Network Engineer

CBTS; Irving (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

CBTS is seeking a Sr. Network Engineer to lead migration of store backend systems and to architect, deploy, and maintain scalable enterprise LAN/WAN networks.

You will utilize BGP/OSPF/EIGRP, VXLAN, and multi-vendor environments to ensure robust connectivity and performance. The role emphasizes F5 BIG-IP LTM/GTM, ASM/WAF, and Aruba Mobility/Campus switching, with focus on secure remote access, policy-driven security, and proactive network management.

Qualifications

• CCNP-level networking knowledge and enterprise LAN/WAN design.
• Experience with F5 BIG-IP LTM/GTM and WAF/APM.
• Proficiency with Aruba wireless and switching architectures.
• Experience with SDWAN, VPNs, and multi-vendor environments.
• Strong troubleshooting using protocol analyzers (e.g., Wireshark).
• Proven ability to design, deploy, and maintain scalable network infrastructure.

Responsibilities

• Design and deploy scalable enterprise LAN/WAN networks using BGP, OSPF, EIGRP, and VXLAN.
• Manage firmware upgrades, backups, and hardware refreshes across multi-vendor environments.
• Diagnose and resolve complex network issues using protocol analyzers.
• Configure and optimize F5 BIG-IP LTM and GTM/DNS modules.
• Deploy and manage F5 ASM/WAF and APM for secure remote access.
• Architect, deploy, and support Aruba Mobility and campus switching fabrics.
• Oversee network monitoring and configuration compliance using Aruba/Aruba AirWave/Central.

Skills

CCNP

SDWAN

Aruba

F5 BIG-IP

Network Design

BGP/OSPF/EIGRP

VXLAN

Wireshark

Aruba AirWave/Central

Education

CCNP or equivalent

Tools

ArubaOS-CX

F5 BIG-IP

Wireshark

Job description

Sr. Network Engineer: Migration of store backend systems

• CCNP
• SDWAN
• Aruba is a BIG win for this one.
• F5

Core Routing & Switching (CCNP Level)Design & Deploy: Architect and maintain scalable enterprise LAN/WAN networks utilizing BGP, OSPF, EIGRP, and VXLAN protocols.

Infrastructure Lifecycle: Manage firmware upgrades, configuration backups, and hardware refreshes across multi-vendor environments.

Tier 3 Escalation: Diagnose and resolve complex packet-level network anomalies using protocol analyzers like Wireshark.

Application Delivery & Load Balancing (F5 BIG-IP)Traffic Management: Configure, maintain, and optimize F5 BIG-IP LTM (Local Traffic Manager) and GTM/DNS (Global Traffic Manager) modules.

Security & Access:

• Deploy and manage F5 ASM/WAF (Advanced Web Application Firewall) policies and APM (Access Policy Manager) for secure remote access.
• Scripting: Write and debug custom F5 iRules to manipulate network traffic, handle HTTP redirects, and enforce granular security policies.
• SSL/TLS Management: Oversee SSL/TLS offloading, certificate renewals, and cipher suite optimization on F5 devices.
• Wireless & Edge Networking (Aruba)Mobility Solutions: Architect, deploy, and support Aruba enterprise wireless networks, including Mobility Conductors (MM) and Mobility Controllers (MC).Campus Switching: Configure and manage ArubaOS-CX and ArubaOS-S switching fabrics, optimizing for VLANs, Link Aggregation (LACP), and QoS.
• Network Access Control: Implement, monitor, and troubleshoot secure network access control (802.1X, MAC auth, guest portals) utilizing Aruba ClearPass Policy Manager.

Network Management:

Utilize Aruba AirWave or Aruba Central for proactive network monitoring, configuration compliance, and site-survey analysis.

Certification: Active Cisco CCNP (Enterprise/Routing & Switching) or equivalent demonstrable knowledge level.

F5 Expertise: Hands-on experience managing F5 BIG-IP v15+ environments (F5 Certified Professional certifications like 201 or 301 are a strong plus).

Aruba Expertise: Proven track record with Aruba wireless architectures and AOS-CX switches (Aruba ACMP or ACCP certifications preferred).

Protocols: Deep understanding of TCP/IP, IPv4/IPv6 addressing, DNS, DHCP, NAT, Spanning Tree (RSTP/MSTP), and VRRP.

Security: Strong grasp of enterprise security concepts, including stateful firewalls, IPS/IDS, and IPsec VPNs.