Senior Network Engineer

BrothersTech; Durham (NC); Hybrid; USD 120,000 - 180,000; Full time

Job summary

BrothersTech in Durham, NC, is seeking an experienced Senior Network Engineer with 10+ years in enterprise networking. Hybrid role onsite at least 3 days, focusing on Cisco routing/switching, SD-WAN, cloud connectivity, and IT/OT security.

You will design, deploy, and support complex networks across data centers, cloud environments, and manufacturing facilities. Responsibilities include managing BGP/OSPF/EIGRP/MPLS, firewall administration, network automation, and incident resolution.

Qualifications

• Provide L3 support for enterprise, data center, cloud, and manufacturing network environments.
• Design, deploy, and maintain Cisco routing and switching infrastructure.
• Manage advanced routing protocols including BGP, OSPF, EIGRP, MPLS, and route redistribution.
• Configure and support Layer 2/Layer 3 technologies including VLANs, STP, EtherChannel, HSRP, and QoS.
• Administer Palo Alto Strata Next-Generation Firewalls, Panorama, GlobalProtect, NAT, and security policies.
• Implement Zero Trust, network segmentation, and IT/OT security controls.
• Design, deploy, and support SD-WAN solutions including Cisco SD-WAN (Viptela) and Palo Alto Prisma SD-WAN.
• Support Projects for Compute Area (VMWare VSAN Project in US Domestic Region)
• Manage WAN connectivity across MPLS, Internet, DIA, VPN, and hybrid network environments.
• Design and support cloud networking across Azure, AWS, and GCP environments.
• Implement and maintain ExpressRoute, Direct Connect, Cloud VPN, Transit Gateway, and Virtual WAN solutions.
• Support Operational Technology (OT) networks, including manufacturing, SCADA, PLC, and industrial systems.
• Perform root cause analysis, problem management, and major incident resolution for network outages.
• Develop network automation using Terraform, Ansible, Python, and infrastructure-as-code practices.
• Monitor network performance, security, and availability using enterprise monitoring and security tools.
• Create technical documentation, lead network modernization initiatives, and collaborate with security, cloud, and infrastructure teams on strategic projects.

Responsibilities

• Provide L3 support for enterprise, data center, cloud, and manufacturing network environments.
• Design, deploy, and maintain Cisco routing and switching infrastructure.
• Manage advanced routing protocols including BGP, OSPF, EIGRP, MPLS, and route redistribution.
• Configure and support Layer 2/Layer 3 technologies including VLANs, STP, EtherChannel, HSRP, and QoS.
• Administer Palo Alto Strata Next-Generation Firewalls, Panorama, GlobalProtect, NAT, and security policies.
• Implement Zero Trust, network segmentation, and IT/OT security controls.
• Design, deploy, and support SD-WAN solutions including Cisco SD-WAN (Viptela) and Palo Alto Prisma SD-WAN.
• Support Projects for Compute Area (VMWare VSAN Project in US Domestic Region)
• Manage WAN connectivity across MPLS, Internet, DIA, VPN, and hybrid network environments.
• Design and support cloud networking across Azure, AWS, and GCP environments.
• Implement and maintain ExpressRoute, Direct Connect, Cloud VPN, Transit Gateway, and Virtual WAN solutions.
• Support Operational Technology (OT) networks, including manufacturing, SCADA, PLC, and industrial systems.
• Perform root cause analysis, problem management, and major incident resolution for network outages.
• Develop network automation using Terraform, Ansible, Python, and infrastructure-as-code practices.
• Monitor network performance, security, and availability using enterprise monitoring and security tools.
• Create technical documentation, lead network modernization initiatives, and collaborate with security, cloud, and infrastructure teams on strategic projects.

Skills

Cisco Routing & Switching

BGP, OSPF, EIGRP, MPLS

Network Security & Zero Trust

Terraform, Ansible, Network Automation

Wireshark, SolarWinds, ThousandEyes, &

Tools

Terraform

Ansible

Python

Job description

Location: Durham, NC – hybrid -needs to be onsite at least 3 days per

VISA: Only USC

Must have ansible and terraform experience now!

Experience:

10+ years enterprise network engineering with strong Cisco, Palo Alto, SD-WAN, Cloud Networking, and Manufacturing/OT network expertise

Job Requirements

1. 1. Provide L3 support for enterprise, data center, cloud, and manufacturing network environments.
2. 2. Design, deploy, and maintain Cisco routing and switching infrastructure.
3. 3. Manage advanced routing protocols including BGP, OSPF, EIGRP, MPLS, and route redistribution.
4. 4. Configure and support Layer 2/Layer 3 technologies including VLANs, STP, EtherChannel, HSRP, and QoS.
5. 5. Administer Palo Alto Strata Next-Generation Firewalls, Panorama, GlobalProtect, NAT, and security policies.
6. 6. Implement Zero Trust, network segmentation, and IT/OT security controls.
7. 7. Design, deploy, and support SD-WAN solutions including Cisco SD-WAN (Viptela) and Palo Alto Prisma SD-WAN.
8. 8. Support Projects for Compute Area (VMWare VSAN Project in US Domestic Region)
9. 9. Manage WAN connectivity across MPLS, Internet, DIA, VPN, and hybrid network environments.
10. 10. Design and support cloud networking across Azure, AWS, and GCP environments.
11. 11. Implement and maintain ExpressRoute, Direct Connect, Cloud VPN, Transit Gateway, and Virtual WAN solutions.
12. 12. Support Operational Technology (OT) networks, including manufacturing, SCADA, PLC, and industrial systems.
13. 13. Perform root cause analysis, problem management, and major incident resolution for network outages.
14. 14. Develop network automation using Terraform, Ansible, Python, and infrastructure-as-code practices.
15. 15. Monitor network performance, security, and availability using enterprise monitoring and security tools.
16. 16. Create technical documentation, lead network modernization initiatives, and collaborate with security, cloud, and infrastructure teams on strategic projects.

Required Skills

• 1. Cisco Routing & Switching (Catalyst, Nexus, ISR, ASR)
• 5. BGP, OSPF, EIGRP, MPLS
• 6. Network Security & Zero Trust
• 8. Terraform, Ansible, Network Automation
• 9. Wireshark, SolarWinds, ThousandEyes, Splunk