Senior Network Engineer

Bright Mind Solutions LLC; Sunnyvale (CA); On-site; USD 150,000 - 190,000; Full time

Job summary

Bright Mind Solutions LLC in Sunnyvale, CA, seeks a Senior Network Engineer to own and evolve the global enterprise network. This onsite role focuses on secure LAN/WAN design, multi-site Cisco Meraki, and Palo Alto firewall administration, with a path toward Zero Trust migration.

You will drive VPN/remote access enhancements and inter-office connectivity, while coordinating with IT leadership on the network roadmap. Strong expertise in DDI/IPAM and SD-WAN will be essential for success.

Qualifications

• 7+ years of experience in Network Engineering, Network Architecture, or Network Security.
• CCIE certification is required.
• Strong hands-on experience with Palo Alto Firewalls (Panorama, Security Policies, NAT, Threat Prevention).
• Expertise with Cisco Meraki (MX, MS, MR) in enterprise multi-site environments.
• Experience managing Infoblox DDI/IPAM (DNS, DHCP, IP Address Management).

Responsibilities

• Own and manage the global enterprise network infrastructure across multiple office locations.
• Design, implement, and support secure LAN/WAN, wireless, and network security architecture.
• Administer Palo Alto Firewalls, Cisco Meraki infrastructure, and Infoblox DDI/IPAM.
• Lead the migration from VPN/Tailscale to Zscaler Zero Trust (ZIA/ZPA) architecture.
• Design and implement Zero Trust access policies for secure application connectivity.
• Manage inter-office networking, ISP redundancy, and third-party network integrations.
• Develop standardized deployment processes for new office locations.
• Partner with IT and Security leadership to define the enterprise network roadmap.
• Manage vendor relationships, licensing, renewals, and technical escalations.
• Ensure high availability, performance, monitoring, documentation, and security of the corporate network.

Skills

Network architecture

Network security

CCIE

Palo Alto Firewalls

Cisco Meraki

Infoblox DDI/IPAM

Zero Trust / SASE

VPN technologies

SD-WAN

LAN/WAN

Tools

Palo Alto Firewalls

Cisco Meraki

Infoblox DDI/IPAM

Zscaler ZIA/ZPA

Tailscale/WireGuard

Job description

Job Title: Senior Network Engineer
Job Location: Sunnyvale, CA (Onsite)
Job Duration: CTH
Interview: Virtual

Required Skills:

• 7+ years of experience in Network Engineering, Network Architecture, or Network Security.
• CCIE (Cisco Certified Internetwork Expert) certification is required.
• Strong hands-on experience with Palo Alto Firewalls (Panorama, Security Policies, NAT, Threat Prevention).
• Expertise with Cisco Meraki (MX, MS, MR) in enterprise multi-site environments.
• Experience managing Infoblox DDI/IPAM (DNS, DHCP, IP Address Management).
• Strong knowledge of LAN/WAN, Routing & Switching, VLANs, SD-WAN, DNS, DHCP, NAT, 802.1X, and Network Access Control (NAC).
• Experience implementing Zero Trust / SASE solutions such as Zscaler (ZIA/ZPA), Prisma Access, Netskope, or Cloudflare.
• Experience with VPN technologies including Tailscale, WireGuard, or similar secure remote access solutions.
• Experience managing global enterprise networks, dual-ISP redundancy, and inter-office connectivity.
• Knowledge of MDM/BYOD, endpoint security, and network governance.
• Strong experience with network monitoring, automation, documentation, and vendor management.
• Ability to lead network strategy while remaining hands-on with implementation and troubleshooting.

Responsibilities

• Own and manage the global enterprise network infrastructure across multiple office locations.
• Design, implement, and support secure LAN/WAN, wireless, and network security architecture.
• Administer Palo Alto Firewalls, Cisco Meraki infrastructure, and Infoblox DDI/IPAM.
• Lead the migration from VPN/Tailscale to Zscaler Zero Trust (ZIA/ZPA) architecture.
• Design and implement Zero Trust access policies for secure application connectivity.
• Manage inter-office networking, ISP redundancy, and third-party network integrations.
• Develop standardized deployment processes for new office locations.
• Partner with IT and Security leadership to define the enterprise network roadmap.
• Manage vendor relationships, licensing, renewals, and technical escalations.
• Ensure high availability, performance, monitoring, documentation, and security of the corporate network.