Principal Network Engineer

About the organization

A well-established, community-focused financial institution headquartered in the Bay Area, known for its personalized banking services and long-standing commitment to local communities. The organization offers a full range of financial products including personal and business banking, mortgage lending, and wealth management. It distinguishes itself through relationship-based service, local decision-making, and support for regional economic growth through philanthropic initiatives and community engagement.

The Principal Network Engineer will design, implement, and manage complex network infrastructures. This position requires strong experience with Cisco and Palo Alto firewalls, SD-WAN using Meraki, routing and switching, load balancing (F5), and network design for multi-datacenter environments, including hybrid Azure Cloud solutions. As the Principal Network Engineer, you will play a key role in ensuring the stability, security, and scalability of the network, while adhering to regulatory standards and modern best practices.

Network Architecture & Design:

• Lead the design and architecture of network infrastructure for multi-datacenter and hybrid Azure Cloud environments.
• Ensure high availability, scalability, and resilience of networks across on-premise and cloud environments.
• Design and implement advanced routing and switching solutions using Cisco technologies.

Firewall & Security:

• Configure, manage, and optimize Palo Alto and Cisco firewalls to ensure comprehensive security and compliance. This includes knowledge of the following:
• IPSec VPN
• DMVPN
• Network Address Translation (NAT)
• SSL VPN
• Packet inspection/access rules

Detailed knowledge of Cisco network infrastructure

• Traditional Cisco Networking
• Catalyst/Nexus switching
• Routing (IOS/IOS-XE)
• EIGRP
• BGP
• Other routing protocol
• Firmware Management
• Develop and implement network security strategies, incorporating firewall rules, access controls, and threat detection.
• Integrate network security tools and solutions to monitor, detect, and mitigate threats across both datacenter and cloud environments.
• SD-WAN with Meraki:
  Design and manage SD-WAN solutions using Cisco Meraki, optimizing performance and security for remote and branch office connectivity.
• Ensure reliable and secure connectivity between multiple datacenters, cloud environments, and remote locations using SD-WAN technologies.

Hybrid Cloud Networking (Azure):

• Design, implement, and manage network infrastructure in Azure Cloud environments, ensuring secure and seamless integration with on-premise systems.
• Implement secure connectivity solutions between Azure, on-premise systems, and other cloud platforms.
• Utilize VPN, Express Route, and other secure networking solutions to maintain high availability and security across hybrid environments.

Load Balancing & Traffic Management:

• Design, configure, and manage F5 load balancers to optimize traffic distribution, performance, and availability.
• Implement global traffic management and local load balancing solutions for highly available systems.

Disaster Recovery & Automation:

• Automate network disaster recovery processes for datacenter and cloud environments, ensuring rapid failover and business continuity.
• Implement and manage disaster recovery strategies using automation tools and industry best practices.

Network Security & Compliance:

• Oversee the implementation of robust security measures across the network, including firewalls, encryption, and access control.
• Working knowledge of Cisco specific security access - Cisco Secure ACS (TACACS/TACACS+/AAA) or similar (Cisco Identity Services Engine [ISE])
• Ensure the network infrastructure complies with industry regulations such as PCI, SOX, and GDPR.
• Stay updated on modern security frameworks and proactively implement security improvements.

Monitoring & Troubleshooting:

• Implement and manage advanced network monitoring and troubleshooting tools to ensure network health and performance. Examples of specific required technologies:
• Experience with currently used Network Monitoring Technology
• Solar Winds Orion
• Network Performance Manager (NPM) – Monitoring and alerting/reporting
• Ne…