Senior Network Engineer (CCIE) - Temp

This is a hands-on CCIE-level role requiring expert experience in enterprise network architecture, implementation, troubleshooting, optimization, and security.

Lead and execute the following key projects and responsibilities:

1. Design and implement the migration from the existing Cisco firewall environment to the new Sophos firewall platform, including firewall policies, NAT, routing, VPN, IPS, network segmentation, testing, rollback planning, and documentation.

2. Design and implement a secure WAF and SSL offloading solution for Internet-facing applications, including DMZ architecture, certificate management, traffic flows, high availability, security policies, and integration with the edge firewall.

3. Assess and enhance the existing Cisco ISE deployment, expanding its use beyond MAB through improved endpoint profiling, 802.1X authentication, authorization policies, posture assessment, network segmentation, logging, and operational monitoring.

4. Evaluate, select, and support the implementation of a new enterprise MFA solution, including requirements analysis, product comparison, architecture design, integration with Active Directory, VPN, network devices, and critical applications, testing, rollout planning, and documentation.

5. Assess and improve the existing SolarWinds Orion NPM deployment, including device coverage, alerting, performance thresholds, network visibility, capacity monitoring, reporting, and integration with operational and security processes.

6. Review and improve the enterprise network architecture across multiple sites, ensuring security-by-design, network segmentation, high availability, redundancy, fault tolerance, and operational resiliency.

7. Apply security-hardening standards and secure configuration baselines to firewalls, routers, switches, VPN systems, and network-management platforms.

8. Review and optimize firewall ACLs, NAT rules, network objects, and security policies by identifying and removing overly permissive, unused, duplicate, obsolete, and shadowed rules.

9. Evaluate and introduce new products and technologies to strengthen network infrastructure, security or improve productivity.

10. Collaborate with the existing Network Administrator and provide technical guidance, documentation, and knowledge transfer for all implemented solutions.

1. Active CCIE Enterprise Infrastructure or CCIE Security certification is required.

2. 8 years of hands-on enterprise network engineering and architecture experience in complex, multi-site environments.

3. Experience working in banking, financial services, or another regulated environment is strongly preferred.

4. Ability to perform occasional off-hours and weekend work as required.

5. Candidate with bilingual (English and Chinese) skills is required.

Pay: $80.00 - $120.00 per hour