Senior Network Engineer

advantestcareers; San Jose (CA); On-site; USD 150,000 - 190,000; Full time

Job summary

Advantest is seeking a Senior Network Engineer to design, implement, and operate our enterprise network across multi‑site environments. You will own day‑to‑day operations while shaping architecture for deployments and upgrades, handling complex issues across multi‑vendor ecosystems.

The role requires expert hands‑on experience with Layer 2/Layer 3 switching, enterprise firewalls, and VPN technologies, and a strong ability to troubleshoot under pressure.

Qualifications

• 7+ years of hands-on enterprise network engineering experience (or 5+ with a relevant degree).
• Expert-level knowledge of Layer 2/Layer 3 switching and routing in production environments.
• Strong hands-on experience administering enterprise firewalls (e.g., Palo Alto, Fortinet, Cisco ASA/Firepower, Check Point).
• Proven experience designing, deploying, and troubleshooting site-to-site and remote-access VPNs.
• Solid grasp of TCP/IP, subnetting, DNS, DHCP, NAT, QoS, and network security fundamentals.

Responsibilities

• Serve as an escalation point for complex network incidents, performing root cause analysis and driving issues to resolution within SLA
• Monitor network health, capacity, and performance; proactively identify and remediate bottlenecks before they impact users
• Troubleshoot connectivity issues across VLANs, routing, switching, DNS, DHCP, TCP/IP, and WAN/ISP links
• Use packet capture and network monitoring tools to diagnose latency, packet loss, and application performance problems
• Manage firmware upgrades, patching, and configuration backups following established change management procedures
• Participate in an on-call rotation and support scheduled maintenance windows
• Design scalable LAN/WAN/remote-access solutions and develop routing designs
• Lead network components of infrastructure projects and vendor evaluations
• Maintain network standards, baseline configurations, and documentation
• Provide technical mentorship to junior engineers and collaborate with security and systems teams

Skills

Layer 2/3 switching

VPN technologies

Network troubleshooting

On-call incident support

Security practices

Education

Bachelor's degree in CS/IT/CE/Telecommunications

CCNA/CCNP or vendor-equivalent

Tools

Palo Alto

Fortinet

Cisco ASA/Firepower

Check Point

Job description

Job Description:

We are seeking a Senior Network Engineer to support, design, and maintain our enterprise network infrastructure. This role owns day-to-day network operations while also driving architecture and configuration work for new deployments and upgrades. The ideal candidate has deep hands‑on expertise with Layer 2/Layer 3 switching, enterprise firewalls, and VPN technologies, and can troubleshoot complex issues across multi‑vendor environments with minimal supervision. Security experience is a strong plus.

Responsibilities include:

Network Operations & Support

• Serve as an escalation point for complex network incidents, performing root cause analysis and driving issues to resolution within SLA
• Monitor network health, capacity, and performance; proactively identify and remediate bottlenecks before they impact users
• Troubleshoot connectivity issues across VLANs, routing, switching, DNS, DHCP, TCP/IP, and WAN/ISP links
• Use packet capture and network monitoring tools to diagnose latency, packet loss, and application performance problems
• Manage firmware upgrades, patching, and configuration backups following established change management procedures
• Participate in an on‑call rotation and support scheduled maintenance windows

Network Design & Architecture

• Design scalable, resilient LAN, WAN, and remote‑access solutions that support business growth
• Develop network diagrams, IP addressing schemes, VLAN plans, and routing designs
• Evaluate and recommend hardware, software, and circuits; participate in vendor selection and technical evaluations
• Lead network components of infrastructure projects - site build‑outs, migrations, refreshes, and cloud connectivity
• Define and maintain network standards, baseline configurations, and technical documentation

Configuration & Implementation

• Configure and maintain Layer 2/Layer 3 switches, including VLANs, trunking, spanning tree, port security, link aggregation, and inter‑VLAN routing
• Configure and maintain routing protocols (OSPF, BGP, EIGRP, static routing) across the enterprise WAN
• Administer enterprise firewalls: security policies, NAT, application control, and access control rules
• Build and maintain site‑to‑site IPsec VPN tunnels between offices, data centers, and third‑party partners, including troubleshooting Phase 1/Phase 2 negotiation, rekeying, and tunnel stability issues
• Deploy and support remote‑access VPN (SSL/IPsec) for end users, including authentication integration and client troubleshooting
• Implement network segmentation and access control between environments

Collaboration & Documentation

• Maintain accurate network documentation, runbooks, and as‑built diagrams
• Provide technical mentorship to junior engineers and help‑desk staff
• Work with systems, application, and security teams on cross‑functional initiatives
• Communicate clearly with non‑technical stakeholders during outages and project planning

Requirements:

7+ years of hands‑on enterprise network engineering experience (or 5+ with a relevant degree)

Expert‑level knowledge of Layer 2/Layer 3 switching and routing in production environments

Strong hands‑on experience administering enterprise firewalls (e.g., Palo Alto, Fortinet, Cisco ASA/Firepower, Check Point)

Proven experience designing, deploying, and troubleshooting site‑to‑site and remote‑access VPNs

Solid grasp of TCP/IP, subnetting, DNS, DHCP, NAT, QoS, and network security fundamentals

Demonstrated ability to troubleshoot complex, cross‑domain issues under pressure

Experience working within formal change management and documentation practices

Strong written and verbal communication skills

Additional Skills Preferred (but not required):

Security experience: firewall log analysis, incident response support, IDS/IPS, network segmentation, or vulnerability remediation

Industry certifications: CCNP, CCIE, PCNSE, NSE 4+, JNCIP, CompTIA Security+, or equivalent

Experience with NAC, 802.1X, RADIUS/TACACS+, or Zero Trust access models

Cloud networking experience (AWS, Azure, or GCP - VPCs, transit gateways, VPN/Direct Connect)

Wireless infrastructure experience (Cisco, Aruba, Meraki)

SD‑WAN deployment and management

Hands‑on experience with network automation frameworks and infrastructure‑as‑code practices (Python, Ansible, Terraform, Git)

Experience with AIOps or AI‑assisted network monitoring, observability, and analytics platforms

Familiarity with compliance frameworks (NIST, PCI‑DSS, HIPAA, SOC 2)

Education & Experience:

Bachelor's degree in Computer Science, Information Technology, Computer Engineering, Telecommunications, or a related technical field - or equivalent combination of education, certifications, and hands‑on experience

Demonstrated experience supporting multi‑site environments with 2000+ users and/or multiple data centers or branch locations

Experience operating in a 24/7 production environment with defined SLAs, change control, and on‑call responsibilities

Prior experience mentoring junior engineers or serving as a technical escalation point

Active or recent industry certification (CCNA/CCNP or vendor‑equivalent) required; advanced certifications (CCIE, PCNSE, NSE 4+) strongly preferred