Engineer-Network

BAL; Richardson (TX); On-site; USD 90,000 - 125,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Unlimited vacation

401(k) with company match

Job summary

BAL is seeking an experienced Infrastructure/Network Engineer in Richardson, Texas, to enhance their Palo Alto SASE & SD-WAN and Cisco Meraki networks. This role requires advanced expertise in networking solutions and an ability to integrate security within the network architecture.

The ideal candidate will work collaboratively within a driven team to deliver secure, efficient connectivity while enjoying a competitive salary, a discretionary annual bonus, and extensive benefits including unlimited vacation.

Qualifications

• 4+ years in engineering enterprise networks with SD-WAN/SASE and campus access.
• Strong knowledge of routing, DHCP/DNS/IPAM, and VLANs.
• Experience with network automation tools like Python and Ansible.

Responsibilities

• Design, implement, and optimize network solutions for reliability and security.
• Collaborate with Cyber and Systems for secure access configurations.
• Automate tasks and monitor network performance.

Skills

Palo Alto network engineering

Cisco Meraki expertise

802.1X and EAP-TLS

Network automation with Python/Ansible

Analytical problem solving

Education

Bachelor's degree in Computer Science or related field

Tools

Prisma Access

GlobalProtect

SolarWinds

Job description

Who we are: BAL is a team of brilliant people who change lives through elite immigration work and collaborative innovation. We pursue the exceptional in all that we do, but never at the expense of our values. There’s no denying our work is demanding, both in volume and pace, but we’re up for the challenge. We love the balance of hard work and fun – so, you’ll see us in jeans as we shatter glass ceilings and conventional stereotypes. BAL employees feel valued, rewarded, and respected. We seek opportunities to be of service to others and our communities. We are committed to your growth and development and want to set you up for success here at BAL and beyond.

Who you are: You are looking for work that has a purpose. You aren’t afraid to roll up your sleeves and get stuff done. You learn quickly. You move fast. You embrace challenge and detail as well as creative thinking. You believe you have something unique to contribute and you aren’t afraid to raise your hand. You understand that powering human achievement is ultimately about impacting a real person. You are looking for a place to grow and an environment where everyone has a spot and is genuinely welcome.

We’re better together: A bright, driven person like you and an industry-leading powerhouse like BAL? It’s a perfect combination! We truly want to see you succeed here and become an integral part of our mission to provide an experience that makes a positive difference in people’s lives. Come be a part of something special, where you can have an impact and be valued just for being you!

In addition to competitive pay, a discretionary annual bonus, and a supportive, team-oriented culture, we offer an outstanding benefits package that includes medical, dental, vision, disability, and life insurance, sick time, unlimited vacation, and 401(k) with company match.

OVERVIEW

The Infrastructure/Network Engineer builds and evolves the company’s Palo Alto SASE & SDâWAN and Cisco Meraki campus networks to deliver secure, performant connectivity. Responsibilities include policyâdriven networking via Strata Cloud Manager, GlobalProtect secure access, Meraki switching/wireless engineering, 802.1X/EAPâTLS integration, and network automation/observability. Collaborates with Cyber and Systems to enable identityâaware, zeroâtrust networking.

PRIMARY RESPONSIBILITIES

• Designs and implements network solutions that improve reliability, performance, and security.
• Drives standardization and documentation; influences architecture through peer reviews.
• Partners with Cyber and Systems on certificateâbased access, device posture, and telemetry to SIEM.
• Engineer and optimize Palo Alto SDâWAN fabric (path selection, QoS, HA) and SASE policies in Strata Cloud Manager.
• Configure and maintain Prisma Access/GlobalProtect for secure remote access; integrate identity and device posture.
• Develop site cutover plans and playbooks; validate performance against SLOs.
• Engineer Meraki switching/wireless: RF design, capacity planning, segmentation, and SSID architectures.
• Implement 802.1X/EAPâTLS with RADIUS/NPS and certificate services; coordinate with Systems for device cert lifecycle.
• Harden network services (DHCP/DNS/IPAM) and enforce leastâprivilege segmentation.
• Automate repetitive tasks using Python/Ansible/APIs; build compliance checks and config templates.
• Create health/telemetry dashboards (latency, loss, jitter, SNR, link quality); instrument alerting and runbooks.
• Contribute logs/metrics to SIEM (e.g., Rapid7) and analyze trends to reduce MTTR.
• Author CRs with impact analysis, testing plans, and backout; perform staged rollouts.
• Execute rootâcause analysis and implement durable fixes; maintain reference configurations.
• Collaborate with Cyber to align with ISO/NIST/CIS controls and evidence collection.

QUALIFICATIONS

• 4+ years engineering enterprise networks with SDâWAN/SASE and campus access.
• Habitsâon with Palo Alto (Strata Cloud Manager, PANâOS) and Cisco Meraki (switching/wireless).
• Strong knowledge of 802.1X, EAPâTLS, RADIUS/NPS, VLANs, routing (OSPF/BGP), QoS, and HA.
• Experience with Python/Ansible/APIs for network automation; strong documentation and change discipline.
• Strata Cloud Manager policy stacks/templates; PANâOS; Prisma Access/GlobalProtect.
• Meraki Dashboard (switch/AP), RF fundamentals, and WiâFi troubleshooting.
• RADIUS/NPS, certificate services for EAPâTLS; DHCP/DNS/IPAM.
• Python/Ansible, REST APIs, Git; SolarWinds (or similar) telemetry.
• Analytical problem solving and crisp technical communication.
• Proactive risk identification and mitigation; bias for automation.
• Palo Alto Strata Cloud Manager, Prisma Access/GlobalProtect, PANâOS.
• Cisco Meraki switch/AP, RADIUS/NPS, DHCP/DNS/IPAM.
• SolarWinds (or similar), Python/Ansible, REST APIs, ServiceNow/Jira, Git.

Preferred

• Experience with Prisma Access/GlobalProtect and certificateâbased access patterns.
• Exposure to SolarWinds or similar tools; DNS/DHCP/IPAM best practices.
• Certifications: PCNSE, Palo Alto SASE/SDâWAN, Cisco ENCOR/ENARSI, Meraki CMSS (niceâtoâhave).

WORKING CONDITIONS

• Able to sit and work at a computer keyboard for extended periods of time.
• Able to stoop, kneel, bend at the waist and reach daily.
• Able to perform general office administrative activities: copying, filing, delivering and using the telephone.
• Able to lift and move up to 25 pounds occasionally.
• Regular and on-time attendance.
• Must be able to prioritized, schedule and complete testing required for multiple applications with overlapping schedules.
• A certain degree of creativity and flexibility is required.
• Hours may exceed 40 hours per week.
• Occasional travel by conventional means including aircraft, motor vehicle and the like within the region and to other locations as required.

Note: To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed are representative of the knowledge, skill, and/or ability required and are not intended to be an exhaustive list of all duties, responsibilities or qualifications associated with this job.

Berry Appleman & Leiden is an Equal Opportunity Employer. It is the policy of BAL to ensure an equal employment opportunity without discrimination or harassment on the basis of race, color, national origin, religion, gender, gender identity or expression, age, disability, alienage or citizenship status, marital status, creed, genetic predisposition or carrier status, sexual orientation or any other characteristic protected by law. BAL prohibits and will not tolerate any such discrimination or harassment.