Network Support L2/L3

About the Role:

We are seeking an L2/L3 Network Engineer with 8 years of experience to support a strategic engagement with a large regionally integrated healthcare delivery system. The role spans two connected phases — a multi-week Enterprise Network Infrastructure Assessment covering the client's full site estate and vendor-hosted application connectivity and the subsequent multi-year NOC Managed Services support engagement.

This role will bring solid enterprise networking expertise, healthcare operating awareness and the ability to work across ambulatory practices, clinics, hospital campuses, data canters and hybrid connectivity environments.

Key Responsibilities

Advanced Troubleshooting & Incident Management

• Execute site-by-site network discovery activities across LAN, WAN, wireless, and data center environments, including hands-on data collection at Tier 1 hospital locations and remote assessment support for Tier 2 and Tier 3 sites.
• Operate discovery tools — Device42, Lansweeper, ServiceNow Discovery, and SolarWinds — to collect configuration item data, generate topology datasets, and populate standardized inventories under the direction of the Senior Engineer.
• Extract and validate network configuration data, IP addressing, VLAN mappings, routing tables, and switch/router hardware and software versions.
• Support the perimeter security review by pulling firewall configurations, running rule audits, and documenting findings across Fortinet FortiGate and Palo Alto Networks estates.
• Contribute to data center switch inventory activities across Cisco Nexus and Arista fabrics — rack cabling documentation, port assignments, uplink/downlink mapping, and version reviews.
• Support hardware lifecycle, software and firmware currency, and end-of-life/end-of-support risk cataloguing using automated inventory extracts.
• Contribute to the site coverage tracker, risk register, and weekly deliverable packages.
• Serve as an L2/L3 network engineer within the NOC Managed Services model, handling second-line incident response and complex event triage.
• Execute standard network change management activities — VLAN additions, firewall rule adds/changes, switch port configurations, SD-WAN template applications, and routine site refresh activities — following standardized templates developed during the assessment.
• Support code upgrade and patch cycles across switches, routers, and network devices under Senior Engineer direction.
• Support hardware refresh and lifecycle activities including racking, cabling, initial configuration, and cutover coordination.
• Respond to monitoring alerts, perform initial diagnosis, resolve within L2 scope, or escalate to Senior Engineer when out of scope.
• Contribute to ServiceNow ITSM workflows — incident, change, problem, and CMDB updates.
• Support weekly status reporting, ticket closures, and change execution reporting to the SDM.

• Contribute to and review HLD/LLD for new sites, migrations, segmentation initiatives, and firewall architectures.
• Validate designs for scalability, security, and adherence to enterprise standards.
• Recommend improvements across routing, switching, wireless, and security domains.

• Manage and optimize Fortinet FortiGate environments, including policies, NAT, UTM profiles, VPNs, routing, and HA.
• Audit firewall rules to ensure least-privilege access and compliance.
• Support segmentation, hardening, and compliance initiatives.

• Perform capacity planning, traffic analysis, and performance tuning.
• Monitor network health and proactively address chronic or systemic issues.
• Implement long-term preventive and resiliency measures.

• Develop and maintain automation scripts (Python, Bash, EEM) to streamline operations.
• Automate configuration backups, compliance checks, and monitoring integrations.

• Lead major network changes, upgrades, firewall migrations, and routing redesigns.
• Prepare RFCs, rollback plans, risk assessments, and post-change reports.
• Coordinate with application, infrastructure, security, and ISP teams.

• Work with ISPs and OEMs (Cisco, Fortinet) on escalations, TAC cases, and hardware issues.
• Validate circuit performance and support last-mile troubleshooting.

• Maintain network diagrams, SOPs, configuration standards, and runbooks.
• Improve L1/L2 documentation and operational processes.

• Extensive hands-on experience with Cisco IOS/XE and NX-OS.
• Strong expertise in routing (OSPF, BGP), switching (VLANs, STP, EtherChannel).
• Strong experience with Fortinet FortiGate (FortiOS) and Meraki wireless.
• Strong expertise on NOC operations.
• Experience with SD-WAN, VXLAN, Cisco DNaC and Cisco ISE.
• Solid understanding of network security, VPNs, QoS, and segmentation.
• Experience with NMS/SNMP monitoring, Syslog, and packet capture tools.
• Working knowledge of automation and scripting (Python, Bash, EEM).

• Aruba Wireless
• Extreme Networks
• Juniper Networks
• Cisco Network
• Fortinet
• Palo Alto
• Familiarity with healthcare-specific considerations — medical device (IoMT) network posture, HL7/FHIR connectivity concepts, EMR/EHR network dependencies
• Prior experience in a Managed Services Provider (MSP) or NOC-driven service delivery model
• Familiarity with Microsoft Entra hybrid connectivity patterns and vendor-hosted application connectivity.

• Minimum 10 years to 12 years of networking experience, including 3 years to 4 years in L3 or senior escalation roles.
• CCNA or equivalent hands-on experience (required).
• CCNP Enterprise (strongly preferred).
• Fortinet NSE 4 or higher (preferred).
• ITIL v4 Foundation (optional).