Senior Network Engineer

- Network Implementation & Engineering
- Lead end-to-end implementation, configuration, upgrade, and migration of all routing and switching infrastructure across CES global sites.
- Design, deploy, and maintain enterprise-scale network architecture for a multi-site, multi-circuit WAN environment with a focus on high availability, redundancy, and fault tolerance.
- Architect and implement advanced dynamic routing configurations including BGP, OSPF, and EIGRP in complex, multi-path, multi-vendor environments.
- Develop and enforce network standards, design patterns, and configuration baselines across the enterprise; maintain and improve change management procedures.
- Lead network lifecycle projects from requirements definition through cutover and post-implementation review, including rollback and contingency planning.
- Evaluate and recommend network technologies, vendors, and platforms aligned with CES growth and security requirements.
- Security & Firewall Platform Administration
- Own full lifecycle management of network security platforms including Cisco ASA, Cisco Firepower / FMC, and Palo Alto Networks NGFWs; Fortinet is being evaluated for future remote site deployments and familiarity is valued.
- Administer Cisco ISE for network access control (NAC), 802.1X enforcement, RADIUS/TACACS+ policy, guest access workflows, and endpoint profiling at enterprise scale.
- Administer and maintain F5 BIG-IP Application Delivery Controllers and Web Application Firewalls (WAF), including virtual server configuration, SSL offloading, load balancing profiles, and application firewall policy.
- Develop and maintain firewall rule sets, access control policies, and network segmentation strategies aligned with security, compliance, and business requirements.
- Serve as the senior escalation owner and subject matter expert for all firewall and network security incidents.
- WAN & Connectivity
- Manage multi-site WAN topology including primary and failover circuit configurations, SLA monitoring, performance optimization, and carrier coordination.
- Design and maintain VPN infrastructure for site-to-site, DMVPN, and remote access connectivity across a geographically distributed environment.
- Implement and tune QoS policies to prioritize business-critical and operational technology traffic across WAN and LAN segments.
- Evaluate and recommend WAN optimization and SD-WAN solutions as the network evolves.
- Cloud & Hybrid Network Integration
- Lead the integration of on-premises network architecture with cloud environments including AWS, Azure, and/or GCP, encompassing Transit Gateway, Direct Connect, ExpressRoute, and IPsec/VPN connectivity.
- Collaborate with Cloud and IS teams to design hybrid routing architectures that meet performance, security, and cost objectives.
- Configure and support cloud-native networking constructs including VPCs, VNets, security groups, routing tables, and network ACLs.
- Contribute to cloud architecture reviews and infrastructure roadmap activities to ensure consistent network design and security posture across the hybrid environment.
- Monitoring, Troubleshooting & Operations
- Monitor network performance, availability, and capacity across all sites and circuits using enterprise monitoring platforms; proactively identify and resolve issues before business impact.
- Provide Tier 3 escalation support for network incidents, performing root cause analysis and implementing permanent corrective actions.
- Maintain accurate and current network documentation including topology diagrams, IP address management records, runbooks, and change history.
- Manage competing operational priorities across concurrent workstreams, communicating status clearly to IS leadership and relevant stakeholders.
- Engage directly with internal clients across CES business lines and external clients to support connectivity requirements, coordinate resolution of service-impacting issues, and communicate clearly -- in both technical and non-technical terms -- as the situation requires.
- Participate in a rotating on-call schedule, including nights and weekends, to support 24x7 network availability and rapid incident response.
- Mentor junior IS team members on networking concepts, tools, and operational practices.
Yêu cầu công việc
- Required
- 7+ years of hands-on enterprise network engineering experience in a multi-site, multi-vendor environment.
- Demonstrated experience operating at enterprise scale in a globally distributed organization with multiple remote locations and hybrid on-premises and cloud infrastructure.
- Proven, ownership-level experience with Cisco ASA and Cisco Firepower / FMC, including policy management, NAT, IPS/IDS, and SSL inspection.
- Proven, ownership-level experience with Cisco ISE for 802.1X NAC, RADIUS/TACACS+, profiling, and posture assessment.
- Proven, ownership-level experience with F5 BIG-IP, including LTM, AFM, and ASM/WAF modules.
- Advanced proficiency in BGP, OSPF, and EIGRP dynamic routing protocol configuration, troubleshooting, and optimization in complex, multi-path environments.
- Demonstrated expertise in WAN architecture, multi-circuit design, redundancy, and fault-tolerant topology.
- Hands-on experience integrating on-premises infrastructure with cloud environments (AWS, Azure, and/or GCP), including hybrid routing, connectivity, and security. This is a firm requirement.
- Experience with physical network equipment from multiple vendors; familiarity with Palo Alto Networks and Fortinet platforms is valued, with Fortinet of particular relevance as CES evaluates it for future remote site deployments.
- Proven ability to manage competing priorities across multiple concurrent projects and operational demands in a fast-paced, dynamic environment.
- Excellent written and verbal communication skills with the demonstrated ability to engage clearly and professionally with technical and non-technical stakeholders across all levels of an organization. This is a firm requirement of this role.
- Demonstrated experience in a client-facing capacity, engaging directly with both internal business stakeholders and external clients -- including their technical and non-technical representatives -- to coordinate solutions, convey service impact, and maintain trust during high-pressure situations.
- Knowledge, demonstrated skills, and breadth of relevant experience are the primary qualifications for this role. A bachelor's degree in Information Technology, Computer Science, Network Engineering, or a related field is preferred; equivalent professional experience is fully considered.
- Preferred Certifications
- Cisco Certified Network Professional (CCNP) -- Enterprise or Security track
- Cisco Certified Internetwork Expert (CCIE) -- highly desirable
- Cisco Firepower Specialist or related Cisco Security certification
- Palo Alto Networks Certified Network Security Engineer (PCNSE)
- F5 Certified Administrator (F5-CA) or F5 Certified Technology Specialist (F5-CTS)
- Cisco ISE Specialist certification
- Fortinet NSE 4 or higher (relevant as Fortinet is evaluated for future remote site deployments)
- Preferred / Ideal
- Experience with SD-WAN platforms such as Cisco Viptela, Meraki, Palo Alto Prisma, or comparable solutions.
- Proficiency in network automation and scripting (Python, Ansible, Terraform, or similar) to support infrastructure-as-code practices.
- Experience in regulated or compliance-driven environments (SOC 2, NERC CIP, or similar).
- Experience with enterprise network monitoring and observability platforms (SolarWinds, PRTG, Kentik, or comparable).
- Exposure to zero-trust network access (ZTNA) or Secure Service Edge (SSE) frameworks.
Quyền lợi được hưởng
- Compensation & Benefits
- Salary: Negotiable, depending on experience and suitability.
- 13th-month salary.
- 12 days of annual leave per year.
- Health insurance coverage for employees.
- Additional health insurance support/coverage for f