Senior Network Engineer

Vesta Corporation; Atlanta (GA); On-site; USD 100,000 - 130,000; Full time

Job summary

A technology firm seeks a Senior Network Engineer to lead the global enterprise network's design and operations. This role requires over 10 years of experience in enterprise networking, strong skills in Cisco technologies, firewalls, and cloud environments. The candidate should be able to work independently, manage vendors, and travel as needed. The position allows for remote work while involving coordination with various teams and ensuring compliance with standards.

Qualifications

• 10+ years of hands-on enterprise networking experience.
• Expertise with Cisco routing and switching, including BGP and VLANs.
• Experience with enterprise firewalls and security policies.

Responsibilities

• Design and maintain network infrastructure across multiple environments.
• Manage enterprise firewall platforms to meet compliance requirements.
• Support deployments and incidents through possible travel.

Skills

Enterprise networking experience

Expert-level Cisco routing and switching

Enterprise firewall administration

F5 BIG-IP LTM/GTM

Cloudflare management

FireMon policy management

TCP/IP and networking protocols

Troubleshooting capabilities

Education

Bachelor's degree in Information Technology or related field

Tools

Cisco ASA/FTD

pfSense

Check Point

F5 BIG-IP

Proxmox VE

AWS

Azure

Job description

The Opportunity

Location: Remote US/Travel as needed

Reports To: Director of Infrastructure & Network Security

Job Type: Full-time

Position Summary

Vesta Corporation is seeking a Senior Network Engineer to lead the design, implementation, and ongoing operations of our global enterprise network. This is a senior individual-contributor role that operates at the intersection of complex multi-site networking, hybrid cloud infrastructure, and PCI compliance. The ideal candidate brings 10+ years of hands-on enterprise networking experience, deep familiarity with both commercial and open-source tooling, and the ability to drive infrastructure modernization initiatives with limited oversight.

Key Responsibilities

• Design, implement, and maintain scalable, secure network infrastructure across data centers, remote sites, and cloud environments (AWS and Azure).
• Architect and operate routing and switching infrastructure including BGP, NAT, VLANs, Spanning Tree, IPsec VPNs, PBR, and HSRP.
• Manage and tune enterprise firewall platforms (Cisco, pfSense, Check Point) in alignment with PCI DSS segmentation and access control requirements.
• Administer and optimize F5 BIG-IP LTM/GTM for application delivery, load balancing, and traffic steering across production environments.
• Manage Cloudflare DNS, WAF, and network security policies for internet-facing properties.
• Maintain network security policy management via FireMon; contribute to access path analysis and rule lifecycle management.
• Evaluate, deploy, and operationalize free open-source software (FOSS) as replacements for commercial products where appropriate (e.g., network monitoring, IPAM, configuration backup).
• Manage Proxmox-based virtualization as it relates to network-adjacent workloads and VM/LXC networking.
• Coordinate with vendors and carriers to manage WAN circuits, resolve outages, and drive cost optimization.
• Maintain comprehensive documentation for network topology, configurations, and operational runbooks; support PCI DSS and SOC 1 Type 2 audit evidence collection.
• Participate in on-call rotation and be available for after-hours work including unscheduled incidents.
• Travel to domestic data center and office locations as needed to support deployments or incidents.

Technical Expertise & Core Competencies

Required

• 10+ years of hands-on enterprise networking experience in large-scale, multi-site environments.
• Expert-level Cisco routing and switching: IOS/NX-OS, BGP, OSPF, EIGRP, VLANs, STP.
• Enterprise firewall administration: Cisco ASA/FTD, pfSense, and Check Point — rule management, segmentation strategy, and change control.
• F5 BIG-IP LTM/GTM: virtual servers, pools, iRules, traffic policies, GTM topology records.
• Cloudflare: DNS management, WAF rulesets, and security policy administration.
• FireMon: policy analysis, rule review workflows, access path validation.
• Deep understanding of TCP/IP, DNS, DHCP, routing/switching protocols, and secure remote access.
• Experience operating in PCI DSS‑compliant environments including control implementation and audit evidence collection.
• Strong troubleshooting capabilities with the ability to resolve complex outages under time pressure.

Preferred / Nice to Have

• Proxmox VE: VM/LXC provisioning, cluster management, and software‑defined networking.
• Experience deploying FOSS tools to replace commercial networking or monitoring products (e.g., Oxidized, NetBox, or similar).
• Hybrid cloud networking: AWS Direct Connect, Azure ExpressRoute, site-to-site VPN, cloud-native security groups.
• Zero-trust / overlay VPN concepts and implementation (e.g., Tailscale or equivalent).
• Structured cabling standards, rack design, and power management in physical data center environments.
• Vendor management: circuit provisioning, carrier escalations, hardware lifecycle coordination.

Qualifications

• 10+ years of enterprise networking experience in complex, multi-site or global environments.
• Demonstrated ability to work independently and drive projects to completion without heavy oversight.
• Strong vendor management skills — able to coordinate service delivery and incident resolution with carriers, ISPs, and hardware vendors.
• Proven ability to document infrastructure for audits, incident response, and operational continuity.
• Willingness and ability to travel domestically as needed (estimated low frequency; valid driver’s license required).
• Available for on-call rotation and after-hours support windows.

Education & Certifications

Education

• Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent professional experience.

Preferred Certifications

• AWS Certified Advanced Networking Specialty, AWS Solutions Architect, or equivalent.
• Microsoft Azure Network Engineer Associate or equivalent Azure networking certification.
• Cisco CCNP (or higher) — Enterprise, Data Center, or Security track.
• Check Point CCSE or equivalent firewall platform certification.
• CCIE (any track), F5 Certified BIG‑IP Administrator, or other advanced certifications are a strong differentiator.