L3 Network Engineer

• BGP Routing & Advanced Core Networking (SME): Serve as the Subject Matter Expert for BGP routing (eBGP/iBGP, BGP-EVPN, route reflectors, community tagging, path manipulation, and traffic engineering) across data centers, WAN, and cloud. Design, deploy, and maintain core Cisco routing/switching infrastructure (Catalyst, Nexus, ISR/ASR) and manage complex L3 protocols (BGP, OSPF, EIGRP, MPLS, route redistribution) and Layer 2/3 constructs (VLANs, STP, EtherChannel, HSRP, QoS).
• OT Microsegmentation & Industrial Security: Lead OT network security initiatives by designing and enforcing Zero Trust microsegmentation strategies within manufacturing, SCADA, PLC, and MES environments to isolate industrial assets, minimize blast radiuses, and maintain compliance (e.g., IEC 62443, NIST SP 800-82).
• OT Wi-Fi Design & Deployment: Architect, conduct RF site surveys for, deploy, and optimize industrial wireless (OT Wi-Fi) networks engineered specifically for high-interference, high-density manufacturing and plant floor environments.
• Firewall Administration & Zero Trust: Administer Palo Alto Strata Next-Generation Firewalls, Panorama, GlobalProtect, NAT, and security policies. Implement network segmentation and mapping of Purdue Model architectures into modern firewall controls.
• SD-WAN & Hybrid WAN Engineering: Design, deploy, and support SD-WAN solutions (Cisco Viptela and Palo Alto Prisma SD-WAN) while managing WAN connectivity across MPLS, DIA, Direct Internet Access, and hybrid VPNs.
• Multi-Cloud Network Architecture: Implement and support cloud networking across Azure, AWS, and GCP using ExpressRoute, Direct Connect, Cloud VPN, Transit Gateway, and Virtual WAN solutions.
• Infrastructure Support & Automation: Develop network automation using Terraform, Ansible, and Python (IaC). Provide compute network support (e.g., VMware vSAN deployments) and top-tier L3 escalation support, including root cause analysis (RCA) and major incident resolution.
• Monitoring & Modernization: Monitor network health and security using enterprise platforms (Wireshark, SolarWinds, ThousandEyes, Splunk) and lead technical documentation and network modernization initiatives.

We are seeking an enterprise-grade Senior L3 Network Engineer with deep domain expertise in Cisco infrastructure, Palo Alto security, multi-cloud networking, and Operational Technology (OT) environments. Serving as a Subject Matter Expert (SME) in BGP routing and IT/OT network convergence, you will drive the design, security, deployment, and operational resilience of critical enterprise, data center, cloud, and manufacturing networks.

The key areas are obviously BGP routing expertise, as well as experience with OT micro-segmentation; preferably including WiFi., * Experience: 10+ years in enterprise network engineering supporting data center, cloud, and manufacturing/OT environments.

• BGP & Routing Mastery: SME-level expertise in BGP routing, traffic engineering, redistribution, and enterprise-scale WAN/LAN topologies.
• OT Microsegmentation & Wireless: Demonstrated hands-on experience designing and deploying OT/industrial Wi-Fi networks in factory floor settings, alongside microsegmentation technologies (e.g., Cisco ISE, Forescout, Palo Alto, Nozomi) for ICS/SCADA systems.
• Core Hardware & Security: Cisco (Catalyst, Nexus, ISR, ASR), Palo Alto Strata, Panorama, GlobalProtect, and NGFW security policies.
• SD-WAN & Cloud: Cisco Viptela, Prisma SD-WAN, and native multi-cloud networking across AWS, Azure, and GCP.
• Automation & Tools: Terraform, Ansible, Python, Wireshark, SolarWinds, ThousandEyes, Splunk.
• Certifications (Preferred): CCNP Enterprise / CCIE (Routing & Switching/Enterprise/Wireless), PCNSE, CWNA, or ISA/IEC 62443 Cybersecurity Specialist.