Network Solutions Architect | 1062835

Techlifecolumbus; Pleasanton (CA); On-site; USD 150,000 - 190,000; Full time

Job summary

Techlifecolumbus seeks an enterprise-grade Senior L3 Network Engineer (Cisco, Palo Alto, OT) to lead design, security, and operations across data centers, cloud, and manufacturing networks.

You will drive BGP routing, OT microsegmentation, and industrial Wi‑Fi deployments, while enforcing Zero Trust and modern firewall controls in hybrid WAN environments.

Qualifications

• Experience: 10+ years in enterprise network engineering for data centers, cloud, and OT environments.
• SME-level expertise in BGP routing and WAN/LAN topologies at enterprise scale.
• Hands-on OT microsegmentation and wireless design for factory floors and OT networks.

Responsibilities

• BGP Routing & Advanced Core Networking SME: design, deploy, and maintain core Cisco routing/switching infrastructure.
• OT Microsegmentation & Industrial Security: implement zero-trust segmentation in manufacturing/OT environments.
• OT Wi‑Fi Design & Deployment: RF surveys and deployment of industrial wireless networks in high-interference settings.
• Firewall Administration & Zero Trust: manage Palo Alto platforms and security policies with Purdue Model mappings.
• SD‑WAN & Hybrid WAN Engineering: deploy Cisco Viptela and Prisma SD‑WAN across MPLS, DIA, and Direct Internet.
• Multi‑Cloud Network Architecture: configure Azure, AWS, GCP networking with ExpressRoute/Direct Connect.
• Automation & Tools: develop IaC and network automation using Terraform, Ansible, Python.
• Monitoring & Modernization: use Wireshark, SolarWinds, ThousandEyes, Splunk for health and security.

Skills

BGP & routing mastery

OT microsegmentation

Industrial Wi‑Fi design

Palo Alto security

SD‑WAN & cloud networking

Automation (Terraform, Ansible, Python

Multi-cloud networking

Zero Trust security

Troubleshooting & RCA

Tools

Terraform

Ansible

Python

Wireshark

SolarWinds

ThousandEyes

Splunk

Job description

OUR GOAL: Treat our consultants and clients the way we would like others to treat us! Interested in joining our team? Check out the opportunity below and apply today!

Job Title: Senior L3 Network Engineer (Cisco, Palo Alto, SD-WAN, Cloud & OT)

Location: Pleasanton, CA with some light travel possible

We are seeking an enterprise-grade Senior L3 Network Engineer with deep domain expertise in Cisco infrastructure, Palo Alto security, multi-cloud networking, and Operational Technology (OT) environments. Serving as a Subject Matter Expert (SME) in BGP routing and IT/OT network convergence, you will drive the design, security, deployment, and operational resilience of critical enterprise, data center, cloud, and manufacturing networks.

The key areas are obviously BGP routing expertise, as well as experience with OT micro-segmentation; preferably including WiFi.

Key Responsibilities

• BGP Routing & Advanced Core Networking (SME): Serve as the Subject Matter Expert for BGP routing (eBGP/iBGP, BGP-EVPN, route reflectors, community tagging, path manipulation, and traffic engineering) across data centers, WAN, and cloud. Design, deploy, and maintain core Cisco routing/switching infrastructure (Catalyst, Nexus, ISR/ASR) and manage complex L3 protocols (BGP, OSPF, EIGRP, MPLS, route redistribution) and Layer 2/3 constructs (VLANs, STP, EtherChannel, HSRP, QoS).
• OT Microsegmentation & Industrial Security: Lead OT network security initiatives by designing and enforcing Zero Trust microsegmentation strategies within manufacturing, SCADA, PLC, and MES environments to isolate industrial assets, minimize blast radiuses, and maintain compliance (e.g., IEC 62443, NIST SP 800-82).
• OT Wi-Fi Design & Deployment: Architect, conduct RF site surveys for, deploy, and optimize industrial wireless (OT Wi-Fi) networks engineered specifically for high-interference, high-density manufacturing and plant floor environments.
• Firewall Administration & Zero Trust: Administer Palo Alto Strata Next-Generation Firewalls, Panorama, GlobalProtect, NAT, and security policies. Implement network segmentation and mapping of Purdue Model architectures into modern firewall controls.
• SD-WAN & Hybrid WAN Engineering: Design, deploy, and support SD-WAN solutions (Cisco Viptela and Palo Alto Prisma SD-WAN) while managing WAN connectivity across MPLS, DIA, Direct Internet Access, and hybrid VPNs.
• Multi-Cloud Network Architecture: Implement and support cloud networking across Azure, AWS, and GCP using ExpressRoute, Direct Connect, Cloud VPN, Transit Gateway, and Virtual WAN solutions.
• Infrastructure Support & Automation: Develop network automation using Terraform, Ansible, and Python (IaC). Provide compute network support (e.g., VMware vSAN deployments) and top-tier L3 escalation support, including root cause analysis (RCA) and major incident resolution.
• Monitoring & Modernization: Monitor network health and security using enterprise platforms (Wireshark, SolarWinds, ThousandEyes, Splunk) and lead technical documentation and network modernization initiatives.

Required Skills & Qualifications

• Experience: 10+ years in enterprise network engineering supporting data center, cloud, and manufacturing/OT environments.
• BGP & Routing Mastery: SME-level expertise in BGP routing, traffic engineering, redistribution, and enterprise-scale WAN/LAN topologies.
• OT Microsegmentation & Wireless: Demonstrated hands-on experience designing and deploying OT/industrial Wi-Fi networks in factory floor settings, alongside microsegmentation technologies (e.g., Cisco ISE, Forescout, Palo Alto, Nozomi) for ICyS/SCADA systems.
• Core Hardware & Security: Cisco (Catalyst, Nexus, ISR, ASR), Palo Alto Strata, Panorama, GlobalProtect, and NGFW security policies.
• SD-WAN & Cloud: Cisco Viptela, Prisma SD-WAN, and native multi-cloud networking across AWS, Azure, and GCP.
• Automation & Tools: Terraform, Ansible, Python, Wireshark, SolarWinds, ThousandEyes, Splunk.
• Certifications (Preferred): CCNP Enterprise / CCIE (Routing & Switching/Enterprise/Wireless), PCNSE, CWNA, or ISA/IEC 62443 Cybersecurity Specialist.

Reference:1062835

Don’t meet every single requirement? Studies have shown that women and people of color are less likely to apply to jobs unless they meet every qualification. At Revel IT, we are dedicated to building a diverse, inclusive, and authentic workplace, so if you’re excited about this role, but your experience doesn’t align perfectly with every qualification in the description, we encourage you to apply anyway. You might be the right candidate for this or our other open roles!

Revel IT is an Equal Opportunity Employer. Revel IT does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need.

#gdr4900