Network Engineer II

We are looking for a Network Engineer to design, implement, maintain, and support our growing network infrastructure. You will be part of a systems engineering team that is responsible for designing and developing scalable, maintainable, highly available network architectures that meet business objectives and SLAs.

Candidate must posses expert level knowledge with the following vendor technologies: F5 Load Balancers, Palo Alto Firewall, Checkpoint Firewalls, Working knowledge of Zscaler (ZIA and ZPA). Documentation skills around architecture and design would be beneficial as well as start vendor management skills

Principal Accountabilities:• A member of the Connectivity Products team, design and implement scalable, efficient, & cost-effective network infrastructures & Software Defined Networking (SDN) ecosystem solutions• Continuous improvement of Network platform solutioning, specification & design, systems integration, platform lifecycle management.• Ensure high levels of security, availability, and performance • Drive process improvements that integrate automation, improve efficiency, and improve service delivery• Establish and drive to maintain standards while building and improve upon documentation, policies, & procedures for Network Solutions Team

Core Competencies:• F5 Load Balancers• Palo Alto• Checkpoint• Zscaler

Secondary Competencies:• Cisco LAN• Aruba Wireless

Requirements

Knowledge, Skills, and Education:

• Bachelor's degree, or relevant work experience.
• Strong Layer 2/Layer 3 network architectural design and engineering background and experience (LAN and Firewall) in a large enterprise network environment.
• Five or more years of relevant work experience in:
  • Security Engineering - Define and build firewall rules for projects utilizing Algosec and following Cyber Security defined process
  • Design, implementation, and migration experience & knowledge with Palo Alto and Checkpoint Firewalls
• Extranet and ADC serviceso Support, maintain operation excellence and participate in the evolution of the Extranet ADC, NLB infrastructure services in place
• Enabler of IT service request by managing end to end its delivery (qualification, interaction with the requester, design, define the implementation)o Provide L3 support for the service (both infrastructure and end user ticket escalation)
• Solid understanding of Extranet, DMZ concepts, exposure of corporate application & data to the internet/cloud.o Good experience with extranet solution deployment and support with F5 technology (APM) with usage of advanced Access Policy and iRule. Good understanding and management of the F5 LTM modules is important as well, iControl and GTM are a plus
• Strong background on usage and management of WAF concept needed with F5 ASM expertise and cloud WAF (AWS, GCP)
• Familiarity and understanding of tunneling protocols (vxLAN, GRE, IPSec)
• Working knowledge of DNS, Tacacs, Radius, DHCP, NetFlow, Syslog, etc.
• Exposure to native cloud security solutions such Zscaler cloud Firewall, Illumio ASP, AVI Networks
• Strong documentation skills in High Level Architecture & Design Solution
• Vendor technical management experience
• Technology leadership skills along with strong interpersonal skills.
• Travel may be required.

It is a plus if:

• Master's degree in Computer Science or related data communication technology discipline and certifications (Cisco, Aruba etc.).
• Extensive application performance and network operational troubleshooting along with network monitoring/analysis experience
• Background working in Linux environments with Unix scripting and/or software development experience.
• Networking in cloud computing experience (AWS, GCP & Azure)
• Exposure to SCADALAN model is a plus.
• Configuration management of networking devices using automation tools and API scripting with C/C++, Python and/or Ansible a plus.