Sr. Network Automation Engineer

Socket.dev; California (MO); On-site; USD 111,000 - 225,500; Full time

Job summary

Netskope, a leader in Security Service Edge, is seeking a Senior Network Engineer to own day-to-day operations of a large, multi-vendor network. You will maintain routers, switches, firewalls, and load balancers across global PoPs, optimize BGP and traffic engineering, and build monitoring dashboards to ensure uptime and performance.

You will collaborate with the Platform Reliability Engineering team to sustain continuous availability and support enterprise-scale traffic across regions,

Qualifications

• 7+ years of hands-on network engineering experience in production internet-facing data center or SaaS environments.
• Multi-vendor routing and switching expertise — Cisco, Juniper, and Arista; comfortable configuring and troubleshooting across all three in production
• Expert-level BGP — peering and transit configurations, route policy design, path optimization, and troubleshooting for IPv4 and IPv6 at scale
• Firewall operations experience in production environments — Juniper SRX, Palo Alto, Cisco ASA/FTD, or equivalent
• Load balancer and GTM/GSLB experience — F5 BIG-IP, Citrix ADC, or equivalent; virtual server management, health monitoring, global traffic management across multiple regions
• Strong L2 through L7 protocol knowledge — spanning-tree, LACP, MLAG, VLANs, BGP, OSPF, DNS, NTP, SNMP, SSH, Syslog, HTTP/S, SSL/TLS
• Experience with network monitoring platforms and dashboard tooling; ability to read utilization trends and build meaningful alert thresholds
• Proficiency with packet capture and traffic analysis tools (Wireshark, tcpdump)
• Solid Linux experience including basic scripting
• Background in KVM/ESXI hypervisor networking
• Strong documentation habits — change records, runbooks, architecture diagrams, and post-incident write-ups
• Prior experience in a public-facing SaaS, cloud, or internet infrastructure environment strongly preferred
• BSCS or equivalent required, MSCS or equivalent strongly preferred

Responsibilities

• Configure, maintain, and troubleshoot routers and switches across a multi-vendor environment — Cisco IOS/NX-OS, Juniper Junos, and Arista EOS
• Manage BGP peering sessions with transit providers, internet exchanges, and direct peering partners; tune route policy, path selection, and prefix filtering to optimize performance and cost across hundreds of sessions
• Install and configure new ISP transit links; manage circuit turn-up, capacity monitoring, and provider coordination globally
• Configure and maintain firewalls including rulesets, NAT policies, zone-based security, and periodic policy audit and cleanup
• Configure and manage load balancers including GTM/GSLB components, virtual servers, health monitors, persistence profiles, and SSL offload for multi-region traffic management
• Monitor network health continuously — reviewing dashboards and utilization trends, identifying degradation patterns, and acting proactively before issues escalate to customer impact
• Upgrade software on production routers, switches, firewalls, and load balancers with minimal disruption; plan and execute changes with documented rollback procedures
• Configure and maintain IPsec/IKE VPN tunnels across the global PoP footprint
• Perform packet captures and traffic analysis to diagnose issues and support incident investigations
• Troubleshoot problems from the network layer through the application layer, own root cause analysis, and drive permanent remediations
• Build and extend monitoring tools and dashboards to improve visibility into network performance and availability across all regions
• Use BGP policies and traffic engineering to minimize latency to customers, balance load across providers, and manage congestion across internet exchange relationships

Skills

Multi-vendor routing

BGP expert

Firewall operations

Load balancer GTM/GSLB

L2–L7 protocols

Network monitoring

Packet capture/analysis

Linux scripting

KVM/ESXi networking

Documentation

Public cloud/SaaS infra

Education

BSCS or equivalent

Tools

Wireshark

tcpdump

Job description

Join the Future of Security at Netskope

Netskope (NASDAQ: NTSK) is a leader in modern security and networking for the cloud and AI era. We secure and accelerate cloud, data, and AI in real time, everywhere. Thousands of customers, including more than 30 of the Fortune 100, trust the Netskope One platform, its Zero Trust Engine, and the powerful NewEdge network to gain full visibility and control without performance trade-offs.

At Netskope, our technology is driven by our greatest strength: our people. We believe that belonging powers innovation, and success is both personal and organizational. We embrace differences in gender, ethnicity, beliefs, ability, and identity, creating an environment where every voice is heard and respected. We empower our employees to bring their authentic selves to work, grow their careers through continuous education and mentorship, and lead with transparency and curiosity. Join a team where you belong, where you are encouraged to be an entrepreneur, and where together, we continue to redefine the landscape of security.

Visit Careers at Netskope to learn more. Follow us on LinkedIn and Instagram.

About the role

Netskope stands as the foremost leader in Security Service Edge (SSE), establishing the benchmark for how modern enterprises secure access across cloud, web, and private applications. The platform is trusted by more than 4,000 organizations worldwide, including 30+ of the Fortune 100, providing Zero Trust Network Access, Cloud Access Security Broker, and Secure Web Gateway capabilities through a single-pass, cloud-native architecture.

Underpinning these capabilities is a highly resilient global network engineered for continuous availability, managed directly by Netskope's Platform Reliability Engineering team. This expansive infrastructure consists of hundreds of Points of Presence across every major region, hundreds of BGP sessions spanning internet exchanges, transit providers, and direct peering partners, and a robust multi-vendor stack of routers, switches, firewalls, and load balancers that enterprises trust with their most security-critical traffic. The platform delivers:

• 99.999% availability with guaranteed low-latency performance for enterprise customers worldwide
• Hundreds of globally distributed Points of Presence providing best-path routing and regional redundancy
• Hundreds of BGP peering, transit, and internet exchange relationships managed and optimized continuously
• Multi-vendor network infrastructure (Cisco, Juniper, Arista, F5, Palo Alto) spanning data centers across every major region
• GTM and GSLB-driven traffic management ensuring seamless failover and performance at global scale
• Strict RTO and RPO objectives with zero-downtime change execution across a live production network
• Continuous capacity expansion as Netskope grows into new markets and enterprise segments

As a Senior Network Engineer on this team, you will be the network domain owner embedded within the team. You will keep this infrastructure healthy, well-monitored, and continuously improving — owning day-to-day operations end-to-end while proactively identifying and resolving risks before they reach customers. This is a high-ownership role for an engineer who genuinely cares about uptime and takes pride in knowing the health of their network without being told to look.

Responsibilities

• Configure, maintain, and troubleshoot routers and switches across a multi-vendor environment — Cisco IOS/NX-OS, Juniper Junos, and Arista EOS
• Manage BGP peering sessions with transit providers, internet exchanges, and direct peering partners; tune route policy, path selection, and prefix filtering to optimize performance and cost across hundreds of sessions
• Install and configure new ISP transit links; manage circuit turn-up, capacity monitoring, and provider coordination globally
• Configure and maintain firewalls including rulesets, NAT policies, zone-based security, and periodic policy audit and cleanup
• Configure and manage load balancers including GTM/GSLB components, virtual servers, health monitors, persistence profiles, and SSL offload for multi-region traffic management
• Monitor network health continuously — reviewing dashboards and utilization trends, identifying degradation patterns, and acting proactively before issues escalate to customer impact
• Upgrade software on production routers, switches, firewalls, and load balancers with minimal disruption; plan and execute changes with documented rollback procedures
• Configure and maintain IPsec/IKE VPN tunnels across the global PoP footprint
• Perform packet captures and traffic analysis to diagnose issues and support incident investigations
• Troubleshoot problems from the network layer through the application layer, own root cause analysis, and drive permanent remediations
• Build and extend monitoring tools and dashboards to improve visibility into network performance and availability across all regions
• Use BGP policies and traffic engineering to minimize latency to customers, balance load across providers, and manage congestion across internet exchange relationships

Required Skills & Experience

• 7+ years of hands-on network engineering experience in production internet-facing data center or SaaS environments
• Multi-vendor routing and switching expertise — Cisco, Juniper, and Arista; comfortable configuring and troubleshooting across all three in production
• Expert-level BGP — peering and transit configurations, route policy design, path optimization, and troubleshooting for IPv4 and IPv6 at scale
• Firewall operations experience in production environments — Juniper SRX, Palo Alto, Cisco ASA/FTD, or equivalent
• Load balancer and GTM/GSLB experience — F5 BIG-IP, Citrix ADC, or equivalent; virtual server management, health monitoring, global traffic management across multiple regions
• Strong L2 through L7 protocol knowledge — spanning-tree, LACP, MLAG, VLANs, BGP, OSPF, DNS, NTP, SNMP, SSH, Syslog, HTTP/S, SSL/TLS
• Experience with network monitoring platforms and dashboard tooling; ability to read utilization trends and build meaningful alert thresholds
• Proficiency with packet capture and traffic analysis tools (Wireshark, tcpdump)
• Solid Linux experience including basic scripting
• Background in KVM/ESXI hypervisor networking
• Strong documentation habits — change records, runbooks, architecture diagrams, and post-incident write-ups
• Prior experience in a public-facing SaaS, cloud, or internet infrastructure environment strongly preferred
• BSCS or equivalent required, MSCS or equivalent strongly preferred

Compensation

At Netskope, salary is one component of our competitive total rewards package. The salary range for this position is as listed below. This is a national range. For purposes of complying with applicable laws, the range applies to candidates in California, Colorado, Illinois, Maryland, New York, Washington, and other states.

The successful candidate’s starting pay will also be determined based on job-related skills, experience, qualifications, location, and market conditions.

For all sales roles, the posted salary range is the On Target Earnings (OTE) range for the role, which is the sum of base salary and target commission amount at 100% goal achievement.

In addition to salary, candidates may be eligible for other forms of compensation such as participation in a bonus plan (for non-sales roles) and a stock award program. Candidates may also be eligible for a comprehensive health plan and other benefits that can be reviewed at Netskope Benefits site.

Salary Range

$111,000 — $225,500 USD

Netskope is committed to implementing equal employment opportunities for all employees and applicants for employment. Netskope does not discriminate in employment opportunities or practices based on religion, race, color, sex, marital or veteran statues, age, national origin, ancestry, physical or mental disability, medical condition, sexual orientation, gender identity/expression, genetic information, pregnancy (including childbirth, lactation and related medical conditions), or any other characteristic protected by the laws or regulations of any jurisdiction in which we operate.

Netskope respects your privacy and is committed to protecting the personal information you share with us, please refer to Netskope\'s Privacy Policy for more details.