Network Engineer II

Description

Propio
Language Services is transforming communication by developing tools and technologies that make it easier and more efficient for clients to engage with the Limited English Proficiency Population to improve access to healthcare and essential services in social services, education, legal and many others.

We are seeking a skilled Network Engineer II to design, implement, maintain, and optimize our enterprise network infrastructure in a hybrid cloud environment. This role focuses on ensuring secure, reliable, and high-performance connectivity across on-premises, cloud (AWS/Azure), and remote access scenarios, with strong emphasis on Cisco technologies, Palo Alto Prisma security, and multi-cloud networking.

The ideal candidate is a proactive problem-solver with proven experience of troubleshooting complex issues, leading network projects, and collaborating with cross-functional teams in other engineering roles, security teams, and various business functions.

• Design, deploy, and manage LAN/WAN infrastructures using routing/switching (e.g., OSPF, BGP, EIGRP,)
• Configure, troubleshoot, and optimize firewalls and SASE for secure remote access, security policies, NAT, VPN (IPSec/site-to-site/remote), and traffic optimization for real-time protocols
• Implement and support cloud networking in AWS (VPC, Transit Gateway, Direct Connect) and Azure (VNet, Express Route, VPN Gateway, Firewall/NVA integrations), including hybrid connectivity and secure access service edge (SASE) models
• Manage SIP/VoIP environments, including SIP trunking, QoS for RTP/voice traffic, troubleshooting SIP ALG issues on firewalls, and ensuring reliable unified communications in cloud-hybrid setups
• Perform advanced troubleshooting (L3/L4) for network performance, security incidents, and connectivity issues across on-prem, cloud, and SASE environments
• Monitor network health using tools like Cisco Prime/DNAC, Palo Alto tools, AWS/Azure monitoring, and implement proactive optimizations (e.g., QoS, bandwidth management)
• Collaborate on network security posture, including zero-trust principles, policy enforcement, and compliance
• Lead or contribute to network projects, migrations, upgrades, documentation (topology diagrams, runbooks), and capacity planning
• Provide escalation support, mentor junior team members, and participate in on-call rotation as needed

• 5–8+ years of hands-on experience in enterprise networking, with proven expertise in the following:
• Routing/switching, firewalls/ASA, wireless/collaboration preferred)
• Firewalls and Zero Trust platforms like Zscaler or Prisma Access (security policies, SASE, remote access)
• AWS and/or Azure cloud networking (VPC/VNet, gateways, hybrid connectivity)
• SIP/VoIP protocols, trunking, QoS, and integration with network/security stacks
• Relevant certifications (at least 2–3 preferred):
• CCNP Enterprise/Collaboration/Security (or CCIE track)
• PCNSE (Palo Alto Certified Network Security Engineer) or Prisma Access specialization
• AWS Certified Advanced Networking – Specialty or Azure Network Engineer Associate
• Strong understanding of TCP/IP, DNS, DHCP, VPN, SD-WAN, QoS, and security best practices
• Experience with hybrid/multi-cloud environments and real-time traffic (voice/video)
• Excellent problem-solving, documentation, and communication skills

• Experience with Cisco ACI/SDA, ISE, Meraki, or DNAC
• Familiarity with SD-WAN, Zscaler, or other SASE solutions
• Scripting/automation (Python, Ansible, Terraform) for network tasks
• Background in regulated industries (finance, healthcare) or large enterprise environments

#LI-JS1