Senior Network Engineer

We are seeking an experienced Senior Network Engineer to design, implement, secure, operate, and optimize enterprise data-center, campus, branch, wireless, and hybrid-cloud networks. The role requires advanced hands-on expertise in F5 BIG-IP, Palo Alto Networks, Cisco ACI, Cisco Nexus, Cisco Meraki, cloud networking, and enterprise DDI platforms. The engineer will serve as an L3 escalation point, lead major-incident troubleshooting, execute migrations and lifecycle upgrades, perform root cause analysis, and collaborate with security, cloud, application, server, and architecture teams., * Own complex P1/P2 incidents involving routing, switching, wireless, firewalls, load balancing, DNS, DHCP, IPAM, VPN, SD-WAN, and hybrid-cloud connectivity.

• Lead troubleshooting bridges, analyze packet captures and telemetry, restore service, document root cause, and implement permanent corrective actions.
• Prepare and execute implementation, validation, risk, dependency, and rollback plans for production changes and maintenance windows.
• Maintain network diagrams, standards, operating procedures, inventory, capacity plans, lifecycle roadmaps, and disaster-recovery documentation.
• Participate in on-call support, vulnerability remediation, compliance reviews, and vendor escalation activities., * Configure and troubleshoot F5 BIG-IP LTM, including virtual servers, pools, nodes, monitors, profiles, SNAT, persistence, traffic policies, and SSL offload.
• Manage SSL/TLS certificates, ciphers, health checks, high availability, upgrades, backup, and recovery.
• Develop and troubleshoot iRules; experience with F5 DNS/GTM and Advanced WAF/ASM is preferred.
• Resolve latency, session persistence, SSL handshake, health-monitor, and traffic-distribution issues., * Administer Palo Alto firewalls and Panorama, including zones, security policies, NAT, objects, App-ID, User-ID, URL filtering, threat profiles, and logging.
• Troubleshoot sessions, routing, policy matching, NAT, IPsec VPN, GlobalProtect, and application connectivity using logs, CLI tools, and packet captures.
• Perform PAN-OS upgrades, rulebase cleanup, recertification, migrations, and security-hardening activities.

Cisco ACI and Nexus

• Design and troubleshoot Cisco ACI fabrics using APIC, tenants, VRFs, bridge domains, application profiles, EPGs, contracts, filters, VMM integration, and L3Out.
• Configure Cisco Nexus 3K/5K/7K/9K platforms using VLANs, trunks, vPC, STP, HSRP, OSPF, BGP, VXLAN, and EVPN.
• Troubleshoot endpoint learning, contracts, routing adjacency, fabric health, interfaces, port channels, and Layer 2/Layer 3 connectivity.
• Support data-center migrations, segmentation, fabric expansion, software upgrades, and hardware refresh programs.

Cisco Meraki

• Design, deploy, and administer Cisco Meraki MX security appliances, MS switches, MR wireless access points, and the Meraki Dashboard.
• Configure Auto VPN, SD-WAN, traffic shaping, content and security policies, VLANs, DHCP, site-to-site VPN, client VPN, and high availability.
• Plan wireless networks using RF fundamentals, channel and power optimization, SSIDs, authentication, guest access, and roaming.
• Monitor organization and network health, analyze event logs and packet captures, manage templates and firmware, and troubleshoot branch, LAN, WAN, and Wi-Fi issues.
• Use Meraki APIs and automation workflows for inventory, configuration validation, monitoring, and large-scale deployment.

Cloud Networking

• Design and support Microsoft Azure and AWS connectivity across cloud and on-premises data centers.
• Azure: VNets, subnets, NSGs, UDRs, Load Balancer, Application Gateway, Azure Firewall, VPN Gateway, ExpressRoute, Private Link, and DNS.
• AWS: VPCs, subnets, route tables, Security Groups, NACLs, Transit Gateway, Elastic Load Balancing, Direct Connect, Route 53, PrivateLink, and Site-to-Site VPN.
• Troubleshoot asymmetric routing, overlapping address space, DNS, MTU, VPN, firewall, load-balancing, and cloud-to-data-center connectivity.
• Implement automation and Infrastructure as Code using Python, Ansible, Terraform, REST APIs, JSON, YAML, and Git., * Administer enterprise DDI platforms, preferably Infoblox Grid, including DNS zones and records, DHCP scopes, reservations, failover, IPAM, and role-based access.
• Troubleshoot recursive and authoritative DNS, forwarding, delegation, DNSSEC, DHCP allocation, lease, and address-management issues.
• Maintain address plans, naming standards, DNS/DHCP resiliency, automation workflows, reports, upgrades, backups, and disaster-recovery procedures., * High network availability and timely restoration of critical services.
• Reliable delivery of changes with complete validation and rollback readiness.
• Reduction in repeat incidents through effective RCA and corrective actions.
• Improved security posture, lifecycle compliance, capacity, and operational documentation.
• Measurable automation of repeatable configuration, validation, inventory, and reporting tasks.

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or equivalent practical experience.
• 8+ years of enterprise network engineering experience, including at least 3 years in a senior or L3 role.
• Advanced knowledge of TCP/IP, IPv4/IPv6, VLANs, STP, vPC, HSRP/VRRP, OSPF, BGP, VPN, QoS, NAT, wireless networking, and packet analysis.
• Hands-on production experience with F5 BIG-IP LTM, Palo Alto firewalls/Panorama, Cisco ACI/APIC, Cisco Nexus, and Cisco Meraki.
• Practical Azure and/or AWS networking experience, including private connectivity to on-premises environments.
• Hands-on DNS, DHCP, and IPAM experience with Infoblox or a comparable enterprise DDI solution.
• Experience with Wireshark, tcpdump, network monitoring, ITIL incident/problem/change processes, and technical documentation.
• Strong communication skills and the ability to coordinate high-severity incidents and complex changes.

Preferred Certifications and Skills

• F5 Certified BIG-IP Administrator or F5 Certified Technology Specialist.
• Palo Alto Networks Certified Network Security Engineer (PCNSE).
• Cisco CCNP Enterprise or CCNP Data Center; CCIE is an advantage.
• Cisco Meraki Solutions Specialist (CMSS), ECMS training, or equivalent Meraki implementation experience.
• Microsoft Certified: Azure Network Engineer Associate or AWS Certified Advanced Networking - Specialty.
• Infoblox accreditation or equivalent enterprise DDI training.
• Experience with SolarWinds, Splunk, LogicMonitor, ThousandEyes, NetBox, ServiceNow, Git, CI/CD, SASE, SD-WAN, and Zero Trust segmentation., LTM, SSL, HA, iRules; DNS/GTM and WAF preferred

Palo Alto

Advanced

PAN-OS, Panorama, policy, NAT, VPN, threat controls

Cisco ACI

Advanced

APIC, EPGs, contracts, L3Out, fabric troubleshooting

Cisco Nexus

Advanced

vPC, OSPF, BGP, VXLAN/EVPN, data-center switching

Cisco Meraki

Advanced

MX, MS, MR, Dashboard, Auto VPN, SD-WAN, Wi-Fi

Cloud Networking

Intermediate to Advanced

Azure/AWS, ExpressRoute/Direct Connect, VPN, load balancing

DDI

Intermediate to Advanced

Infoblox, DNS, DHCP, IPAM, resiliency

Automation

Preferred

Python, Ansible, Terraform, APIs, Git

• The Salary for this position will be $99,000 and $115, 000 yearly depending on experience and other qualifications of the successful candidate.
• This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.
• Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:
• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contributions
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan
• Disclaimer: The compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.