Network Engineer

Calance; New York (NY); On-site; USD 120,000 - 150,000; Full time

Job summary

Calance is seeking a Network Engineer in New York to design, implement, and maintain our enterprise network, firewall, and DMZ architecture. You will ensure high availability, security, and performance across on‑premises and cloud connectivity, with Azure integration.

The role requires 7+ years in a large-scale environment, expertise in Cisco Nexus OS and Spine-Leaf, and hands-on firewall and load balancing experience.

Qualifications

• Bachelor's degree or equivalent experience in computer science, IT, or a related field.
• 7+ years of experience as a Network Engineer or similar in a large enterprise.
• Expertise with Cisco Nexus OS and Spine-Leaf Architecture.
• Experience with Layer 2/3 switches and enterprise firewalls.
• Strong understanding of TCP/IP, VLANs, VPNs, MPLS, BGP, OSPF, and DNS.
• Hands-on experience with firewall platforms (Palo Alto, FortiGate, Cisco Firepower).
• Experience with load balancing technologies (F5, Citrix ADC).
• Knowledge of DMZ design and cloud connectivity, especially Azure.

Responsibilities

• Design, deploy, and maintain network infrastructure, including routers, switches, firewalls, load balancers, and VPNs.
• Configure, manage, and monitor firewall systems and enforce access-control policies.
• Configure load balancing to optimize traffic and ensure application availability.
• Implement network segmentation and VLANs for security and isolation.
• Support DMZ architecture and secure boundary between internal and external systems.
• Assist with cloud connectivity and hybrid network integration (Azure).
• Collaborate with security teams for risk assessments, vulnerability scans, and IDS/IPS tuning.
• Monitor traffic, analyze metrics, and troubleshoot to meet SLAs.
• Participate in disaster recovery and business continuity planning.
• Coordinate with vendors for procurement and implementation of network hardware and services.
• Document configurations and best practices for compliance and knowledge sharing.
• Stay current with networking trends and propose improvements.

Skills

Networking

Firewall

Load Balancing

VPN

Cloud Connectivity

DMZ

Cisco Nexus OS

Spine-Leaf

L2/L3 Switching

TCP/IP

VLANs

MPLS

BGP

OSPF

DNS

IDS/IPS

Education

Bachelor's degree in Computer Science, Information Technology, or related field

Tools

Palo Alto

FortiGate

Cisco Firepower

F5 BIG-IP

Citrix ADC

Cisco Nexus OS

Azure

Job description

• DMZ implmentation and cloud connectivity (from a networking perspective)

Position Overview:

We are seeking a highly skilled and motivated Network Engineer to join our dynamic team. As a Network Engineer, you will play a critical role in designing, implementing, and maintaining our network infrastructure, firewall systems, and load balancing solutions to ensure the security, availability, and performance of our IT environment. You will collaborate with cross-functional teams to support various projects, troubleshoot network issues, and implement best practices to optimize network performance and security.

Responsibilities:

Design, deploy, and maintain network infrastructure, including routers, switches, firewalls, load balancers, and VPN solutions, to support business requirements and ensure high availability and performance.

Configure, manage, and monitor firewall systems to safeguard network security and enforce access control policies, including rule management, VPN configurations, and intrusion detection/prevention.

Configure and maintain load balancing solutions to optimize traffic distribution, ensure application availability, and support scalability across the network environment.

Implement and maintain network segmentation and VLAN configurations to enhance network security and isolate critical assets and sensitive data.

Support DMZ architecture and implementation to secure the boundary between internal networks and external-facing systems.

Assist with cloud connectivity initiatives, including hybrid and cloud network integration with platforms such as Microsoft Azure, to support secure and reliable connections between on-premises and cloud environments.

Collaborate with IT security teams to conduct regular security assessments, vulnerability scans, and penetration tests to identify and mitigate potential security risks and vulnerabilities.

Monitor network traffic and performance metrics, analyze logs, and implement proactive measures to optimize network performance, troubleshoot issues, and ensure compliance with service level agreements (SLAs).

Participate in the design and implementation of disaster recovery and business continuity plans to ensure network resilience and minimize downtime in the event of system failures or cyber attacks.

Work closely with vendors and service providers to evaluate, procure, and implement network hardware, software, and services, ensuring compatibility, reliability, and cost-effectiveness.

Provide escalated support for troubleshooting complex network issues, including network outages, performance degradation, and security incidents, and implement timely resolutions.

Document network configurations, procedures, and best practices, and maintain accurate and up-to-date documentation to support knowledge sharing and compliance requirements.

Stay informed about emerging technologies, industry trends, and best practices in networking and cybersecurity, and recommend innovative solutions to improve network performance, security, and reliability.

Qualifications:

Bachelor's degree in Computer Science, Information Technology, or related field; or equivalent work experience.

Proven experience, 7 years working as a Network Engineer or similar role in a large-scale enterprise environment.

Expertise with Cisco Nexus OS and Spine Leaf Architecture.

Experience with Layer 2/3 switches.

Strong understanding of networking protocols, architectures, and technologies, including TCP/IP, VLANs, VPNs, MPLS, BGP, OSPF, and DNS.

Hands-on experience with enterprise firewall platforms (e.g., Palo Alto, FortiGate, Cisco Firepower, or similar).

Experience with load balancing technologies and platforms (e.g., F5, Citrix ADC, or similar).

Working knowledge of DMZ design and implementation to secure network perimeters.

Familiarity with cloud connectivity and hybrid network architectures, particularly with Microsoft Azure.

Solid understanding of network security principles and best practices, including access control, encryption, authentication, and intrusion detection/prevention systems (IDS/IPS).

Certifications - Cisco Certified Network Professional (CCNP)

Excellent analytical and problem-solving skills, with the ability to diagnose and resolve complex network issues in a timely manner.

Strong communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams and communicate technical concepts to non-technical stakeholders.

Ability to work independently and prioritize tasks in a fast-paced environment, managing multiple projects and deadlines effectively.