Senior Network Engineer - Access and Edge

Automotivemastermind; Virginia (MN); Hybrid; USD 110,000 - 165,000; Full time

Job summary

Automotivemastermind is seeking an Access and Edge Network Engineer to operate and evolve a large estate of remote access VPN, on-premises firewalls, NAC (ISE), and Guardicore micro-segmentation across campus and data center environments.

This hands-on role will manage technologies that control how users, devices, and workloads connect to and traverse the network, with responsibilities spanning VPN, firewall, NAC, and micro-segmentation platforms.

Qualifications

• 5+ years of network engineering experience focused on access control, perimeter security, and edge networking.
• Hands-on production experience with at least two of: Zscaler, Fortinet, Cisco ISE, Guardicore.
• Experience managing remote access VPN at enterprise scale.
• Experience administering on-premises firewalls in campus and data center environments.
• Solid understanding of core networking and security protocols: TCP/IP, IPsec, 802.1X, RADIUS, DNS, DHCP.

Responsibilities

• Manage and operate a large-scale remote access VPN environment for a distributed workforce.
• Administer on-premises firewalls (Fortinet and Palo Alto) across campus and data center locations, including policy management and rule lifecycle.
• Administer Cisco ISE.
• Deploy and manage Guardicore micro-segmentation to enforce workload-level security policies in the data center.
• Operate Zscaler (ZIA, ZPA) for secure internet access and zero-trust private application connectivity.
• Troubleshoot complex connectivity and access issues spanning VPN, firewall, NAC, and micro-segmentation platforms.

Skills

Network engineering

Edge networking

Remote access VPN

Firewall administration

NAC / ISE

Tools

Zscaler

Fortinet

Cisco ISE

Guardicore

Job description

We are seeking an Access and Edge Network Engineer to operate and evolve a large estate of remote access VPN, on-premises firewalls, network access control (ISE), and micro-segmentation (Guardicore) infrastructure across campus and data center environments. This is a hands‑on role managing the technologies that control how users, devices, and workloads connect to and traverse the network.

Key Responsibilities

• Manage and operate a large-scale remote access VPN environment for a distributed workforce.
• Administer on-premises firewalls (Fortinet and Palo Alto) across campus and data center locations, including policy management and rule lifecycle.
• Administer Cisco ISE.
• Deploy and manage Guardicore micro-segmentation to enforce workload-level security policies in the data center.
• Operate Zscaler (ZIA, ZPA) for secure internet access and zero-trust private application connectivity.
• Operate Prisma for for secure internet access and zero-trust private application connectivity.
• Troubleshoot complex connectivity and access issues spanning VPN, firewall, NAC, and micro-segmentation platforms.

Required Qualifications

• 5+ years of network engineering experience focused on access control, perimeter security, and edge networking.
• Hands-on production experience with at least two of the following (MANDATORY): Zscaler, Fortinet, Cisco ISE, Guardicore.
• Demonstrated experience managing remote access VPN at enterprise scale.
• Strong experience administering on-premises firewalls in campus and data center environments.
• Solid understanding of core networking and security protocols: TCP/IP, IPsec, 802.1X, RADIUS, DNS, DHCP.
• Experience working in large enterprise environments with a sizable device and user population.

Preferred Qualifications

• Experience with all four platforms (Zscaler, Palo Alto, Fortinet, ISE, Guardicore).
• Experience with network automation (Python, Ansible, or vendor APIs).
• Familiarity with zero-trust network access principles.

If you like wild growth and working with happy, enthusiastic over-achievers, you’ll enjoy your career with us!

It is the policy of Mobility to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, Mobility will provide reasonable accommodations for qualified individuals with disabilities.