Network-Engineer

Security: Palo Alto Networks next-generation firewalls (PAN-OS) across on-premises data centers and Azure, GlobalProtect VPN, Cloudflare, and Zero Trust / network access control.

Switching and compute fabric: Cisco Catalyst campus switching and Cisco Nexus (NX-OS) data-center switching; Cisco UCS X-Series (chassis, Fabric Interconnects, Intersight).

Routing and WAN: BGP, OSPF, and EIGRP across a multi-site WAN (MPLS / DIA circuits) with site-to-site IPSec VPN.

Storage networking: NetApp ONTAP (FAS / AFF) with SnapMirror replication; Tintri.

Cloud: a substantial and growing Microsoft Azure networking footprint (hub-and-spoke VNets, peering, VPN Gateway, Azure Firewall, NSGs, and user-defined routes).

Wireless and monitoring: UniFi wireless; Site24x7 monitoring.

Operate, maintain, and monitor enterprise LAN, WAN, and UniFi wireless infrastructure across multiple sites.

Administer Palo Alto Networks firewalls (PAN-OS), including security policy, NAT, threat prevention, URL filtering, and GlobalProtect VPN; tune App-ID and SSL / TLS decryption.

Design, implement, and support Microsoft Azure networking, including hub-and-spoke VNets, peering, VPN Gateway, Azure Firewall, NSGs, and user-defined routes.

Configure and troubleshoot routing and switching (BGP, OSPF, EIGRP) across Cisco Catalyst and Cisco Nexus (NX-OS) switches and the Cisco UCS X-Series Fabric Interconnect environment in a multi-site network.

Build and maintain site-to-site IPSec VPN connectivity with business partners and vendors.

Support NetApp ONTAP storage networking and replication.

Administer network monitoring platforms; maintain alerting, dashboards, NetFlow, and device-health visibility.

Administer and support network security applications and Zero Trust / network access control.

Respond to network alerts and incidents; perform root-cause analysis and permanent remediation.

Participate in planned maintenance windows, including change preparation, verification, and rollback procedures.

Create and maintain network documentation, diagrams, IP address management (IPAM), and runbooks.

Install, rack, and cable network hardware; support equipment lifecycle and refresh projects.

Assist with network security tasks, including certificate management, vulnerability remediation, and access reviews.

Participate in an on-call rotation.

5 years of hands-on network engineering or network administration experience.

Strong understanding of TCP/IP fundamentals, including subnetting, routing, NAT, DNS, and DHCP.

Production experience with enterprise-class routers and switches, including Cisco Catalyst, Cisco Nexus (NX-OS), and Cisco UCS X-Series Fabric Interconnects.

Hands-on production experience with Palo Alto Networks firewalls (PAN-OS), including security policy, NAT, and VPN.

Working knowledge of at least one dynamic routing protocol (OSPF, EIGRP, or BGP).

Demonstrated experience with Microsoft Azure networking (VNets, peering, VPN Gateway, NSGs, and routing).

Experience with NetApp (or comparable enterprise) storage and its supporting network connectivity.

Experience with network monitoring tools and alerting platforms.

Experience supporting network security applications.

Methodical troubleshooting skills using packet captures, logs, and device diagnostics.

Strong written documentation skills.

Works well in a collaborative team environment, with strong self-motivation to drive projects through to completion.