Sr. Network Automation Engineer

As a Senior Network Engineer on this team, you will be the network domain owner embedded within the team. You will keep this infrastructure healthy, well-monitored, and continuously improving - owning day-to-day operations end-to-end while proactively identifying and resolving risks before they reach customers. This is a high-ownership role for an engineer who genuinely cares about uptime and takes pride in knowing the health of their network without being told to look., * Configure, maintain, and troubleshoot routers and switches across a multi-vendor environment - Cisco IOS/NX-OS, Juniper Junos, and Arista EOS

• Manage BGP peering sessions with transit providers, internet exchanges, and direct peering partners; tune route policy, path selection, and prefix filtering to optimize performance and cost across hundreds of sessions
• Install and configure new ISP transit links; manage circuit turn-up, capacity monitoring, and provider coordination globally
• Configure and maintain firewalls including rulesets, NAT policies, zone-based security, and periodic policy audit and cleanup
• Configure and manage load balancers including GTM/GSLB components, virtual servers, health monitors, persistence profiles, and SSL offload for multi-region traffic management
• Monitor network health continuously - reviewing dashboards and utilization trends, identifying degradation patterns, and acting proactively before issues escalate to customer impact
• Upgrade software on production routers, switches, firewalls, and load balancers with minimal disruption; plan and execute changes with documented rollback procedures
• Configure and maintain IPsec/IKE VPN tunnels across the global PoP footprint
• Perform packet captures and traffic analysis to diagnose issues and support incident investigations
• Troubleshoot problems from the network layer through the application layer, own root cause analysis, and drive permanent remediations
• Build and extend monitoring tools and dashboards to improve visibility into network performance and availability across all regions
• Use BGP policies and traffic engineering to minimize latency to customers, balance load across providers, and manage congestion across internet exchange relationships

• 7+ years of hands-on network engineering experience in production internet-facing data center or SaaS environments
• Multi-vendor routing and switching expertise - Cisco, Juniper, and Arista; comfortable configuring and troubleshooting across all three in production
• Expert-level BGP - peering and transit configurations, route policy design, path optimization, and troubleshooting for IPv4 and IPv6 at scale
• Firewall operations experience in production environments - Juniper SRX, Palo Alto, Cisco ASA/FTD, or equivalent
• Load balancer and GTM/GSLB experience - F5 BIG-IP, Citrix ADC, or equivalent; virtual server management, health monitoring, global traffic management across multiple regions
• Strong L2 through L7 protocol knowledge - spanning-tree, LACP, MLAG, VLANs, BGP, OSPF, DNS, NTP, SNMP, SSH, Syslog, HTTP/S, SSL/TLS
• Experience with network monitoring platforms and dashboard tooling; ability to read utilization trends and build meaningful alert thresholds
• Proficiency with packet capture and traffic analysis tools (Wireshark, tcpdump)
• Solid Linux experience including basic scripting
• Background in KVM/ESXI hypervisor networking
• Strong documentation habits - change records, runbooks, architecture diagrams, and post-incident write-ups
• Prior experience in a public-facing SaaS, cloud, or internet infrastructure environment strongly preferred
• BSCS or equivalent required, MSCS or equivalent strongly preferred

At Netskope, salary is one component of our competitive total rewards package. The salary range for this position is as listed below. This is a national range. For purposes of complying with applicable laws, the range applies to candidates in California, Colorado, Illinois, Maryland, New York, Washington, and other states.

The successful candidate’s starting pay will also be determined based on job-related skills, experience, qualifications, location, and market conditions.

For all sales roles, the posted salary range is the On Target Earnings (OTE) range for the role, which is the sum of base salary and target commission amount at 100% goal achievement.

In addition to salary, candidates may be eligible for other forms of compensation such as participation in a bonus plan (for non-sales roles) and a stock award program. Candidates may also be eligible for a comprehensive health plan and other benefits that can be reviewed at Netskope Benefits site.

Salary Range

$111,000-$225,500 USD

About Netskope

Today, there’s more data and users outside the enterprise than inside, causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed, one that is built in the cloud and follows and protects data wherever it goes, so we started Netskope to redefine Cloud, Network and Data Security.

Since 2012, we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara, St. Louis, Bangalore, London, Paris, Melbourne, Taipei, and Tokyo. Our core values are openness, honesty, and transparency, and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships, collaboration, and teamwork. From catered lunches and office celebrations to employee recognition events and social professional groups such as the Awesome Women of Netskope (AWON), we strive to keep work fun, supportive and interactive. Visit us at Netskope Careers. Please follow us on LinkedIn and Twitter@Netskope., Netskope stands as the foremost leader in Security Service Edge (SSE), establishing the benchmark for how modern enterprises secure access across cloud, web, and private applications. The platform is trusted by more than 4,000 organizations worldwide, including 30+ of the Fortune 100, providing Zero Trust Network Access, Cloud Access Security Broker, and Secure Web Gateway capabilities through a single-pass, cloud-native architecture.

Underpinning these capabilities is a highly resilient global network engineered for continuous availability, managed directly by Netskope’s Platform Reliability Engineering team. This expansive infrastructure consists of hundreds of Points of Presence across every major region, hundreds of BGP sessions spanning internet exchanges, transit providers, and direct peering partners, and a robust multi-vendor stack of routers, switches, firewalls, and load balancers that enterprises trust with their most security-critical traffic. The platform delivers:

• 99.999% availability with guaranteed low-latency performance for enterprise customers worldwide
• Hundreds of globally distributed Points of Presence providing best-path routing and regional redundancy
• Hundreds of BGP peering, transit, and internet exchange relationships managed and optimized continuously
• Multi-vendor network infrastructure (Cisco, Juniper, Arista, F5, Palo Alto) spanning data centers across every major region
• GTM and GSLB-driven traffic management ensuring seamless failover and performance at global scale
• Strict RTO and RPO objectives with zero-downtime change execution across a live production network
• Continuous capacity expansion as Netskope grows into new markets and enterprise segments