Senior Network Engineer

ABOUT THE ROLE

We are looking for a mid-level Network Engineer to join a lean, high-output team and take real ownership of our core network infrastructure. This role exists to backfill a critical position. You will inherit a live environment with production responsibilities from day one. You will own and operate our core switching infrastructure, deliver network projects for customers, and extend capabilities into cloud networking across Azure and AWS.

If you are someone who wants to be the person others call when things break, and who can also plan and execute complex network projects, this role is built for you.

• Own and operate core switching infrastructure, including configuration, maintenance, and performance tuning of Juniper and related platforms.
• Manage and support the CATO Networks SASE platform, covering policy management, site onboarding, and troubleshooting.
• Design, implement, and deliver customer‑facing network projects from scoping through production handoff.
• Configure and manage cloud networking in Microsoft Azure (VNets, Express Route, NSGs, Azure Firewall) and AWS (VPC, Transit Gateway, Direct Connect).
• Troubleshoot and resolve complex layer2 and layer3 network issues independently and under pressure.
• Manage routing protocols in production, including BGP, OSPF, and static routing across on‑premises and hybrid environments.
• Configure and maintain network security controls, including firewalls, ACLs, VPNs (IPSec/SSL), and segmentation policies.
• Monitor network health and performance; proactively identify and address degradation before it becomes an incident.
• Produce and maintain accurate network diagrams, runbooks, and project documentation.
• Participate in on‑call rotation and serve as an escalation point for network‑related incidents.

• 3–5 years of hands‑on network engineering experience in a production environment.
• Direct, hands‑on experience with Juniper switches and routers, including JunOS CLI, configuration, and troubleshooting.
• Hands‑on experience with the CATO Networks SASE platform, including site configuration, policy management, and troubleshooting.
• Strong layer2 and layer3 fundamentals: VLANs, STP, LACP, BGP, OSPF, and inter‑VLAN routing.
• Working experience with Microsoft Azure networking, including VNets, VPN Gateway, NSGs, peering, and hybrid connectivity.
• Working experience with AWS networking, including VPC design, subnetting, security groups, Transit Gateway, and routing.
• Experience with network security: firewall policy, VPN (IPSec/SSL), ACLs, and segmentation.
• Proven ability to manage and deliver network projects with multiple stakeholders and competing priorities.

• Certifications:
  
  Juniper JNCIA/JNCIS, Cisco CCNA/CCNP, Microsoft AZ‑700, AWS Advanced Networking Specialty, or CATO Networks certified.
• Experience with SD‑WAN platforms beyond CATO (Meraki, Velo Cloud, Fortinet).
• Scripting or automation experience using Python, Ansible, or Terraform for network configuration and provisioning.
• Familiarity with network monitoring platforms (Solar Winds, PRTG, Zabbix, or similar).
• Experience with wireless networking such as Mist, Meraki, or Aruba.
• Exposure to Zero Trust network architecture or SASE design principles beyond CATO.

• Must be legally authorized to work in the United States.
• H‑1B visa sponsorship is not available for this position.
• Must be able to work fully on‑site; remote work is not available.
• This position requires full‑time, on‑site presence.