Network Engineer 2
Role details
Job location
Tech stack
Job description
We are seeking a highly skilled and motivated Senior Network Engineer to join our infrastructure team. In this role, you will be responsible for designing, implementing, maintaining, and securing our enterprise-wide wired and wireless network infrastructure. The ideal candidate will possess deep expertise in advanced Routing and Switching, a comprehensive understanding of Enterprise Wireless Technologies, and a strong background in Palo Alto Networks firewalls. Additionally, this role requires a candidate who is willing to be hands-on with physical infrastructure, including data center device installations and cabling.
This position demands a blend of high-level architectural thinking, rigorous security practices, wireless site optimization, and practical physical deployment skills.
What will you be doing?
- Design and maintain enterprise routing and switching across offices and data centers.
- Troubleshoot protocols like BGP, OSPF, and EIGRP, plus switching technologies (STP, VXLAN, VPC).
- Deploy high-density Wi-Fi using WLCs, cloud dashboards, and access points.
- Perform RF surveys and heat mapping to fix coverage and roaming issues.
- Secure wireless via WPA3, 802.1X, and RADIUS/TACACS+ (e.g., Cisco ISE) integration.
- Manage firewall policies, threat prevention, URL filtering, and S2S VPNs.
- Ensure a strict security posture for the wired and wireless network edge.
- Cloud based certifications are a plus e.g. (AWS Certified Solutions Architect, Cisco Certified Network Administrator Cloud
- Knowledge in Terraform and Python
- Experience with AppGate platform for SSL VPN connection
- Engage in the enterprise-wide Change Management protocols and workflows.
- Flexible/hybrid work schedule
- Deliver on-site engineering support and physical infrastructure setup for live-streaming of high-visibility tentpole events (e.g. The Met Gala).
Who you are:
- Expertise in AWS cloud networking technologies, including Transit Gateways, Direct Connect, and VPNs.
Requirements
- Relevant industry certifications are highly preferred (e.g., AWS Certified Solutions Architect or CCNA).
- Technical proficiency in automation and scripting using Terraform and Python.
- In-depth knowledge of advanced routing protocols like OSPF and BGP.
- Hands-on experience with Zero Trust Networking and the AppGate SDP platform.
- Competency in wireless deployments using Meraki, Cisco, and Aruba solutions.
- Familiarity with multi-vendor interoperability and IEEE 802 standards.
- Exceptional communication skills and collaborative mindset.
- Skilled in Google Workspace and the creation of detailed network diagrams.
- Disciplined approach to infrastructure schemas and standard naming conventions.
- Commitment to continuous learning within switching and routing architectures., * Bachelor's degree in Computer Science, Information Technology, Network Engineering, or a related field; equivalent professional experience and certifications will be considered in lieu of a degree.
- Relevant industry certifications strongly preferred, such as:
- CCNP Enterprise (Routing & Switching / Wireless)
- Palo Alto Networks PCNSA/PCNSE
- Cisco Certified Wireless Professional (CWNP/CWNA/CWNP)
- Cloud certifications: AWS Certified Solutions Architect
- 5-8+ years of experience in enterprise network engineering, with demonstrated ownership of large-scale, multi-site environments.
- 3+ years of hands-on experience designing and troubleshooting advanced routing and switching protocols (BGP, OSPF, EIGRP, STP, VXLAN, VPC) in a production environment.
- 2+ years of experience deploying and optimizing cloud-managed wireless networks (e.g., Meraki) architectures and RF site surveys.
- Proven experience securing wireless networks using WPA3, 802.1X, and RADIUS/TACACS+, with hands-on exposure to Cisco ISE or similar NAC platforms.
- Strong hands-on experience administering Palo Alto Networks firewalls, including policy management, threat prevention, URL filtering, and Site-to-Site VPN configuration.
- Experience with SSL VPN platforms such as AppGate or similar Zero Trust Network Access (ZTNA) solutions is a plus.
- Working knowledge of Infrastructure as Code (Terraform) and scripting/automation (Python) for network provisioning and management is a plus.
Benefits & conditions
The expected base salary range for this position is from $127,000-$150,000. Salary offers are based on a wide range of factors including but not limited to relevant skills, training, experience, and education.