Network & Security Admin - Datacenter & Cloud

Galaxy i Technologies, Inc
Rosemead, CA, United States
2 days ago
Apply on www.dice.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
8 years minimum
Working hours
Regular working hours
Job source

Tech stack

Link Aggregation (Ethernet) Amazon Web Services Application Firewall Microsoft Azure Border Gateway Protocol Cloud Computing Complex Networks Computer Networks Network Congestion Data Centers Domain Name System (DNS) Enhanced Interior Gateway Routing Protocol
+47 more
Internet Protocol Security (IP SEC) Intrusion Detection and Prevention IP Address Management Subnetting Virtual Private Networks (VPN) Python (Programming Language) Network Security Network Layer Multicasting Network Architecture Routing Network Segmentation Packet Analyzer Cisco Nexus Switches Open Shortest Path First (OSPF) Remote Access Technology Ansible Zero Trust Network Access RSA (Cryptosystem) TCP/IP Traffic Analysis Wireshark Virtual Local Area Networks Wide Area Networks Network Switches Scripting Identity Services Engine Google Cloud Network Access Control Load Balancing F5 GTM System Availability Software Troubleshooting Multi-Cloud HybridCloud Firewalls (Computer Science) Amazon Virtual Private Cloud (VPC) Git Data Center Networking Forescout NetScout Palo Alto Networks Routing & Switching Terraform Ddos Cisco Switches Cisco

Job description

  • Design, deploy, operate, and troubleshoot Cisco ACI leaf-spine architectures.
  • Perform APIC operations and day-to-day management.
  • Build and maintain ACI constructs including:
  • Tenants, VRFs, bridge domains, subnets
  • Endpoint Groups (EPGs), contracts, filters
  • Service graphs, external Layer 3 connections (L3Out)
  • Fabric access policies
  • Ensure high availability, scalability, and performance of data center networks., * Design and implement micro-segmentation strategies based on Zero Trust and least-privilege principles.
  • Enforce policy-based networking using Cisco ACI contracts and, where applicable, host-based controls.
  • Partner with security teams to align network segmentation with enterprise security requirements., + Site-to-site VPN and IPsec
  • Dedicated cloud interconnects (AWS Direct Connect, Azure ExpressRoute, Google Cloud Interconnect)
  • Manage cloud networking constructs such as:
  • Cloud Routing, NAT
  • Security Groups / Network Security Groups (NSGs)
  • Multi-Account and Multi-Subscription Network Architectures, Network Security: Palo Alto Networks Must Have Hands on Skills
  • Engineer and support Palo Alto Networks Firewalls, including:
  • Initial firewall builds and deployments
  • Security policy, zone, and NAT configuration
  • Software/OS upgrades and Hardware Refresh activities
  • Troubleshooting and Solution Delivery
  • License Management and Renewals
  • Implement and manage security services such as:
  • WildFire
  • URL Filtering
  • Advanced Threat Prevention features
  • Design, configure, and troubleshoot Site-To-Site VPN tunnels.
  • Build, manage, and troubleshoot Palo Alto Global Protect VPN (Remote Access VPN) environments, + TCP/IP, IP Subnetting
  • Dynamic Routing Protocols (Cisco Routing - BGP, EIGRP, OSPF)
  • Switching Technologies (Cisco Nexus, Cisco Catalyst, Vlan, STP, vPC, vDC, LACP)
  • QoS and Multicast fundamentals

  • Complex Traffic Analysis
  • Must be well-experienced in using Advance Wireshark - Packet Capture & Traffic Analysis
  • Perform complex troubleshooting using packet captures, traffic flow analysis, and log correlation.
  • Perform advanced network traffic capture and analysis using Wireshark to identify latency, packet loss, protocol, and performance issues.
  • Analyze TCP/IP flows, retransmissions, handshakes, and application behavior to support root-cause analysis.
  • Correlate packet-level findings with logs and network telemetry to resolve complex incidents.
  • Provide clear documentation and insights from packet captures to engineering and operations teams., * Communicate complex network designs and issues effectively to both technical and non-technical stakeholders.
  • Team Work, Customer-focused, Process-oriented, Result-driven, presentation skills, customer-facing, knowledge sharing

Requirements

We are seeking a highly skilled Senior Network & Security Admin - Datacenter & Cloud to design, implement, secure, and support enterprise-scale data center, cloud, and hybrid network environments. This role requires strong networking fundamentals, hands-on Cisco ACI expertise, micro-segmentation, SD-WAN, hybrid cloud connectivity, and deep experience with Palo Alto Networks firewalls and VPN technologies.

The ideal candidate will demonstrate strong troubleshooting, automation, and collaboration skills while working closely with cloud, security, and infrastructure teams., Network and DNS Load Balancing Must Have Knowledge and Preliminary Skill

  • (F5 LTM and F5 GTM) - End to End Support, Design, Build, Solution, Troubleshooting
  • Maintenance (OS Upgrade, HW Refresh, License Renewals). __________________

Automation & Tooling Must Have Knowledge and Preliminary Skill

  • Develop and maintain automation using:
  • Python, Ansible, and/or Terraform
  • Use Git for version control and infrastructure-as-code workflows.
  • Improve operational efficiency through scripting and automation., * Strong foundation in enterprise networking and data center architectures.
  • Hands-on experience with Cisco ACI in production environments.
  • Experience with micro-segmentation and policy-based networking.
  • Proven experience with SD-WAN deployment and operations.
  • Hybrid cloud networking experience.
  • Strong troubleshooting and analytical skills.
  • Experience with automation/scripting and Git.
  • Excellent communication and teamwork skills., * Experience in large-scale enterprise or regulated environments.
  • Multi-cloud networking experience (AWS, Azure, Google Cloud Platform).
  • Strong hands-on experience with Palo Alto Networks security platforms.
  • Relevant certifications (CCNP/CCIE, PCNSE, cloud networking certifications)., * Web Application Firewalls (Cloud WAF) - End to End Support, Design, Build, Solution, Troubleshooting and Maintenance. (Experience in Imperva WAF is preferred and will be added advantage).
  • Experience in handling DDoS Prevention Setup (Imperva Incapsula preferred).
  • End Point Network Access Control (NAC) (ForeScout Preferred) - End to End Support, Design, Build, Solution, Troubleshooting and Maintenance (Policy Management, OS Upgrade, HW Refresh, License Renewals).
  • Proficient in executing diagnostic techniques with Good Experience in NetScout Traffic Analyzing Tool.
  • Proficiency in working with Packet Broker Switches (IXIA Preferred) to capture Live Traffic
  • Good Experience in working with Datacenter Cabling team, understanding Racking/Un-racking/ Datacenter Standards, TAP usage, Power Supply placement and Optimal Rack usage.
  • Infoblox - IPAM (IP Address Management) and Maintenance (OS Upgrade, HW Refresh, License Update)
  • Experience in handling Network Security Technologies - NetMotion Mobility VPN, RSA, Cisco ISE

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.dice.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:51 min

Rising DDoS attacks and evaluating CDN mitigation strategies

Chris Heilmann +2 · LIVE

1:34 min

Pivoting careers into specialized platform engineering roles

Xavier Portilla Edo · LIVE

6:21 min

Investigating push inefficiencies with upstream Git experts

Jonathan Creamer · Coffee With Developers

1:29 min

Expanding practical knowledge with community sandboxes and resources

Stuart Clark · LIVE

1:32 min

Grasping core networking and infrastructure automation components

Michael Cade · LIVE

56 sec

Favorite git commands and the importance of patch commits

Eileen Uchitelle Eileen Uchitelle +1 · Coffee With Developers

Videos

See all

Related articles

See all