Senior Network Engineer

Doist; Durham (NC); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Doist is seeking a Senior L3 Network Engineer to provide expert support across enterprise, data center, cloud, and OT networks. You will design and deploy Cisco routing/switching infra, manage routing protocols, and administer Palo Alto firewalls.

SD-WAN, cloud networking, IT/OT security controls, and automation with Terraform/Ansible are key parts of the role. This position focuses on network modernization, security, and collaboration with security, cloud, and infrastructure teams on strategic

Qualifications

• 10+ years enterprise network engineering experience.
• Strong expertise in Cisco and Palo Alto products.
• Proficient with SD-WAN, cloud networking, and OT/industrial networks.

Responsibilities

• Provide L3 support for enterprise, data center, cloud, and OT networks.
• Design, deploy, and maintain Cisco routing/switching infrastructure.
• Implement Zero Trust and security controls; network segmentation.
• Develop network automation using Terraform and Ansible.

Skills

Cisco Routing

Palo Alto Security

SD-WAN

Cloud Networking

BGP OSPF

Zero Trust

Terraform Ansible

Network Automation

Wireshark

SolarWinds

ThousandEyes

Splunk

CCNP / PCNSE

Tools

Terraform

Ansible

VMware

Job description

Job Description: Must have ansible and terraform experience. Senior L3 Network Engineer (Cisco, Palo Alto, SD-WAN, Cloud & OT) Provide L3 support for enterprise, data center, cloud, and manufacturing network environments. Design, deploy, and maintain Cisco routing and switching infrastructure. Manage advanced routing protocols including BGP, OSPF, EIGRP, MPLS, and route redistribution. Configure and support Layer 2/Layer 3 technologies including VLANs, STP, EtherChannel, HSRP, and QoS. Administer Palo Alto Strata Next-Generation Firewalls, Panorama, GlobalProtect, NAT, and security policies. Implement Zero Trust, network segmentation, and IT/OT security controls. Design, deploy, and support SD-WAN solutions including Cisco SD-WAN (Viptela) and Palo Alto Prisma SD-WAN. Support Projects for Compute Area (VMWare VSAN Project in US Domestic Region) Manage WAN connectivity across MPLS, Internet, DIA, VPN, and hybrid network environments. Design and support cloud networking across Azure, AWS, and GCP environments. Implement and maintain ExpressRoute, Direct Connect, Cloud VPN, Transit Gateway, and Virtual WAN solutions. Support Operational Technology (OT) networks, including manufacturing, SCADA, PLC, and industrial systems. Perform root cause analysis, problem management, and major incident resolution for network outages. Develop network automation using Terraform, Ansible, Python, and infrastructure-as-code practices. Monitor network performance, security, and availability using enterprise monitoring and security tools. Create technical documentation, lead network modernization initiatives, and collaborate with security, cloud, and infrastructure teams on strategic projects.

Required Skills

Cisco Routing & Switching (Catalyst, Nexus, ISR, ASR) Palo Alto Strata, Panorama, GlobalProtect SD-WAN (Cisco Viptela, Prisma SD-WAN) Azure, AWS, GCP Networking BGP, OSPF, EIGRP, MPLS Network Security & Zero Trust OT/Industrial Networking (SCADA, PLC, MES) Terraform, Ansible, Network Automation Wireshark, SolarWinds, ThousandEyes, Splunk CCNP / PCNSE

Preferred Experience

10+ years enterprise network engineering with strong Cisco, Palo Alto, SD-WAN, Cloud Networking, and Manufacturing/OT network expertise