Senior Network Engineer

Centraprise; Sunnyvale (CA); On-site; USD 100,000 - 130,000; Full time

Job summary

A leading technology firm is seeking a highly experienced Senior Network Engineer to oversee enterprise network infrastructure and security. This position involves designing, deploying, and hardening routing and firewall architectures, ensuring secure and scalable connectivity. The ideal candidate will have strong expertise in Layer 2/Layer 3 network architectures, enterprise firewall platforms, and VPN technologies. Join us to lead innovative solutions in a dynamic environment.

Qualifications

• Strong expertise in routing and switching technologies (BGP, OSPF, VLANs, MPLS preferred).
• Hands-on experience with enterprise firewall platforms.
• Deep knowledge of VPN technologies and network security best practices.

Responsibilities

• Design, implement, and maintain complex Layer 2/Layer 3 network architectures.
• Act as the primary administrator for enterprise firewalls.
• Architect and support secure connectivity solutions for distributed office locations.

Skills

Layer 2/Layer 3 network architectures

Enterprise firewalls

Site-to-Site IPsec VPNs

Packet capture and flow analysis

Routing and switching technologies

Network troubleshooting and monitoring

Tools

Wireshark

Palo Alto

Fortinet

Cisco Firepower

Job description

We are seeking a highly experienced Senior Network Engineer with strong expertise in enterprise network infrastructure and security. This role serves as the primary architect and administrator of the organization’s physical and logical network environment. The ideal candidate will lead the design, deployment, and hardening of routing and firewall architectures while ensuring secure, scalable, and high-performance global connectivity.

Key Responsibilities

• Design, implement, and maintain complex Layer 2/Layer 3 network architectures, including management of global routing tables, prefix lists, and traffic engineering.
• Act as the primary administrator for enterprise firewalls (Palo Alto, Fortinet, Cisco Firepower), including development of advanced security policies, SSL inspection, and intrusion prevention tuning.
• Architect and support secure connectivity solutions such as Site-to-Site IPsec VPNs and Client VPNs for distributed office locations and remote users.
• Lead physical deployment and lifecycle management of routers, switches, and load balancers across data centers and enterprise sites.
• Serve as a Tier-3 escalation point for complex network issues, utilizing packet capture and flow analysis tools (e.g., Wireshark) for root cause analysis.
• Perform firmware audits, upgrades, and vulnerability management across network infrastructure to ensure compliance with security standards.
• Collaborate with cross-functional IT teams to design and implement scalable, resilient network solutions.
• Participate in architecture planning and long-term infrastructure strategy initiatives.

Technical Requirements

• Strong expertise in routing and switching technologies (BGP, OSPF, VLANs, MPLS preferred)
• Hands-on experience with enterprise firewall platforms (Palo Alto, Fortinet, Cisco Firepower)
• Deep knowledge of VPN technologies and network security best practices
• Experience with network troubleshooting and monitoring tools
• Familiarity with data center networking and hardware deployment
• Understanding of security hardening and vulnerability management