Network Devops Engineer

Zeal Solutions Inc; Palo Alto (CA); Vor Ort; USD 120.000 - 150.000; Vollzeit

Zusammenfassung

Zeal Solutions Inc. seeks a Network Engineer for Corporate & Datacenter Global Infrastructure and Platform Services in Palo Alto. You will design, implement, and optimize the corporate LAN, wireless networks, and datacenter connectivity to support global operations.

The role emphasizes hands-on engineering, automation, and security policy management with Palo Alto technologies, and requires collaboration with Server, Storage, and Platform teams.

Qualifikationen

• 4–6 years of hands-on enterprise network engineering experience.
• Proficiency with Palo Alto NGFWs and Panorama, including policy management and GlobalProtect VPN.
• Strong routing and switching fundamentals: BGP, OSPF, STP/RSTP, VLANs, LACP.
• Experience designing and supporting enterprise wireless networks (Meraki/Aruba) and Wi‑Fi 6.
• Datacenter networking concepts like spine-leaf, VxLAN/EVPN, and high-availability.
• Excellent written and verbal communication; able to produce runbooks and postmortems.

Aufgaben

• Design and maintain the corporate LAN with VLANs, STP, and QoS for HQ and remote offices.
• Manage wireless LAN infrastructure; site surveys, RF planning, SSID design, troubleshooting.
• Administer 802.1X NAC and certificate-based authentication; guest network segmentation.
• Operate and evolve the datacenter network; spine-leaf, BGP, VxLAN/EVPN, high availability.
• Monitor network health with SNMP, NetFlow/sFlow; drive incident resolution.
• Develop automation scripts (Python, Ansible, Terraform) to reduce toil and improve consistency.
• Use AI-assisted tools to accelerate log analysis and runbooks.

Kenntnisse

Routing & Switching

Wireless Networking

Datacenter Networking

Troubleshooting

Communication

Security & Firewalls

Ausbildung

PCNSE

CCNP Enterprise

CWNA/CWSP

Tools

Palo Alto NGFWs

Panorama

GlobalProtect VPN

Prisma Access

Python

Ansible

Terraform

Jobbeschreibung

Network Engineer, Corporate & Datacenter Global Infrastructure and Platform Services (GIPS) Palo Alto (Onsite)

Responsibilities

• Corporate & Campus Networking
• Design and maintain the corporate LAN, including access/distribution/core switching, VLANs, STP, and QoS for the Palo Alto HQ and remote offices.
• Manage and optimize the wireless LAN infrastructure (controller-based and cloud-managed), including site surveys, RF planning, SSID design, and client troubleshooting.
• Administer 802.1X network access control, certificate-based authentication, and guest network segmentation.
• Datacenter Networking
• Operate and evolve the datacenter network, including spine-leaf architecture, BGP, VxLAN/EVPN overlays, and high-availability designs.
• Ensure network stability and performance across on-premises datacenter infrastructure by proactively monitoring capacity and latency baselines.
• Partner with Server, Storage, and Platform Engineering teams on rack-and-stack connectivity, new service deployments, and capacity expansions.
• Security & Firewall (Palo Alto Networks)
• Manage Palo Alto Networks NGFW platforms (PA-Series, Panorama, SCM), including security policy, App-ID, URL filtering, Threat Prevention, and WildFire integration.
• Administer GlobalProtect VPN and Prisma Access for remote access and enforce zero-trust network segmentation between zones.
• Conduct firewall rule reviews, clean up unused policies, and support periodic security audits.
• Reliability & Automation
• Monitor network health using observability tooling (SNMP, streaming telemetry, NetFlow/sFlow) and drive resolution of incidents and root-cause analyses.
• Develop and maintain automation scripts and configuration management workflows (Python, Ansible, Terraform) to reduce operational toil and improve consistency.
• Use AI-assisted tools to accelerate log analysis, runbook generation, and network documentation.

Qualifications

• 4 to 6 years of hands-on enterprise network engineering experience.
• Proficiency with Palo Alto Networks NGFWs and Panorama, including security policy management, zone-based segmentation, and GlobalProtect VPN.
• Solid understanding of routing and switching fundamentals: BGP, OSPF, STP/RSTP, VLANs, LACP, and L2/L3 design.
• Experience designing and supporting enterprise wireless networks (Cisco Meraki, Aruba, or equivalent), including familiarity with 802.11ax/Wi-Fi 6 and RF optimization.
• Working knowledge of datacenter networking concepts such as spine-leaf architecture, VxLAN/EVPN, and high-availability failover.
• Strong troubleshooting methodology with the ability to work through complex, multi-layer production issues.
• Effective written and verbal communication skills with the ability to produce clear runbooks and incident postmortems.

Required Skills

• Palo Alto Networks NGFWs and Panorama.
• Routing and switching (BGP, OSPF, STP/RSTP, VLANs, LACP, L2/L3 design).
• Enterprise wireless networking (Cisco Meraki, Aruba, or equivalent) and 802.11ax/Wi-Fi 6.
• Datacenter networking (spine-leaf, VxLAN/EVPN, high-availability failover).
• Troubleshooting complex, multi-layer production issues.
• Written and verbal communication for runbooks and incident postmortems.

Preferred Skills

• Relevant certifications such as PCNSE, CCNP Enterprise, CWNA/CWSP, or equivalent.
• Experience with network automation using Python, Ansible, or Terraform.
• Familiarity with public cloud networking (AWS, Azure, or GCP) and hybrid connectivity solutions such as Direct Connect, ExpressRoute, and VPN.
• Exposure to load balancers including F5, AVI/NSX ALB, or NGINX and application delivery in datacenter environments.
• Experience with 802.1X / NAC platforms such as Cisco ISE, Aruba ClearPass, or equivalent.
• Comfort using AI tools (e.g., Claude, Copilot) for network operations, documentation, and automation tasks.