Sr. IP Network Engineer

We are seeking a Senior IP Network Engineer to design, operate, and enhance a large-scale global network infrastructure. This role is responsible for critical network functions across datacenter fabric, WAN routing, firewall security, and network automation initiatives. The ideal candidate brings deep expertise in VxLAN/EVPN datacenter architectures, Palo Alto security platforms, and service provider networking technologies., * Design, deploy, and support VxLAN/EVPN-based datacenter fabrics across multiple locations, including leaf-spine architectures, BGP EVPN control planes, and overlay/underlay integration.

• Manage and maintain Palo Alto firewall environments, including security policy design, Panorama administration, threat prevention, and rule lifecycle management.
• Architect and support BGP-based WAN routing environments, including iBGP/eBGP policies, route optimization, and prefix management.
• Diagnose and resolve complex networking issues across routing, switching, and security layers.
• Develop and maintain network automation solutions for configuration management, provisioning, monitoring, and operational efficiency using Python, Ansible, or similar technologies.
• Evaluate emerging networking technologies and lead proof-of-concept initiatives to improve infrastructure performance and scalability.
• Partner with engineering, operations, and infrastructure teams to implement network enhancements and enterprise initiatives.
• Provide guidance and mentorship to junior engineers and contribute technical leadership across key projects.
• Participate in an on-call rotation and support planned maintenance activities as needed.
• Create and maintain technical documentation, operational runbooks, and post-incident reports.
• Collaborate with vendors and assist in the evaluation of hardware and technology solutions., Vaco by Highspring and its parents, affiliates, and subsidiaries (“we,” “our,” or “Vaco by Highspring”) respects your privacy and are committed to providing transparent notice of our policies.
• California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here.
• Virginia residents may access our state specific policies here.
• Residents of all other states may access our policies here.
• Canadian residents may access our policies in English here and in French here.
• Residents of countries governed by GDPR may access our policies here.

• Bachelor’s degree in Computer Science, Network Engineering, Information Technology, or a related field, or equivalent professional experience., * 5+ years of experience designing and supporting service provider or large-scale enterprise network environments.
• Proven experience implementing and supporting VxLAN/EVPN datacenter fabrics, including leaf-spine architectures and BGP EVPN control planes.
• Hands-on experience managing Palo Alto firewalls, Panorama, and enterprise security policies.

Technical Knowledge

• Expert-level knowledge of BGP (iBGP/eBGP), OSPF, and MPLS in production environments.
• Strong understanding of modern datacenter networking concepts including VxLAN, EVPN, vPC, and Spanning Tree.
• Experience working within Linux environments and command-line administration tools., * Proficiency in Python or another scripting language used for network automation.
• Strong communication skills with the ability to document technical processes and present complex concepts clearly.
• Ability to work independently, manage multiple priorities, and lead technical initiatives., * Industry certifications such as CCIE, JNCIE, PCNSE, or equivalent advanced networking certifications.
• Experience with Cisco ASR/NCS (IOS-XR), Juniper MX/SRX, or similar service provider platforms.
• Experience with software-defined networking technologies such as ACI, NSX, or comparable solutions.
• Familiarity with AI-driven operations, network observability, or advanced monitoring platforms.
• Deep expertise with large-scale datacenter fabric deployments.
• Experience implementing Infrastructure as Code (IaC) practices using tools such as Ansible, Terraform, or similar frameworks.
• Knowledge of network source-of-truth platforms such as NetBox.

• Opportunity to work on complex, large-scale network infrastructure supporting mission-critical services.
• Exposure to cutting-edge networking, automation, and cloud-connectivity technologies.
• Collaborative environment with opportunities to influence architectural decisions and technical strategy.
• Competitive compensation and comprehensive benefits package.
• Career growth opportunities within a highly technical engineering organization., Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to:
• the individual’s skill sets, experience and training;
• licensure and certification requirements;
• office location and other geographic considerations;
• other business and organizational needs.

With that said, as required by local law, Vaco by Highspring believes that the following salary range referenced above reasonably estimates the base compensation for an individual hired into this position in geographies that require salary range disclosure. The individual may also be eligible for discretionary bonuses.

Additionally, submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. More details about Vaco by Highspring’s use of AI can be found here (https://www.highspring.com/ai-use-notices/). Further assessment of candidates beyond this initial phase will be conducted by recruiters and hiring managers. Vaco by Highspring does not know and cannot opine on if its client’s use of AI products in hiring.