220,000.

Schedule

We are currently using a hybrid mix of working from home and in the office, with regular in-person touchpoints and shared office space.