Senior L3 Network Engineer

KPG99 INC; Durham (NC); On-site; USD 130,000 - 190,000; Full time

Job summary

KPG99 INC is seeking an experienced network engineer to design, deploy, and support enterprise Cisco routing and switching infrastructure across data centers, cloud, and OT networks. You will manage advanced routing protocols and security controls, and collaborate with security, cloud, and infrastructure teams on strategic projects.

The role requires 10+ years of enterprise network engineering experience with Cisco, Palo Alto, SD-WAN, and cloud networking, including manufacturing/OT

Qualifications

• 10+ years enterprise network engineering experience with Cisco, Palo Alto, SD-WAN, Cloud Networking, and Manufacturing/OT networks.
• Strong experience with BGP, OSPF, EIGRP, MPLS and QoS in complex environments.
• CCNP or PCNSE certification preferred.

Responsibilities

• Design, deploy, and maintain Cisco routing/switching infrastructure across data center and WAN.
• Perform root cause analysis and resolve major network outages.
• Develop network automation using Terraform, Ansible, Python (infrastructure-as-code).
• Create technical documentation and collaborate with security, cloud, and infrastructure teams.

Skills

Cisco Routing & Switching

BGP, OSPF, EIGRP, MPLS

Network Security & Zero Trust

Terraform, Ansible, Network Automation

Wireshark

SolarWinds

ThousandEyes

Splunk

CCNP / PCNSE Preferred

Job description

Provide L3 support for enterprise, data center, cloud, and manufacturing network environments.

Design, deploy, and maintain Cisco routing and switching infrastructure.

Manage advanced routing protocols including BGP, OSPF, EIGRP, MPLS, and route redistribution.

Configure and support Layer 2/Layer 3 technologies including VLANs, STP, EtherChannel, HSRP, and QoS.

Administer Palo Alto Strata Next-Generation Firewalls, Panorama, GlobalProtect, NAT, and security policies.

Implement Zero Trust, network segmentation, and IT/OT security controls.

Design, deploy, and support SD-WAN solutions including Cisco SD-WAN (Viptela) and Palo Alto Prisma SD-WAN.

Support Projects for Compute Area (VMWare VSAN Project in US Domestic Region)

Manage WAN connectivity across MPLS, Internet, DIA, VPN, and hybrid network environments.

Design and support cloud networking across Azure, AWS, and GCP environments.

Implement and maintain ExpressRoute, Direct Connect, Cloud VPN, Transit Gateway, and Virtual WAN solutions.

Support Operational Technology (OT) networks, including manufacturing, SCADA, PLC, and industrial systems.

Perform root cause analysis, problem management, and major incident resolution for network outages.

Develop network automation using Terraform, Ansible, Python, and infrastructure-as-code practices.

Monitor network performance, security, and availability using enterprise monitoring and security tools.

Create technical documentation, lead network modernization initiatives, and collaborate with security, cloud, and infrastructure teams on strategic projects.

Required Skills

• Cisco Routing & Switching (Catalyst, Nexus, ISR, ASR)
• BGP, OSPF, EIGRP, MPLS
• Network Security & Zero Trust
• Terraform, Ansible, Network Automation
• Wireshark, SolarWinds, ThousandEyes, Splunk
• CCNP / PCNSE Preferred

Experience

10+ years enterprise network engineering with strong Cisco, Palo Alto, SD-WAN, Cloud Networking, and Manufacturing/OT network expertise