Senior Network Engineer | 12680

RiseMe; Chicago (IL); Hybrid; USD 110,000 - 140,000; Full time

Job summary

CTI Staffing partners with an engineering services organization to fill a Senior Network Engineer role in Chicago, IL. Hybrid work arrangement combines onsite presence Tue–Thu with remote days as needed.

You will own firewall, cloud networking, and routing configurations across data centers, cloud, and remote sites, acting as senior escalation for connectivity and security issues. 6-month contract-to-hire with path to full-time.

Qualifications

• 7+ years in enterprise network environments, senior-level experience.
• Hands-on Palo Alto firewall administration: policies, NAT, VPN, HA.
• Hands-on Azure networking: VNets, peering, NSGs, VPN Gateway, ExpressRoute.

Responsibilities

• Provide tier-3 support and troubleshooting across data center, WAN, campus, wireless, Internet edge, and Azure environments.
• Configure and maintain Palo Alto firewalls with policies, NAT, routing, VPNs, certs, logging, and high availability.
• Design, configure, and support Azure networking and hybrid connectivity to on-prem.
• Manage Cisco Catalyst and Meraki switching across campus and branch offices.
• Implement and troubleshoot VLANs, VRFs, STP, HSRP, QoS, iBGP, eBGP, and EIGRP.
• Administer DNS, DHCP, IPAM, and network segmentation supporting AD and cloud services.
• Support remote-access and site-to-site VPNs, including Zscaler and GlobalProtect.
• Travel occasionally to regional offices for site surveys, implementations, and hands-on troubleshooting.

Skills

Palo Alto firewall

Azure networking

BGP

EIGRP

VRF

HSRP

DNS

DHCP

IPAM

Cisco Catalyst Meraki

Zscaler

GlobalProtect

Active Directory

Job description

CTI Staffing is partnering with a well-established engineering services organization to find a Senior Network Engineer for their infrastructure team, based in Chicago, IL (hybrid, onsite Tuesday through Thursday).

This team keeps a hybrid enterprise network running across data centers, cloud, branch offices, and remote users. You'll be the senior escalation point for anything that touches connectivity or security, with real ownership over firewalls, cloud networking, and routing. This is a 6-month contract-to-hire with a clear path to full-time.

What You'll Do

• Provide tier-3 support and troubleshooting across data center, WAN, campus, wireless, Internet edge, and Azure environments.
  
• Configure and maintain Palo Alto firewalls, including policies, NAT, routing, VPN, certificates, authentication, logging, and high availability.
  
• Design, configure, and support Azure networking and hybrid connectivity to on-prem.
  
• Manage Cisco Catalyst and Meraki switching across campus and branch offices.
  
• Implement and troubleshoot VLANs, VRFs, STP, HSRP, QoS, iBGP, eBGP, and EIGRP.
  
• Administer DNS, DHCP, IP address management, and network segmentation supporting Active Directory and cloud services.
  
• Support remote-access and site-to-site VPNs, including Zscaler and GlobalProtect.
  
• Travel occasionally to regional offices for site surveys, implementations, and hands-on troubleshooting.
  

Requirements

Must-Have:

• 7+ years supporting enterprise network environments, including time in a senior network engineering role.
  
• Hands-on Palo Alto firewall administration: policies, NAT, VPN, and HA in production.
  
• Hands-on Azure networking experience, such as VNets, peering, NSGs, VPN Gateway, or ExpressRoute.
  
• Strong routing and switching depth with BGP, EIGRP, VLANs, VRFs, STP, and HSRP.
  
• Experience with Cisco Catalyst and/or Meraki in multi-site environments.
  
• Working knowledge of DNS, DHCP, IPAM, and subnetting in Active Directory environments.
  
• Ability to work onsite in downtown Chicago Tuesday through Thursday.
  
• US Citizen or Permanent Resident.
  

Nice-to-Have:

• Zscaler (ZIA/ZPA) administration.
  
• GlobalProtect deployment and troubleshooting.
  
• Wireless design or support experience.
  
• Colocation or data center migration experience.
  
• PCNSE, CCNP, or AZ-700 certification.
  

Technical Environment:

• Palo Alto Networks (NGFW, GlobalProtect)
• Microsoft Azure networking
• Cisco Catalyst, Cisco Meraki
• Zscaler
• BGP, EIGRP, QoS, VRF
• DNS, DHCP, IPAM, Active Directory

What Success Looks Like:

• You're the go-to tier-3 resource, resolving incidents end to end within your first 60 days.
  
• Firewall and cloud network configurations are cleaner, documented, and easier to support.
  
• You've earned a full-time offer by the end of the contract.