Senior Network Engineer

orioninnovation; New York (NY); On-site; USD 180,000 - 240,000; Full time

Job summary

Orion Innovation seeks two senior data center network engineers to design, implement, and automate networks for a Tier-1 global bank. You will lead spine-leaf fabrics (Cisco/Arista), deploy F5 BIG-IP, and drive automation with Python and Ansible in a high-security DMZ environment.

Ideal candidates have 10+ years of data center experience, strong SDN and ITIL background, and prior banking or financial services exposure. On-site in New York, collaboration with Enterprise Infra teams.

Qualifications

• 10+ years hands-on data center networking experience.
• Expertise in spine-leaf, VXLAN/EVPN and data center SDN.
• Proficient in F5 BIG-IP and application delivery in data center/DMZ.
• Strong automation skills in Python, Ansible, YAML, REST APIs.
• Clear written/verbal communication; ability to produce executive summaries.
• Certifications CCNP/CCIE Data Center or F5-Cert preferred.

Responsibilities

• Design, build, and operate spine-leaf data center fabrics on Cisco and Arista platforms.
• Engineer and support F5 BIG-IP for data center and DMZ: load balancing, TLS offload, WAF policies.
• Build and maintain network automation to replace manual change using Python, Ansible, and Itential.
• Create implementation plans with test, validation, and back-out procedures.
• Provide Level 3 escalation for production incidents and drive root cause analysis.
• Support audits, compliance reviews, and regulatory exams with documentation.

Skills

Spine-leaf architecture

VXLAN/EVPN

Data center SDN

F5 BIG-IP

Python

Ansible

Itential

Network troubleshooting

Documentation & comms

ITIL processes

Tools

Cisco ACI

Nexus switches

Arista EOS

CloudVision

F5 BIG-IP LTM/GTM

BIG-IQ

Wireshark

SolarWinds

NetScout

Job description

Orion Innovation is a premier, award-winning, global business and technology services firm. Orion delivers game-changing business transformation and product development rooted in digital strategy, experience design, and engineering, with a unique combination of agility, scale, and maturity. We work with a wide range of clients across many industries including financial services, professional services, telecommunications and media, consumer products, automotive, industrial automation, professional sports and entertainment, life sciences, ecommerce, and education.

Project Overview

A Tier-1 global bank is seeking two senior data center network engineers, roughly 15 years of experience each, to design, implement, and automate its data center and DMZ networks. The ideal hire combines spine-leaf fabric expertise (Cisco and Arista), F5 load balancing, and hands-on network automation, with prior experience at a large bank.

Key Responsibilities

• Design, build, and operate spine-leaf (VXLAN/EVPN) data center fabrics on Cisco and Arista platforms.
• Engineer and support F5 BIG-IP application delivery for data center and DMZ: load balancing, SSL/TLS offload, global traffic management, and web application firewall policies.
• Build and maintain network automation that replaces manual change: provisioning, configuration compliance, validation, and drift detection, using Python, Ansible, and an orchestration platform such as Itential.
• Turn approved designs into implementation plans with test and acceptance criteria, back-out plans, and validation procedures.
• Run quality assurance reviews before each implementation and follow the bank's change management and design authority processes.
• Provide Level 3 escalation for production network incidents and drive root cause analysis.
• Assess risk to production and protect service resiliency on every change.
• Support audits, compliance reviews, and regulatory exams with accurate documentation.
• Document designs and hand services over to Operations, and coach junior engineers on automation practices.
• Report milestone progress to the engagement lead and the client's engineering managers.

Required Skills and Experience

• 10+ years of hands-on data center networking across design, implementation, and operations
• Spine-leaf architecture, VXLAN/EVPN, and data center SDN: Cisco ACI and Nexus, Arista EOS and CloudVision.
• F5 BIG-IP (the gap to close): LTM, GTM/DNS, iRules, SSL/TLS offload, high availability, and troubleshooting in a DMZ or multi-tier data center. Experience with F5 AS3/Declarative Onboarding and BIG-IQ is a strong plus.
• Routing and switching: BGP, OSPF, IS-IS, multicast, MPLS, QoS, and VPN/tunneling (IPsec, GRE, MACsec).
• Network security fundamentals: segmentation, firewall and DMZ design, ACLs.
• Automation: Python, Ansible, YAML, REST APIs, JSON/XML, and Git-based change control.
• Troubleshooting and monitoring tools: Wireshark, NetScout, SolarWinds, and similar packet and flow analysis.
• ITIL processes: change, incident, problem, and request management.
• Clear written and verbal communication, including executive summaries and Visio-level design diagrams.

Certifications (at least one professional-level preferred): CCNP or CCIE (Data Center), Arista ACE, F5 Certified (F5-CA or higher), CISSP.

Orion is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, citizenship status, disability status, genetic information, protected veteran status, or any other characteristic protected by law.

Candidate Privacy Policy

Orion Systems Integrators, LLC and its subsidiaries and its affiliates (collectively, "Orion," "we" or "us") are committed to protecting your privacy. This Candidate Privacy Policy (orioninc.com) ("Notice") explains:

What information we collect during our application and recruitment process and why we collect it;

How we handle that information; and

How to access and update that information.

Your use of Orion services is governed by any applicable terms in this notice and our general Privacy Policy .