Network Engineer, L-3

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, implement, and maintain Azure network architectures, encompassing hub-and-spoke, Virtual WAN, VNets, peering, UDRs, NSGs, Private Endpoints, and Private DNS.

• Set up and troubleshoot hybrid connectivity solutions utilizing site-to-site VPN, point-to-site VPN, and ExpressRoute.

• Configure and manage Azure Firewall, Application Gateway/WAF, Azure Load Balancer, Front Door, and DNS services.

• Keep network diagrams, IP address plans, architecture decisions, and configuration standards up to date.

• Design, deploy, and oversee Palo Alto and Fortinet firewalls both on-premises and within Azure.

• Establish and maintain security policies, NAT configurations, IPsec tunnels, GlobalProtect/remote access VPN, URL filtering, and threat prevention profiles.

• Implement Zero Trust and network segmentation strategies across cloud and data center environments.

• Conduct firewall rule audits, policy cleanups, security posture evaluations, and prioritized remediation planning.

• Collaborate with security operations teams on threat investigations, vulnerability mitigation, and compliance objectives.

• Provide support and enhance routing and switching environments, including BGP, OSPF, VLANs, STP, and Layer 2/Layer 3 designs.

• Oversee SD-WAN, wireless, load balancing, and data center network infrastructure.

• Plan and execute network upgrades, migrations, firmware/OS lifecycle management, and transitions from data center to cloud.

• Validate designs for capacity, redundancy, and failover to fulfill availability commitments.

• Offer L3 escalation support for complex network, firewall, connectivity, and performance challenges across various clients.

• Lead technical triage, conduct packet capture and traffic analysis, ensure service restoration, and coordinate with ISPs, vendors, and client teams.

• Execute root cause analyses, document corrective measures, and prevent recurring incidents through engineering enhancements.

• Enhance network monitoring, alert quality, runbooks, and change and maintenance procedures.

• Participate in an escalation/on-call rotation, providing timely and clear status updates during major incidents.

• Automate network deployment and configuration tasks utilizing Terraform, Bicep, Ansible, PowerShell, or Python.

• Develop and enforce network standards, templates, and configuration baselines across client environments.

• Analyze incident, ticket, and capacity trends to identify opportunities for proactive improvements.

• Monitor remediation completion, risk reduction, and service stability outcomes.

• Act as a trusted network advisor and escalation point for managed services clients.

• Conduct network design reviews, technical discoveries, and recommendation presentations.

• Mentor Systems Engineers and service desk personnel, creating reusable troubleshooting guidance and knowledge articles.

• Collaborate with Azure, security, EUC, service delivery, and account teams; assist with presales discovery and client onboarding into managed services.

⛳️ Requirements

• Over 5 years of experience in enterprise network engineering, with at least 4 years as a Cloud Network Engineer supporting multiple clients and systems.

• Practical experience in designing and supporting Azure networking and hybrid connectivity in production settings.

• Strong expertise in administering Palo Alto and/or Fortinet next-generation firewalls.

• Experience providing L3 escalation support, leading major incident triage, and conducting root cause analysis in a managed services or multi-client setting.

• Proven capability to transition between design, hands-on implementation, troubleshooting, and client communication.

• Knowledge of Azure Networking: VNets, hub-and-spoke, Virtual WAN.

• Familiarity with ExpressRoute, VPN, and hybrid connectivity.

• Proficiency in Palo Alto PAN-OS, Panorama, and VM-Series.

• Experience with Fortinet FortiGate and FortiManager.

• Understanding of routing and switching: BGP, OSPF, VLANs.

• Knowledge of SD-WAN, load balancing, and DNS.

• Awareness of Zero Trust, segmentation, and Azure Firewall.

• Familiarity with Terraform, Bicep, Ansible, and network automation.

• Microsoft Certified: Azure Network Engineer Associate (AZ-700) – mandatory.

• Palo Alto Networks Certified Network Security Professional.

• Fortinet Certified Professional: Network Security.

• Palo Alto Networks Certified Next-Generation Firewall Engineer.

• Microsoft Certified: Azure Security Engineer Associate (AZ-500).

• CCNP Enterprise or equivalent certification.

• Disciplined and methodical troubleshooting skills along with strong network design judgment.

• Consultative and client-focused communication skills during regular operations and high-severity incidents.

• Ability to work autonomously while collaborating with cloud, security, and support teams.

• Strong documentation, knowledge transfer, and diagramming capabilities.

• A coaching mindset and a commitment to enhancing the technical proficiency of the team.

🏝️ Benefits

• Competitive salary and performance-based incentives.

• Opportunities for professional development and certifications.

• Flexible work schedules and remote work options.

• Comprehensive health, dental, and retirement benefits.

• Supportive and collaborative work environment.