Senior Engineer, Network Infrastructure

Our culture lifts you up—there is no ego in the way. Our common purpose? We all want to win for our customers. We aim to always be evolving, dynamic, and ambitious. We believe in the power of genuine connections. Each employee is a part of what makes us unique on the market: agile and dedicated.

Regular

The Senior Network Engineer is responsible for the design, operation, and security of complex wired, wireless, and Internet-facing network infrastructures spanning multiple data centers and locations. The role requires deep expertise across enterprise routing, firewalling, VPNs, DNS, load balancing, security appliances, and large-scale wireless networks.

• Design, implement, and maintain enterprise network architectures, including LAN, WAN, wireless, data center, and Internet-edge environments.
• Administer, configure, and troubleshoot Forti Gate/Juniper SRX firewalls, including policies, NAT, routing, and VPNs.
• Configure, maintain, and support Cisco Layer 2 and Layer 3 switching, including VLANs, spanning tree, Ether Channel, and inter-VLAN routing.
• Deploy, operate, and optimize Cisco and Ruckus wireless networks, including:
• Controller-based and cloud-managed WLAN architectures
• SSID design, RF tuning, roaming optimization, and wireless security
• Deploy, operate, and support F5 Load Balancers, including LTM (DNS/GTM experience a strong plus).
• Design, implement, and troubleshoot dynamic routing protocols, including BGP and OSPF.
• Design, implement, and support IPsec and SSL VPN solutions for site-to-site and remote access connectivity.
• Operate and troubleshoot DNS services in an Anycast environment.
• Perform advanced network and wireless troubleshooting across complex, multi-vendor environments.
• Participate in network design reviews, infrastructure upgrades, and large-scale migrations.
• Ensure high availability, performance, and security of all network services.
• Maintain accurate network documentation, diagrams, and operational standards.
• Collaborate closely with security, systems, cloud, and application teams to support business and technical objectives.

• Bachelor's degree in Computer Science, Information Technology, or a related field.

• 5+ years of experience in network administration or network engineering within enterprise or service-provider environments.
• Hands‑on experience administering and supporting Forti Gate firewalls, Juniper firewalls, Cisco Layer 2 and Layer 3 switching, Cisco and/or Ruckus wireless networks, and F5 Load Balancers.
• Experience operating enterprise-scale routing, switching, and security infrastructures in complex production environments.
• Proven experience designing, implementing, and supporting IPsec and SSL VPN solutions for site-to-site and remote access connectivity.
• Experience designing scalable, secure, and highly available wired and wireless network infrastructures.
• Demonstrated ability to troubleshoot complex, multi‑vendor network issues in mission‑critical environments.
• Ability to operate effectively in a fast‑moving environment with competing priorities and production impact.
• Willingness to participate in an on‑call rotation for after‑hours support and incident response.

• Strong understanding and hands‑on experience with routing and network protocols including OSPF/OSPFv3, BGP and MP‑BGP, Spanning Tree (STP/RSTP/MST), PIM‑SSM, IGMP v2/v3, HSRP, VRRP, and MPLS.
• Working knowledge of DNS architectures, including Anycast‑based DNS deployments and traffic steering concepts.
• Solid understanding of network and application security principles including DDoS attack types, mitigation strategies, Web Application Firewall (WAF) placement, network segmentation, and Internet‑edge security design.
• Familiarity with large‑scale wireless design considerations including RF planning, roaming behavior, and high‑density environments.
• Understanding of DDoS mitigation technologies and appliances, including inline and out‑of‑band protection.
• Knowledge of cloud networking concepts, preferably Google Cloud Platform (GCP), with exposure…