Senior Network & Security Engineer

We are looking for a highly reliable and experienced Senior Network & Security Engineer to join our project team. The role requires strong hands-on expertise across enterprise networking, security, application delivery, and cloud connectivity. Just as importantly, we are looking for someone who demonstrates ownership, dependability, clear communication, and strong teamwork.

The successful candidate should be comfortable working in a complex production environment, independently troubleshooting issues, implementing changes, and collaborating with senior engineers and other infrastructure, security, application, and cloud teams.

Responsibilities

Operate and maintain enterprise and data center switching environments, ensuring high availability and redundancy Manage and troubleshoot routing in complex production networks, including BGP peering with organization-owned public ASN, Internet transit, and route manipulation Administer application delivery platforms, including virtual servers, pools, health monitors, SSL/TLS termination, and persistence configurations Support enterprise authentication and authorization services, including RADIUS, TACACS+, and 802.

1X policies Configure and troubleshoot site-to-site IPsec VPNs, remote access VPNs, and certificate-based authentication Implement and maintain firewall policies, NAT, security zones, and VPN integrations across Cisco Secure Firewall platforms Design and support hybrid network architectures integrating on-premises infrastructure with AWS, Azure, and OCI Take ownership of complex incidents and perform multi-layer troubleshooting across switching, routing, firewalls, VPNs, load balancers, authentication systems, and cloud infrastructure Participate in production changes, maintenance windows, change management, incident response, and root-cause analysis Analyze packet captures, logs, routing tables, firewall policies, and authentication logs for diagnostic purposes Document changes, designs, troubleshooting findings, and operational procedures Collaborate with infrastructure, security, application, and cloud teams, escalating issues with useful technical context when needed Requirements 3+ years of hands-on experience in enterprise network and security engineering within complex production environments Expertise in Cisco enterprise and data center switching, including Cisco Nexus and Catalyst platforms, along with vPC and NX-OS Proficiency in Layer 2 and Layer 3 switching concepts such as VLANs, trunks, and STP/RSTP/MST, as well as LACP/port channels, high-availability designs, and troubleshooting of complex switching and connectivity issues Strong background in routing protocols, including OSPF, iBGP, and eBGP, with practical experience in BGP routing policy, prefix filtering, and route redistribution/summarization Understanding of Internet peering/transit concepts, BGP advertisements, and operation of networks with organization-owned public ASN Skills in F5 BIG-IP / Local Traffic Manager (LTM) or equivalent application delivery platforms, covering virtual servers, pools, health monitors, and profiles, along with SSL/TLS termination, persistence, SNAT, and application traffic troubleshooting Competency in Cisco Identity Services Engine (ISE) for RADIUS, TACACS+, and 802.

1X, including authentication/authorization policies, device administration, and troubleshooting of auth failures Hands-on experience with Cisco VPN technologies, including site-to-site IPsec VPN, Remote Access VPN, and Cisco Secure Client / Any. Connect, with certificate-based authentication and VPN troubleshooting Operational expertise in Cisco Secure Firewall / Firepower Threat Defense (FTD) and Cisco Firewall Management Center (FMC), covering Access Control Policies, NAT, and security zones, along with firewall routing, VPN integration, logging, and policy lifecycle management Practical knowledge of cloud networking across AWS, Microsoft Azure, and Oracle Cloud Infrastructure (OCI), including VPC/VNet/VCN networking, subnets/routing, and security controls Familiarity with site-to-site VPN connectivity, BGP-based cloud connectivity, and private/dedicated cloud links such as AWS Direct Connect, Azure Express.

Route, and OCI Fast. Connect Strong ownership, dependability, clear communication, and methodical troubleshooting approach, with the ability to work independently and remain calm under high-pressure incidents Nice to have Capability to perform network automation using Python, Ansible, and APIs Understanding of Infrastructure as Code and Git-based configuration/change workflows Familiarity with network monitoring and observability platforms, DNS, DHCP, and IPAM Knowledge of PKI and certificate management, as well as network design documentation and diagrams Experience with high-availability and disaster-recovery architectures in large enterprise or service-provider networking environments