Network Services Engineer

Responsibilities

• Design, deploy, and operate enterprise LAN/WAN infrastructure across retail, corporate, and datacenter environments.
• Manage and optimize Juniper Mist Wi‑Fi deployments across large‑scale retail locations, including AP provisioning, RF tuning, and policy management via the Mist cloud portal.
• Support and expand Fortinet SD‑WAN (Forti Gate / Forti Manager) rollouts, including ZTP, policy configuration, and integration with Zscaler SASE.
• Administer VMware SD‑WAN (Velo Cloud) overlay network: edge configuration, profile management, link QoS, and tunnel health monitoring.
• Configure and manage Palo Alto Networks firewalls (PA‑5400 series) via Panorama, including policy lifecycle, NAT, URL filtering, Global Protect VPN, and security profile management.
• Support NSX‑T micro‑segmentation initiatives including distributed firewall rules, security groups, and East‑West traffic policy enforcement.
• Assist with Zerto‑based DR replication and failover testing across Equinix CH3 and DE2 sites.
• Maintain and troubleshoot routing protocols (BGP, OSPF) across datacenter switching (Nexus 93600/93180) and WAN edge platforms.
• Participate in a rotating on‑call schedule, including evenings and weekends, to respond to P1/P2 incidents and network outages.
• Document configurations, runbooks, and architecture decisions in Confluence following established team standards.
• Contribute to automation and monitoring initiatives using Solar Winds, Dynatrace, and custom tooling.
• Coordinate with ISPs and managed service vendors for circuit provisioning, troubleshooting, and escalation.

• 15+ years of enterprise network engineering experience in a multi‑site environment.
• Hands‑on experience with Juniper networking products – Mist Wi‑Fi platform strongly preferred (AP provisioning, Mist AI, WLANs, client troubleshooting).
• Proficiency with Palo Alto Networks firewalls and Panorama (policy management, NAT, security profiles, Global Protect).
• Experience with SD‑WAN platforms – Fortinet (Forti Gate/FMG) and/or VMware Velo Cloud.
• Solid understanding of network segmentation concepts – VLANs, VRFs, micro‑segmentation, Zero Trust principles.
• Strong working knowledge of BGP, OSPF, and enterprise switching (Cisco Nexus or equivalent).
• Familiarity with VMware NSX‑T (distributed firewall, logical routing, security groups).
• Understanding of cloud networking fundamentals (AWS VPC, Azure VNet, or equivalent).
• Ability and willingness to participate in a 24/7 on‑call rotation.
• Strong documentation habits – ability to write clear runbooks, change records, and architecture notes.