Network Engineer L-3

Coretek; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Coretek seeks a Network Engineer – L3 to design, implement, support, and continuously improve enterprise network and network security environments across Azure, hybrid, and on-prem data centers for managed services clients.

This role owns complex routing, switching, firewall, SD-WAN, and cloud connectivity solutions, translating business, security, and compliance requirements into resilient, secure architectures.

Qualifications

• 5+ years of enterprise network engineering experience, including 4+ years as a Cloud Network Engineer supporting multiple clients and systems.
• Hands-on experience designing and supporting Azure networking and hybrid connectivity in production environments.
• Strong experience administering Palo Alto and/or Fortinet next-generation firewalls.
• Experience providing L3 escalation support, leading major incident triage, and completing root cause analysis in a managed services or multi-client environment.
• Proven ability to move between design, hands-on implementation, troubleshooting, and client communication.

Responsibilities

• Azure & Hybrid Cloud Networking: design, deploy, and support Azure network architectures (hub-and-spoke, Virtual WAN, VNets, peering, UDRs, NSGs, Private Endpoints/Private DNS) and hybrid connectivity (VPN, ExpressRoute).
• Network Security & Firewalls: manage Palo Alto and Fortinet firewalls on-prem and in Azure; build security policies, VPNs, URL filtering, threat profiles; apply Zero Trust.

Skills

Azure Networking

Palo Alto

Fortinet

L3 escalation

Client communication

SD-WAN

Cloud connectivity

Tools

Terraform

Bicep

Ansible

PowerShell

Python

VM-Series

PAN-OS

Panorama

FortiGate

Job description

Coretek is seeking a Network Engineer – L3 to design, implement, support, and continuously improve enterprise network and network security environments across Azure, hybrid, and on-premises data centers for managed services clients. This role owns complex routing, switching, firewall, SD-WAN, and cloud connectivity solutions, translating business, security, and compliance requirements into resilient, secure, and supportable network architectures.

The ideal candidate combines deep hands-on experience with Palo Alto and Fortinet firewalls, Azure networking, and enterprise LAN/WAN with strong troubleshooting discipline and client-facing communication. The engineer serves as the senior escalation point for network incidents, leads root cause analysis, reduces recurring issues, and drives standards, automation, and continuous improvement across the managed network estate.

Key Responsibilities

Azure & Hybrid Cloud Networking

• Design, deploy, and support Azure network architectures including hub-and-spoke, Virtual WAN, VNets, peering, UDRs, NSGs, and Private Endpoints/Private DNS.
• Implement and troubleshoot hybrid connectivity using site-to-site VPN, point-to-site VPN, and ExpressRoute.
• Configure and support Azure Firewall, Application Gateway/WAF, Azure Load Balancer, Front Door, and DNS services.
• Align network designs to Cloud Adoption Framework landing zone connectivity guidance and Well-Architected principles.
• Maintain network diagrams, IP address plans, architecture decisions, and configuration standards.

Network Security & Firewalls

• Design, deploy, and manage Palo Alto (PAN-OS, Panorama, VM-Series) and Fortinet (FortiGate, FortiManager) firewalls on-premises and in Azure.
• Build and maintain security policies, NAT, IPsec tunnels, GlobalProtect/remote access VPN, URL filtering, and threat prevention profiles.
• Apply Zero Trust and network segmentation principles across cloud and data center environments.
• Perform firewall rule reviews, policy cleanup, and security posture assessments, and create prioritized remediation plans.
• Coordinate with security operations teams on threat investigations, vulnerability remediation, and compliance requirements.

Enterprise LAN/WAN & Data Center

• Support and optimize routing and switching environments, including BGP, OSPF, VLANs, STP, and Layer 2/Layer 3 designs.
• Manage SD-WAN, wireless, load balancing, and data center network infrastructure.
• Plan and execute network upgrades, migrations, firmware/OS lifecycle management, and data center-to-cloud transitions.
• Validate capacity, redundancy, and failover designs to meet availability commitments.

Managed Services Support, Escalation & Reliability

• Provide L3 escalation support for complex network, firewall, connectivity, and performance issues across multiple clients.
• Lead technical triage, packet capture and traffic analysis, service restoration, and coordination with ISPs, vendors, and client teams.
• Perform root cause analysis, document corrective actions, and eliminate recurring incidents through engineering improvements.
• Improve network monitoring, alert quality, runbooks, and change and maintenance procedures.
• Participate in an escalation/on-call rotation and provide clear, timely status communications during major incidents.

Automation & Operational Excellence

• Automate network deployment and configuration tasks using Terraform, Bicep, Ansible, PowerShell, or Python.
• Develop and enforce network standards, templates, and configuration baselines across client environments.
• Review incident, ticket, and capacity trends to identify proactive improvements.
• Track remediation completion, risk reduction, and service stability outcomes.

Client Advisory & Technical Leadership

• Serve as a trusted network advisor and escalation point for managed services clients.
• Lead network design reviews, technical discovery, and recommendation readouts.
• Mentor Systems Engineers and service desk staff and build reusable troubleshooting guidance and knowledge articles.
• Collaborate with Azure, security, EUC, service delivery, and account teams; support presales discovery and client onboarding into managed services.

• 5+ years of enterprise network engineering experience, including 4+ years as a Cloud Network Engineer supporting multiple clients and systems.
• Hands-on experience designing and supporting Azure networking and hybrid connectivity in production environments.
• Strong experience administering Palo Alto and/or Fortinet next-generation firewalls.
• Experience providing L3 escalation support, leading major incident triage, and completing root cause analysis in a managed services or multi-client environment.
• Proven ability to move between design, hands-on implementation, troubleshooting, and client communication.

Technical Expertise

• Azure Networking: VNets, hub-and-spoke, Virtual Wan
• ExpressRoute, VPN, and hybrid connectivity
• Palo Alto PAN-OS, Panorama, and VM-Series
• Fortinet FortiGate and FortiManager
• Routing & Switching:BGP, OSPF, VLANs
• SD-WAN, load balancing, and DNS
• Zero Trust, segmentation, and Azure Firewall
• Terraform, Bicep, Ansible, and network automation

Preferred Certifications

• Microsoft Certified: Azure Network Engineer Associate (AZ-700) – required
• Palo Alto Networks Certified Network Security Professional
• Fortinet Certified Professional: Network Security
• Palo Alto Networks Certified Next-Generation Firewall Engineer
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• CCNP Enterprise or equivalent

Desired Characteristics

• Disciplined, methodical troubleshooting and strong network design judgment
• Consultative, client-focused communication during normal operations and high-severity incidents
• Ownership, accountability, urgency, and bias for action
• Ability to work independently while collaborating across cloud, security, and support teams
• Strong documentation, knowledge transfer, and diagramming skills
• Coaching mindset and willingness to grow the technical capability of the team
• Commitment to secure, stable, automated, and standards-driven network outcomes

Success Metrics

Performance Area -- Measure of Success

• Network Reliability -- Reduced network-related incidents, outages, and repeat issues
• Security Posture -- Firewall policy hygiene, closed findings, and measurable risk reduction
• Cloud Connectivity -- Secure, scalable, and supportable Azure and hybrid network implementations
• Escalation Support -- Effective L3 ownership, timely restoration, and quality root cause analysis
• Automation & Standards -- Reusable templates, configuration baselines, and reduced manual effort
• Documentation -- Current diagrams, IP plans, runbooks, and knowledge articles
• Change Quality -- Successful changes and migrations with minimal unplanned impact