Senior Network Engineer

Job Description
We're looking for engineers with a stronger security-based background. The candidates you sent were good, but a bit redundant for us as we already have people who are strong with Routing and Switching. I would like to update the search to include and prefer candidates with NSE4 or NSE7 PCNSA or PCNSE and have experience working in a Security Operation Center (SOC). Also, any experience with Azure or AWS is a bonus as we're doing more and more in that space every day

Position Summary:
The Senior Network Engineer is responsible for the design, engineering, implementation, and support of the organization's IT network infrastructure. Duties include (but are not limited to) IT Infrastructure Engineering, Network Operations, support of Industrial Network Technologies and Network Security. This position involves managing and maintaining a wide range of network platforms, including Cisco switches and routers, LAN/WAN technologies, SD-WAN environment connecting all locations and multiple data centers using VeloCloud appliances while keeping security best practices. The role also supports a cloud-based Ubiquiti wireless environment and network-attached video surveillance systems at each site. This is a hands-on role that requires advanced technical expertise in enterprise-class network infrastructure platforms and technologies with the ability to operate effectively in a complex, high-availability environment.

Responsibilities and Duties:

• Must possess the ability to work well and collaborate with team members including all personnel across the organization.
• The Senior Network Engineer is responsible for configuration of enterprise routing protocols like BGP, OSPF, ECMP and SD-WAN technologies, switching L2 provisioning, installation, configuration, maintenance of network hardware/firmware, and other network related infrastructure.
• Configuring and managing FortiGate and Palo Alto firewalls, routers, switches, wireless access controllers, and other networking devices.
• Manage and maintain existing network software and toolsets including Palo Alto Panorama, FortiManager and FortiAnalyzer.
• Troubleshooting and assists team members and remote location users with technical problems associated with network hardware, network connectivity, and Data/Voice Latency and performance.
• Work after hours and weekends as necessary to minimize business interruptions (network outages, troubleshooting major issues, etc.) and provide non-business hour support (both remote and onsite).
• Provide Tier 3 support for escalation of Service Desk tickets.
• Engaged and collaborate in special Networking projects
• Other duties as required.

Education/Experience Requirements:

• BS/A degree in relevant field and 3-5 years of advanced experience design, maintenance and support of network infrastructure Or 5 to 8 years Advanced experiences in leu of a degree.
• Hands-on experience managing Palo Alto Firewalls through Panorama and configuring NAT, DoS, Decryption, and Security policies
• Hands-on experience with Palo Alto Environments to include SLR report analysis, Global Protect, Panorama and Prisma cloud and general security best practices.
• Hands-on experience centrally managing and monitoring FortiGates through FortiManager and FortiAnalyzer
• 3-5 years of experience supporting a VeloCloud SD-WAN environment other SDWan solutions.
• Experience configuring VXLAN to connect multiple data center environments is a plus.
• Experience with enterprise routing protocols like BGP, OSPF, ECMP and SD-WAN technologies.
• Experience building and troubleshooting IPSec VPN and SSL VPN tunnels
• Advanced experience supporting large-scale infrastructure projects.
• Minimum 3-5 years of experience with Cisco Layer-2 switching, Layer-3 routing protocols and VLAN segmentation(s).
• Minimum of 2 to 4 years' experience with Palo Alto Prisma Access in the Cloud
• Advanced experience in maintaining and supporting data center operations.
• Must have experience working in NOC environment or handling Tier 2 network escalations.
• Requires in-depth knowledge of TCP/IP protocol.
• Experienced in supporting and troubleshooting IPSEC VPN environments.
• In depth experience drawing technical diagrams in Microsoft Visio or similar applications.
• Aptitude and desire to learn new technologies.
• Excellent communication skills.
• Must possess organizational proficiencies to multitask and work in a fast-paced environment with minimum supervision.
• Must be highly motivated, self-starting, and committed to achieving results and have a strong sense of ownership and follow-through to resolution.
• Must have strong problem-solving skills and be able to come up with creative and flexible solutions.
• Ability to articulate technical information in easy-to-understand terms.

Preferred Qualifications

• Cisco Certified Network Professional (CCNP) or Cisco Certified Network Associate (CCNA) certification.
• VMware SD-WAN (VeloCloud) certification or equivalent vendor certification.
• Palo Alto Networks Certified Network Security Engineer (PCNSE) or Palo Alto Networks Certified Network Security Administrator (PCNSA) certification.
• Experienced with Fortinet, Check Point, or other next-generation firewalls.
• Working experience with ITIL practices and incident/change management processes.
• Experience with network monitoring tools such as NetBox, Zabbix, Rconfig or Solarwinds and others.
• Scripting or automation experience (e.g., Python, Ansible, or PowerShell).
• Working Knowledge of Industrial Networking or Operational technologies - Network.
• Exposure to cloud networking (AWS, Azure, or GCP) and hybrid infrastructure environments.