Network Engineer

Job Description Must Have Technical/Functional Skills

• Strong knowledge of routing/switching protocols (BGP, OSPF, STP, VXLAN).
• Experience with Cisco (IOS/NX-OS), Palo Alto, Juniper, F5, Fortinet.
• Familiarity with SD-WAN, load balancing, and NAC solutions.
• Linux and Windows administration expertise.
• Experience with Active Directory, LDAP, DNS, DHCP, PKI, SSO.

• Strong knowledge of routing/switching protocols (BGP, OSPF, STP, VXLAN).
• Experience with Cisco (IOS/NX-OS), Palo Alto, Juniper, F5, Fortinet.
• Expertise in firewalls, VPNs, network segmentation, IDS/IPS.
• Cloud networking (AWS VPCs, Private Link, TGW; Azure VNets; GCP VPCs).
• Familiarity with SD-WAN, load balancing, and NAC solutions.

• Linux and Windows administration expertise.
• Virtualization platforms (VMware ESXi/vCenter, Hyper‑V).
• Cloud systems management (AWS EC2/EBS/EFS/RDS; Azure IaaS; GCP Compute).
• Experience with Active Directory, LDAP, DNS, DHCP, PKI, SSO.
• Containerization (Docker, Kubernetes, EKS/AKS/GKE).

• Knowledge of NIST 800‑53, RMF, CIS benchmarks, DISA STIG hardening.
• Experience integrating logs into SIEM platforms (Splunk, QRadar, Elastic).
• Familiarity with IAM, MFA, Zero Trust, segmentation models.
• Ability to support SOC incident response activities.

• Scripting skills:
  Python, Bash, Power Shell.
• Automation:
  Ansible, Terraform, Cloud Formation, Git Lab CI/CD.
• Knowledge of monitoring frameworks (Prometheus, Grafana, Cloud Watch).
• Proficiency in leveraging Artificial Intelligence (AI) to drive innovation and efficiency within technical domains.

• Design, build, and maintain enterprise network architectures (LAN/WAN, data center, campus, cloud networking).
• Configure and optimize routing and switching (e.g., BGP, OSPF, EIGRP, VXLAN, EVPN).
• Manage firewalls, IDS/IPS, VPN, and network segmentation policies aligned to Zero Trust principles.
• Implement network telemetry, logging, and packet‑capture visibility solutions.
• Ensure network resiliency, redundancy, and capacity planning across environments.
• Maintain cloud network configurations (AWS VPCs, Transit Gateways, Azure VNets, GCP VPCs).
• Perform network performance troubleshooting, service restoration, and RCA documentation.
• Manage network device lifecycle: refresh planning, patching, firmware, IOS/NX‑OS upgrades.

• Architect, deploy, and maintain server infrastructure (Linux, Windows, VMware, Hyper‑V).
• Configure and optimize system performance, storage, virtualization, and backups.
• Maintain cloud infrastructure services (EC2, RDS, EBS, S3, IAM, Azure AD, GCP equivalents).
• Deploy and manage containers, Kubernetes, orchestration systems.
• Implement secure system baselines (CIS, NIST 800‑53, DISA STIGs).
• Maintain Active Directory, DNS, DHCP, PKI, SSO, and certificate management.
• Support patching, OS hardening, system logging, FIM, vulnerability remediation.
• Conduct performance and health monitoring of critical compute resources and services.

• Integrate network/sys logs into SIEM platforms following CIM or standardized schema.
• Implement network and system controls supporting ISO
  27001, or NIST RMF compliance.
• Support incident response through data collection, log analysis, containment actions, and implementing compensating controls.
• Manage access controls, least‑privilege enforcement, and identity integrations for infrastructure.
• Support audit evidence collection and configuration/state reporting.

Salary Range: $90,000 - $130,000 a year