Network Engineer

What You'll Do

WAN Transport, Routing & Switching

• Deploy, tune, and support Layer 2 WAN services across multiple sites, including MetroEthernet with both E-Line (point-to-point) and E-LAN (any-to-any) service types.
• Operate and refine the enterprise routing core, with deep work in multi-homed BGP (manipulating path attributes, local preference, and communities) alongside multi-area OSPF.
• Support resilient, non-blocking switch fabrics using MC-LAG and multi-chassis EtherChannel designs targeting sub-second failover at the core.
• Run dense, multi-tier campus switching: VLAN design, Spanning Tree variants, and QoS/CoS policies that keep latency-sensitive transaction traffic at the front of the queue.

Perimeter Security & Remote Connectivity

• Operate a large VPN estate: always-on site-to-site tunnels plus remote-access connectivity across many locations and endpoint types.
• Administer high-throughput, stateful Next-Generation Firewalls (NGFW) at physical edges and VPN aggregation points.
• Diagnose and refine firewall rulebases, content filtering, Deep Packet Inspection (DPI) behavior, and zone segmentation while keeping transit latency low.

Cloud & Hybrid Networking

• Own private connectivity into Azure: ExpressRoute circuit management, private and Microsoft peering, and Q-in-Q / dot1q sub-interface configuration.
• Track down and fix asymmetric routing, BGP advertisement issues, and prefix-limit problems between on-prem hubs and Azure VNets. Change, Collaboration & Governance
• Join recurring technical sessions with PMs and development teams so network and cloud capacity stays ahead of product roadmaps.
• Advise on upgrades, circuit migrations, and application rollouts with disciplined change control, pre-change testing, and rollback planning.

Troubleshooting & Packet Analysis

• Chase down intermittent packet loss, jitter, MTU/MSS fragmentation issues, and routing loops using device telemetry, Wireshark captures, and SPAN/mirror ports to confirm true root cause. Monitoring & Observability
• Establish and maintain performance baselines so degradation gets caught before users feel it.
• Build out and administer monitoring tooling using SNMP, NetFlow/IPFIX, and streaming telemetry for live visibility into traffic and device health.

What We’re Looking For

• Solid hands-on experience in enterprise network engineering, with exposure to routing, switching, firewalls, and VPN technologies in a production environment.
• Working knowledge of cloud networking concepts, ideally within Azure.
• A structured troubleshooting mindset and comfort digging into packet-level detail when needed.
• Strong communication skills and the ability to work across technical and non-technical teams.
• Relevant certifications (such as CCNP, JNCIP, or equivalent) are a plus but not required; demonstrated ability matters most.

Environment

• Firewalls: Sonicwall NSA
• Switching: Juniper EX, QFX, Aruba CX
• Routing: Juniper MX, OSPF, iBGP, eBGP
• Monitoring: Solar Winds HCO, Zabbix, CheckMK, Datadog