Network Engineer IV

Webhosting; Northern (KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Webhosting is seeking a senior network engineer to design, architect, and support a large, multi-datacenter network environment. The role emphasizes Cisco ACI and SDA fabric, BGP/OSPF routing, and high availability across Nexus and security fabrics.

The candidate will lead complex troubleshooting, mentor engineers, and drive automation using Python and Ansible. Remote work with periodic travel to Northwest regions may be required.

Qualifications

• Senior technical resource for complex network solutions.
• Experience with multi-datacenter environments.

Responsibilities

• Designs scalable network solutions across routing, switching, fabric, and security domains.
• Leads complex troubleshooting of routing, fabric, and firewall issues.
• Architects Cisco ACI and SDA fabric environments and policy.
• Manages BGP/OSPF routing in multi-site architectures.
• Ensures highly available switching with VXLAN/EVPN.
• Configures Palo Alto firewalls and security policies.
• Develops NAC policies and device compliance.
• Mentors less experienced engineers and participates in on-call rotation.
• Implements automation and IaC pipelines (Python, Ansible).
• Produces technical documentation and diagrams.

Skills

Network design

Cisco ACI

SD-Access

BGP

OSPF

Firewalls

NAC policy

Automation

Python

Ansible

Mentoring

On-call

Documentation

Education

CCNP Routing/Switching

CCIE Preferred

Tools

Cisco Nexus

DNA Center

Palo Alto

Forescout

Aruba Clearpass

Job description

Job Description

Job Profile Summary

Responsible for the design, architecture, engineering, implementation, and support of the Enterprise and multi datacenter network environment, spanning routing, switching, campus fabric, and network security. Acts as a senior technical resource for troubleshooting and architecting complex network solutions and may serve as a project lead or mentor for other engineers on the team.

Location:Remote – Work from Home. Pacific Northwest-based preferred but not required. Periodic travel to the Seattle, WA metropolitan area required, up to 10%.

Key Responsibilities

• Designs and architects scalable, resilient network solutions across routing, switching, fabric, and security domains
• Leads complex troubleshooting efforts, including routing protocol issues, fabric/switching connectivity, and firewall policy conflicts
• Architects and maintains Cisco ACI fabric environments, including tenant design, endpoint groups, contracts, and fabric integration
• Architects and maintains Cisco SD-Access (SDA) fabric environments, including underlay/overlay design, fabric edge/border/control-plane nodes, and DNA Center-based policy and segmentation
• Designs, configures, and troubleshoots BGP and OSPF routing environments, including route redistribution, policy control, and multi-site architectures
• Architects highly available switching infrastructure across Nexus, ACI, and SD-Access fabric environments, including VXLAN/EVPN-based segmentation and fabric-based redundancy to eliminate single points of failure
• Configures, maintains, and troubleshoots Palo Alto Networks firewalls, including security policy design, NAT, VPN, and threat prevention
• Designs and manages network access control (NAC) policies and device compliance using Forescout or Aruba Clearpass.
• Serves as an escalation point for high-level, service-impacting network issues
• Identifies, reviews, and recommends security postures to peers and appropriate security teams
• Researches, evaluates, and recommends hardware, software, and vendor solutions based on cost, performance, and business need
• Leads implementation planning prior to installation of network hardware such as routers, firewalls, wireless controllers, and switches
• Develops project plans and task lists for network initiatives, and participates in peer design reviews
• Partners with vendors and third-party providers to evaluate and integrate new equipment and services
• Creates and maintains technical documentation, network diagrams, and standard operating procedures
• Mentors and provides technical guidance to less experienced engineers
• Participates in on-call support rotation per team design
• Architects and implements automation and infrastructure-as-code pipelines (Python, Ansible) to drive configuration consistency, enforce compliance, and accelerate policy deployment across the enterprise network and security fabric

Certifications

• CCNP or higher required (Routing and Switching, Enterprise, or Data Center track); CCIE preferred