Contract

Zohorecruit; Pleasanton (CA); On-site; USD 120,000 - 160,000; Full time

Job summary

Pleasanton, CA-based Senior Network Engineer III role partnered with CTI Staffing to deliver enterprise network design and security for a global consumer products organization. You will architect and optimize Layer 2/3 networks, implement BGP strategies, and mentor peers in a dynamic environment.

Responsibilities include designing scalable networks, automating with Terraform and Ansible, and ensuring robust security through microsegmentation.

Qualifications

• 8+ years of enterprise network engineering experience.
• Hands-on experience with Layer 2 protocols on Cisco Catalyst 9300 platforms.
• Proven hands-on experience with BGP routing (iBGP/eBGP).
• Terraform and Ansible for network automation.
• Hands-on experience implementing microsegmentation (PVLANs/TrustSec/SGT).
• Bachelor's degree or equivalent professional experience.

Responsibilities

• Design and implement Layer 2 and Layer 3 network architectures on enterprise Cisco Catalyst platforms.
• Develop and deploy BGP routing strategies for internal and external connectivity.
• Build microsegmentation solutions to strengthen network security and isolation.
• Automate network configuration and deployment using Terraform and Ansible.
• Translate business requirements into scalable network designs with cross‑functional teams.
• Troubleshoot complex network issues in live production environments.
• Maintain documentation and configuration standards for the network team.
• Mentor junior network engineers on design and troubleshooting practices.

Skills

Layer 2 protocols

BGP routing

Terraform

Ansible

Microsegmentation

Network design

Education

Bachelor's degree or equivalent

Tools

Cisco Catalyst 9300

PVLANs

TrustSec/SGT

Job description

Pleasanton, United States |

CTI Staffing is partnering with a leading global consumer products organization to find a Senior Network Engineer III for their network infrastructure team, based in Pleasanton, CA.

This team owns enterprise network design and security across a large, complex environment. You'll be the engineer other teams come to when a routing problem or a segmentation project needs real expertise, not a quick patch. This role has room to shape how the network is architected going forward, not just maintain what's already built.

What You'll Do

• Design and implement Layer 2 and Layer 3 network architectures on enterprise Cisco Catalyst platforms
  
• Develop and deploy BGP routing strategies for internal and external connectivity
  
• Build microsegmentation solutions to strengthen network security and isolation
  
• Automate network configuration and deployment using Terraform and Ansible
  
• Translate business requirements into scalable network designs alongside cross-functional teams
  
• Troubleshoot complex network issues in live production environments
  
• Maintain documentation and configuration standards for the network team
  
• Mentor junior network engineers on design and troubleshooting practices
  

Requirements

What You Bring

Must-Have:

• 8+ years of enterprise network engineering experience
  
• Strong hands-on knowledge of Layer 2 protocols (RSTP, VLANs, trunk/access ports, MAC address tables), specifically on Cisco Catalyst 9300 platforms
  
• Proven hands-on experience with BGP routing (iBGP and eBGP configuration and optimization)
  
• Genuine hands-on experience with Terraform and Ansible for network automation
  
• Hands-on experience implementing microsegmentation (PVLANs, TrustSec/SGTs, or equivalent)
  
• Demonstrated ability to architect network solutions independently, not just maintain existing designs
  
• Bachelor's degree in Computer Science, IT, or related field, or equivalent professional experience
  
• Strong analytical, troubleshooting, and communication skills
  

Nice-to-Have:

• Experience with Cisco Catalyst 9800 wireless controllers
  
• Experience designing or supporting networks in Operational Technology (OT) environments
  

Technical Environment:

• BGP (iBGP/eBGP)
  
• Terraform, Ansible
  
• PVLANs, TrustSec/SGT
  

What Success Looks Like:

• Independently owns network design decisions within the first 6 months
  
• Has delivered at least one complete routing or microsegmentation project
  
• Is mentoring junior engineers without needing to be prompted