Network Engineer — Enterprise Security & Cloud Networking

Office Ally; Washington (District of Columbia); Sur place; USD 90 000 - 150 000; Plein temps

Avantages offerts par ce poste

Medical insurance

Dental insurance

Vision insurance

401(k) with company match

Paid time off

Résumé du poste

Office Ally is seeking a Network Engineer to design, manage, and secure our enterprise network infrastructure across data center, cloud, and office environments. You will own Palo Alto firewalls, F5 BIG-IP load balancing, VPNs, and UniFi office networks, while aligning with SOC 2 and HIPAA requirements.

You will work with cloud, security, and application teams to deliver a reliable, segmented network fabric enabling compliant operations and efficient workflows across multiple sites.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Network Engineering, or a related field.
• 3+ years of hands-on network engineering experience in an enterprise or multi-site environment.
• Proficiency with Palo Alto Networks firewalls and PAN-OS including policy management, NAT, VPN, and HA configuration.
• Experience administering F5 BIG-IP LTM including virtual servers, iRules, SSL offload, and health monitors.
• Experience deploying and managing Ubiquiti UniFi environments across multiple sites.
• Thorough understanding of core networking protocols including TCP/IP, BGP, OSPF, VLAN/802.1Q, STP, and LACP.
• Familiarity with network security principles including segmentation, ACLs, NAC, 802.1X, and zero-trust concepts.
• Experience with packet capture and analysis tools (Wireshark, tcpdump) for troubleshooting.
• Ability to read and write basic automation scripts (Python, Bash) for network tasks.
• Palo Alto Networks certifications (PCNSA, PCNSE) and CCNA/CCNP equivalents.
• Exposure to network automation and IaC tooling including Ansible and Terraform (network providers).
• Experience with Azure networking including VNets, VPN Gateway, ExpressRoute, Azure Firewall, and Private Endpoints.
• Experience with SIEM integration for network log forwarding and correlation (Microsoft Sentinel).

Responsabilités

• Administer and maintain Palo Alto Networks firewalls (PA-Series, VM-Series) and Panorama for centralized policy management.
• Design and enforce security policy rulesets, NAT policies, application-based controls, and URL filtering using PAN-OS.
• Manage GlobalProtect VPN for remote access, including gateway configuration, split tunneling, and MFA integration.
• Configure and maintain IPsec VPN tunnels for site-to-site connectivity with data centers and cloud environments.
• Administer F5 BIG-IP LTM for application load balancing, SSL/TLS offload, and traffic steering across server pools.
• Configure and maintain virtual servers, pool members, health monitors, iRules, and persistence profiles.
• Manage SSL certificate lifecycle on F5, including certificate installation, renewal, and cipher suite hardening.
• Collaborate with application teams to optimize traffic policies, implement session persistence, and troubleshoot application delivery issues.
• Travel up to 5% may be required.

Connaissances

Palo Alto firewalls

F5 BIG-IP

Ubiquiti UniFi

TCP/IP,BGP,OSPF

VPNs

Scripting (Python,Bash)

Network security

Zero-trust concepts

Formation

Bachelor's degree in CS/IT/Networking

Outils

PAN-OS

F5 BIG-IP

UniFi OS

Azure Networking

Microsoft Sentinel

Wireshark

Description du poste

Office Ally is seeking a Network Engineer to design, manage, and secure our enterprise network infrastructure across data center, cloud, and office environments. You will own Palo Alto firewalls, F5 BIG-IP load balancing, VPNs, and UniFi office networks, while aligning with SOC 2 and HIPAA requirements.

You will work with cloud, security, and application teams to deliver a reliable, segmented network fabric enabling compliant operations and efficient workflows across multiple sites.