Network Engineer

Elevait Solutions LLC; Palo Alto (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

Elevait Solutions LLC in Palo Alto, CA is seeking a Network Engineer to design, implement, and manage campus and data center networks. You will lead LAN/WLAN design, enforce security controls, and optimize performance across HQ and remote sites.

The role requires 4–6 years of hands-on experience with Palo Alto firewalls, BGP routing, and wireless design, with a focus on high availability and zero-trust segmentation. Onsite work in Palo Alto is expected.

Qualifications

• 4 to 6 years of hands-on enterprise networking experience.
• Palo Alto Networks NGFW and Panorama expertise, including GlobalProtect VPN.
• Strong routing and switching fundamentals: BGP, OSPF, VLANs, STP/L2/L3 design.
• Wireless design and support on WLAN platforms with Wi‑Fi 6 in enterprise environments.
• Willingness to work onsite in Palo Alto, CA.

Responsibilities

• Design and maintain corporate LANs for HQ and remote offices.
• Manage wireless LAN including site surveys and RF planning.
• Administer 802.1X, certificate-based auth, and guest segmentation.
• Operate the datacenter spine-leaf with BGP and VxLAN/EVPN; ensure high availability.
• Monitor capacity, latency, and collaborate with server/storage teams on connectivity.
• Manage Palo Alto PA-Series, Panorama, and SCM with security policies and Threat Prevention.
• Administer GlobalProtect VPN and Prisma Access; enforce zero-trust segmentation.
• Conduct firewall rule reviews and support security audits.
• Monitor network health with SNMP, NetFlow/sFlow; lead incident resolution.
• Develop automation with Python, Ansible, and Terraform; use AI-assisted tools.

Skills

NGFW & Panorama

Routing & Switching

Wireless LAN design

Tools

Python

Ansible

Terraform

Job description

Job Title: Network Engineer, Campus and Datacenter
Industry: Technology
Location: Palo Alto, CA

Top 3 Skills

• Next-generation firewall administration on Palo Alto Networks and Panorama, including security policy, zone segmentation, and GlobalProtect VPN
• Enterprise routing and switching, including BGP, OSPF, VLANs, STP, and L2/L3 design
• Enterprise wireless LAN design and support, including Wi‑Fi 6 and RF optimization

What You ll Do

• Design and maintain the corporate LAN (access, distribution, and core switching, VLANs, STP, and QoS) for headquarters and remote offices
• Manage the wireless LAN, both controller-based and cloud-managed, including site surveys, RF planning, SSID design, and client troubleshooting
• Administer 802.1X network access control, certificate-based authentication, and guest network segmentation
• Operate and evolve the datacenter spine-leaf network with BGP, VxLAN/EVPN overlays, and high-availability designs
• Monitor capacity and latency baselines, and partner with server, storage, and platform teams on rack-and-stack connectivity and expansions
• Manage Palo Alto Networks PA-Series, Panorama, and SCM, covering security policy, App-ID, URL filtering, Threat Prevention, and WildFire
• Administer GlobalProtect VPN and Prisma Access and enforce zero-trust segmentation between zones
• Run firewall rule reviews, clean up unused policies, and support security audits
• Monitor network health with SNMP, streaming telemetry, and NetFlow/sFlow, and lead incident resolution and root-cause analyses
• Build automation in Python, Ansible, and Terraform, and use AI-assisted tools for log analysis, runbooks, and documentation

What We Need From You

• 4 to 6 years of hands‑on enterprise network engineering
• Palo Alto Networks NGFW and Panorama experience, including security policy management, zone-based segmentation, and GlobalProtect VPN
• Routing and switching fundamentals: BGP, OSPF, STP/RSTP, VLANs, LACP, and L2/L3 design
• Enterprise wireless design and support on Cisco Meraki, Aruba, or equivalent, including Wi‑Fi 6 and RF optimization
• Working knowledge of datacenter spine‑leaf, VxLAN/EVPN, and high‑availability failover, and the ability to work onsite in Palo Alto, CA

Preferred / Bonus

• PCNSE, CCNP Enterprise, CWNA/CWSP, or equivalent certifications
• Network automation with Python, Ansible, or Terraform
• Public cloud networking on AWS, Azure, or GCP, including hybrid connectivity such as Direct Connect, ExpressRoute, and VPN
• Load balancers such as F5, AVI/NSX ALB, or NGINX
• 802.1X/NAC platforms such as Cisco ISE or Aruba ClearPass
• Comfort using AI tools such as Claude or Copilot for network operations and documentation