Senior Network Engineer

Cognizant; Dallas (TX); Vor Ort; USD 99.000 - 115.000; Vollzeit

Benefits dieser Stelle

Medical/Dental/Vision/Life Insurance

401(k) plan and contributions

Paid holidays + Paid Time Off

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Zusammenfassung

Cognizant Technology Solutions Corporation is seeking an experienced Senior Network Engineer to design, implement, secure, operate, and optimize enterprise networks across data centers, campus, branch, and cloud connections.

You will work with F5 BIG-IP, Palo Alto, Cisco ACI/Nexus, and Meraki, lead major incidents, and drive lifecycle upgrades with security and cloud teams. A strong customer-focused, cross-functional mindset is essential.

Qualifikationen

• Bachelor's degree in Computer Science, Information Technology, Engineering, or equivalent practical experience.
• 8+ years of enterprise network engineering experience, including at least 3 years in a senior or L3 role.
• Advanced knowledge of TCP/IP, IPv4/IPv6, VLANs, STP, vPC, HSRP/VRRP, OSPF, BGP, VPN, QoS, NAT, wireless networking, and packet analysis.
• Hands-on production experience with F5 BIG-IP LTM, Palo Alto firewalls/Panorama, Cisco ACI/APIC, Cisco Nexus, and Cisco Meraki.
• Practical Azure and/or AWS networking experience, including private connectivity to on-premises environments.
• Hands-on DNS, DHCP, and IPAM experience with Infoblox or a comparable enterprise DDI solution.
• Experience with Wireshark, tcpdump, network monitoring, ITIL incident/problem/change processes, and technical documentation.
• Strong communication skills and the ability to coordinate high-severity incidents and complex changes.

Aufgaben

• Own complex P1/P2 incidents involving routing, switching, wireless, firewalls, load balancing, DNS, DHCP, IPAM, VPN, SD-WAN, and hybrid-cloud connectivity.
• Lead troubleshooting bridges, analyze packet captures and telemetry, restore service, document root cause, and implement permanent corrective actions.
• Prepare and execute implementation, validation, risk, dependency, and rollback plans for production changes and maintenance windows.
• Maintain network diagrams, standards, operating procedures, inventory, capacity plans, lifecycle roadmaps, and disaster-recovery documentation.
• Participate in on-call support, vulnerability remediation, compliance reviews, and vendor escalation activities.

Kenntnisse

L3 network engineering

Incident management

Root cause analysis

Documentation

On-call support

Vendor escalation

Ausbildung

Bachelor's degree in Computer Science, Information Technology, Engineering, or equivalent

Tools

F5 BIG-IP LTM

Palo Alto firewalls/Panorama

Cisco ACI/APIC

Cisco Nexus

Cisco Meraki

Infoblox

Wireshark

tcpdump

NetBox

Splunk

Jobbeschreibung

Job Summary

We are seeking an experienced Senior Network Engineer to design, implement, secure, operate, and optimize enterprise data-center, campus, branch, wireless, and hybrid-cloud networks. The role requires advanced hands-on expertise in F5 BIG-IP, Palo Alto Networks, Cisco ACI, Cisco Nexus, Cisco Meraki, cloud networking, and enterprise DDI platforms. The engineer will serve as an L3 escalation point, lead major-incident troubleshooting, execute migrations and lifecycle upgrades, perform root cause analysis, and collaborate with security, cloud, application, server, and architecture teams.

Key Responsibilities

Network Engineering and L3 Operations

• Own complex P1/P2 incidents involving routing, switching, wireless, firewalls, load balancing, DNS, DHCP, IPAM, VPN, SD-WAN, and hybrid-cloud connectivity.
• Lead troubleshooting bridges, analyze packet captures and telemetry, restore service, document root cause, and implement permanent corrective actions.
• Prepare and execute implementation, validation, risk, dependency, and rollback plans for production changes and maintenance windows.
• Maintain network diagrams, standards, operating procedures, inventory, capacity plans, lifecycle roadmaps, and disaster-recovery documentation.
• Participate in on-call support, vulnerability remediation, compliance reviews, and vendor escalation activities.

F5 BIG-IP

• Configure and troubleshoot F5 BIG-IP LTM, including virtual servers, pools, nodes, monitors, profiles, SNAT, persistence, traffic policies, and SSL offload.
• Manage SSL/TLS certificates, ciphers, health checks, high availability, upgrades, backup, and recovery.
• Develop and troubleshoot iRules; experience with F5 DNS/GTM and Advanced WAF/ASM is preferred.
• Resolve latency, session persistence, SSL handshake, health-monitor, and traffic-distribution issues.

Palo Alto Networks

• Administer Palo Alto firewalls and Panorama, including zones, security policies, NAT, objects, App-ID, User-ID, URL filtering, threat profiles, and logging.
• Troubleshoot sessions, routing, policy matching, NAT, IPsec VPN, GlobalProtect, and application connectivity using logs, CLI tools, and packet captures.
• Perform PAN-OS upgrades, rulebase cleanup, recertification, migrations, and security-hardening activities.

Cisco ACI and Nexus

• Design and troubleshoot Cisco ACI fabrics using APIC, tenants, VRFs, bridge domains, application profiles, EPGs, contracts, filters, VMM integration, and L3Out.
• Configure Cisco Nexus 3K/5K/7K/9K platforms using VLANs, trunks, vPC, STP, HSRP, OSPF, BGP, VXLAN, and EVPN.
• Troubleshoot endpoint learning, contracts, routing adjacency, fabric health, interfaces, port channels, and Layer 2/Layer 3 connectivity.
• Support data-center migrations, segmentation, fabric expansion, software upgrades, and hardware refresh programs.

Cisco Meraki

• Design, deploy, and administer Cisco Meraki MX security appliances, MS switches, MR wireless access points, and the Meraki Dashboard.
• Configure Auto VPN, SD-WAN, traffic shaping, content and security policies, VLANs, DHCP, site-to-site VPN, client VPN, and high availability.
• Plan wireless networks using RF fundamentals, channel and power optimization, SSIDs, authentication, guest access, and roaming.
• Monitor organization and network health, analyze event logs and packet captures, manage templates and firmware, and troubleshoot branch, LAN, WAN, and Wi-Fi issues.
• Use Meraki APIs and automation workflows for inventory, configuration validation, monitoring, and large-scale deployment.

Cloud Networking

• Design and support Microsoft Azure and AWS connectivity across cloud and on-premises data centers.
• Azure: VNets, subnets, NSGs, UDRs, Load Balancer, Application Gateway, Azure Firewall, VPN Gateway, ExpressRoute, Private Link, and DNS.
• AWS: VPCs, subnets, route tables, Security Groups, NACLs, Transit Gateway, Elastic Load Balancing, Direct Connect, Route 53, PrivateLink, and Site-to-Site VPN.
• Troubleshoot asymmetric routing, overlapping address space, DNS, MTU, VPN, firewall, load-balancing, and cloud-to-data-center connectivity.
• Implement automation and Infrastructure as Code using Python, Ansible, Terraform, REST APIs, JSON, YAML, and Git.

DDI: DNS, DHCP and IPAM

• Administer enterprise DDI platforms, preferably Infoblox Grid, including DNS zones and records, DHCP scopes, reservations, failover, IPAM, and role-based access.
• Troubleshoot recursive and authoritative DNS, forwarding, delegation, DNSSEC, DHCP allocation, lease, and address-management issues.
• Maintain address plans, naming standards, DNS/DHCP resiliency, automation workflows, reports, upgrades, backups, and disaster-recovery procedures.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or equivalent practical experience.
• 8+ years of enterprise network engineering experience, including at least 3 years in a senior or L3 role.
• Advanced knowledge of TCP/IP, IPv4/IPv6, VLANs, STP, vPC, HSRP/VRRP, OSPF, BGP, VPN, QoS, NAT, wireless networking, and packet analysis.
• Hands-on production experience with F5 BIG-IP LTM, Palo Alto firewalls/Panorama, Cisco ACI/APIC, Cisco Nexus, and Cisco Meraki.
• Practical Azure and/or AWS networking experience, including private connectivity to on-premises environments.
• Hands-on DNS, DHCP, and IPAM experience with Infoblox or a comparable enterprise DDI solution.
• Experience with Wireshark, tcpdump, network monitoring, ITIL incident/problem/change processes, and technical documentation.
• Strong communication skills and the ability to coordinate high-severity incidents and complex changes.

Preferred Certifications and Skills

• F5 Certified BIG-IP Administrator or F5 Certified Technology Specialist.
• Palo Alto Networks Certified Network Security Engineer (PCNSE).
• Cisco CCNP Enterprise or CCNP Data Center; CCIE is an advantage.
• Cisco Meraki Solutions Specialist (CMSS), ECMS training, or equivalent Meraki implementation experience.
• Microsoft Certified: Azure Network Engineer Associate or AWS Certified Advanced Networking – Specialty.
• Infoblox accreditation or equivalent enterprise DDI training.
• Experience with SolarWinds, Splunk, LogicMonitor, ThousandEyes, NetBox, ServiceNow, Git, CI/CD, SASE, SD-WAN, and Zero Trust segmentation.

Core Competencies

• Technology Area: F5 BIG-IP / Expected Proficiency: Advanced / Key Capabilities: LTM, SSL, HA, iRules; DNS/GTM and WAF preferred
• Technology Area: Palo Alto / Expected Proficiency: Advanced / Key Capabilities: PAN-OS, Panorama, policy, NAT, VPN, threat controls
• Technology Area: Cisco ACI / Expected Proficiency: Advanced / Key Capabilities: APIC, EPGs, contracts, L3Out, fabric troubleshooting
• Technology Area: Cisco Nexus / Expected Proficiency: Advanced / Key Capabilities: vPC, OSPF, BGP, VXLAN/EVPN, data-center switching
• Technology Area: Cisco Meraki / Expected Proficiency: Advanced / Key Capabilities: MX, MS, MR, Dashboard, Auto VPN, SD-WAN, Wi-Fi
• Technology Area: Cloud Networking / Expected Proficiency: Intermediate to Advanced / Key Capabilities: Azure/AWS, ExpressRoute/Direct Connect, VPN, load balancing
• Technology Area: DDI / Expected Proficiency: Intermediate to Advanced / Key Capabilities: Infoblox, DNS, DHCP, IPAM, resiliency
• Technology Area: Automation / Expected Proficiency: Preferred / Key Capabilities: Python, Ansible, Terraform, APIs, Git

Success Measures

• High network availability and timely restoration of critical services.
• Reliable delivery of changes with complete validation and rollback readiness.
• Reduction in repeat incidents through effective RCA and corrective actions.
• Improved security posture, lifecycle compliance, capacity, and operational documentation.
• Measurable automation of repeatable configuration, validation, inventory, and reporting tasks.

Salary and Benefits

• The Salary for this position will be $99,000 and $115, 000 yearly depending on experience and other qualifications of the successful candidate.
• This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.
• Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:
• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contributions
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan
• Disclaimer: The compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.