Senior Network Engineer

Orion Innovation; New York (NY); On-site; USD 150,000 - 210,000; Full time

Job summary

Orion Innovation is seeking two senior data center network engineers with ~15 years of experience to design, implement, and automate data center and DMZ networks for a Tier-1 bank. You will build spine-leaf fabrics (Cisco/Arista), manage F5 BIG-IP for LTM/GTM, and lead automation using Python, Ansible, and REST APIs.

The role requires hands-on expertise in data center networks, SDN, and security considerations, with strong communication and delivery of executive-level summaries.

Qualifications

• 10+ years of hands-on data center networking across design, implementation, and operations.
• Spine-leaf architecture, VXLAN/EVPN, and data center SDN: Cisco ACI and Nexus, Arista EOS and CloudVision.
• F5 BIG-IP experience with LTM, GTM/DNS, iRules, SSL offload, high availability, and BIG-IQ is a strong plus.
• Routing and switching: BGP, OSPF, IS-IS, multicast, MPLS, QoS, VPN/tunneling (IPsec, GRE, MACsec).
• Automation: Python, Ansible, YAML, REST APIs, JSON/XML, Git change control.
• ITIL processes: change, incident, problem, and request management.
• Clear written and verbal communication, including executive summaries and Visio-level design diagrams.

Responsibilities

• Design, build, and operate spine-leaf fabric in data centers on Cisco/Arista platforms.
• Engineer and support F5 BIG-IP in data centers and DMZs; load balancing and SSL offload.
• Develop network automation to replace manual change using Python, Ansible, and Itential or similar.
• Create implementation plans with test criteria, back-out plans, and validation steps.
• Lead QA reviews before implementations and follow change management processes.
• Provide Level 3 escalation for production incidents and drive root cause analysis.
• Assess risk to production and protect service resiliency on changes.
• Support audits and regulatory exams with accurate documentation.
• Document designs and hand over to Operations; mentor junior engineers on automation.
• Report milestones to engagement lead and client engineering managers.

Skills

Spine-leaf design

VXLAN/EVPN

Cisco ACI

Nexus

Arista EOS

CloudVision

F5 BIG-IP

LTM

GTM/DNS

iRules

SSL offload

Network automation

Python

Ansible

YAML

REST APIs

JSON/XML

Git

BGP

OSPF

IS-IS

MPLS

VPN/tunneling

ITIL

Troubleshooting

Documentation/Verbal comms

Tools

Wireshark

NetScout

SolarWinds

Job description

Orion Innovation is a premier, award-winning, global business and technology services firm. Orion delivers game-changing business transformation and product development rooted in digital strategy, experience design, and engineering, with a unique combination of agility, scale, and maturity. We work with a wide range of clients across many industries including financial services, professional services, telecommunications and media, consumer products, automotive, industrial automation, professional sports and entertainment, life sciences, ecommerce, and education.

Project Overview:

A Tier-1 global bank is seeking two senior data center network engineers, roughly 15 years of experience each, to design, implement, and automate its data center and DMZ networks. The ideal hire combines spine-leaf fabric expertise (Cisco and Arista), F5 load balancing, and hands-on network automation, with prior experience at a large bank.

Key Responsibilities:

• Design, build, and operate spine-leaf (VXLAN/EVPN) data center fabrics on Cisco and Arista platforms.
• Engineer and support F5 BIG-IP application delivery for data center and DMZ: load balancing, SSL/TLS offload, global traffic management, and web application firewall policies.
• Build and maintain network automation that replaces manual change: provisioning, configuration compliance, validation, and drift detection, using Python, Ansible, and an orchestration platform such as Itential.
• Turn approved designs into implementation plans with test and acceptance criteria, back-out plans, and validation procedures.
• Run quality assurance reviews before each implementation and follow the bank’s change management and design authority processes.
• Provide Level 3 escalation for production network incidents and drive root cause analysis.
• Assess risk to production and protect service resiliency on every change.
• Support audits, compliance reviews, and regulatory exams with accurate documentation.
• Document designs and hand services over to Operations, and coach junior engineers on automation practices.
• Report milestone progress to the engagement lead and the client’s engineering managers.

Required Skills and Experience:

• 10+ years of hands-on data center networking across design, implementation, and operations
• Spine-leaf architecture, VXLAN/EVPN, and data center SDN: Cisco ACI and Nexus, Arista EOS and CloudVision.
• F5 BIG-IP (the gap to close):LTM, GTM/DNS, iRules, SSL/TLS offload, high availability, and troubleshooting in a DMZ or multi-tier data center. Experience with F5 AS3/Declarative Onboarding and BIG-IQ is a strong plus.
• Routing and switching: BGP, OSPF, IS-IS, multicast, MPLS, QoS, and VPN/tunneling (IPsec, GRE, MACsec).
• Network security fundamentals: segmentation, firewall and DMZ design, ACLs.
• Automation: Python, Ansible, YAML, REST APIs, JSON/XML, and Git-based change control.
• Troubleshooting and monitoring tools: Wireshark, NetScout, SolarWinds, and similar packet and flow analysis.
• ITIL processes: change, incident, problem, and request management.
• Clear written and verbal communication, including executive summaries and Visio-level design diagrams.

Certifications (at least one professional-level preferred):

CCNP or CCIE (Data Center), Arista ACE, F5 Certified (F5-CA or higher), CISSP.

Orion is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, citizenship status, disability status, genetic information, protected veteran status, or any other characteristic protected by law.

Candidate Privacy Policy

Orion Systems Integrators, LLC and its subsidiaries and its affiliates (collectively, "Orion", "we" or "us") are committed to protecting your privacy. This Candidate Privacy Policy (orioninc.com) ("Notice") explains:

• What information we collect during our application and recruitment process and why we collect it;
• How we handle that information; and
• How to access and update that information.

Your use of Orion services is governed by any applicable terms in this notice and our general Privacy Policy.