Senior Network Engineer

Description
We are seeking a Senior L4 Network Engineer / Architect with strong expertise in Cisco SD-WAN architecture, enterprise WAN design, MPLS routing, and fiber-based WAN/LAN integration. This role will be responsible for defining and leading the SD-WAN portion of the solution, including how Cisco SD-WAN will be designed, deployed, integrated, and supported across MPLS, Internet, broadband, LTE/5G, and other WAN transport options.

The ideal candidate is a Senior technical leader who understands how to build and operate Cisco SD-WAN environments over complex underlays, including MPLS and carrier Ethernet services. While deep MPLS knowledge is important, this role is not limited to traditional MPLS engineering. The primary need is for someone who can define how the SD-WAN overlay should operate, how it integrates with existing WAN and LAN environments, and how it supports routing, segmentation, performance, resiliency, security, and operational requirements.

This person must also understand how WAN services physically enter a site, including carrier handoffs, fiber termination, optics, demarcation points, WAN edge routers, firewalls, and LAN aggregation infrastructure. The role requires hands-on technical depth, architectural judgment, troubleshooting discipline, and the ability to guide engineering teams through complex design, implementation, migration, and escalation scenarios.

Key Responsibilities

Cisco SD-WAN Architecture and Solution Definition
Lead the design and definition of Cisco SD-WAN solutions for enterprise and mission-critical environments.
Develop SD-WAN architectures using MPLS, Internet, broadband, LTE/5G, private-line, and hybrid WAN transport models.
Define how Cisco SD-WAN overlays will operate across existing and future WAN underlays.
Design SD-WAN control, data, and management plane architecture using Cisco SD-WAN components such as vManage, vBond, vSmart, and Cisco WAN Edge routers.
Build and validate SD-WAN policies for application-aware routing, traffic steering, segmentation, path preference, SLA-based forwarding, failover, and resiliency.
Define transport-side and service-side VPN designs, including how WAN edge devices connect into LAN, firewall, data center, and cloud environments.
Lead SD-WAN migration planning from legacy WAN or MPLS-centric environments to modern Cisco SD-WAN architectures.
Establish SD-WAN design standards, implementation templates, validation methods, and operational handoff documentation.

Cisco SD-WAN Deployment and Operations
Configure, deploy, troubleshoot, and support Cisco SD-WAN environments using centralized templates, policies, and device-level configurations.
Support Cisco SD-WAN edge platforms, including Cisco Catalyst 8000/8500, ISR, ASR, and other IOS-XE SD-WAN-capable platforms.
Troubleshoot SD-WAN control connections, tunnel formation, BFD behavior, policy application, routing advertisements, NAT traversal, certificate issues, and overlay reachability.
Validate application performance across multiple WAN transports using routing, SLA, QoS, and performance monitoring tools.
Support high-risk SD-WAN cutovers, site migrations, circuit transitions, and production troubleshooting events.
Partner with security, LAN, cloud, voice, application, and carrier teams to ensure SD-WAN designs meet business and technical requirements.

WAN, MPLS, and Routing Integration
Design and support WAN environments that include MPLS, carrier Ethernet, Internet, broadband, private fiber, and hybrid transport models.
Understand how Cisco SD-WAN operates over MPLS underlays, including transport VPN design, routing exchange, path selection, QoS treatment, and failover behavior.
Support MPLS-related routing requirements, including L3

VPN, L2

VPN, VRF segmentation, PE/CE routing, route targets, route distinguishers, and carrier handoff models.
Configure and troubleshoot advanced routing using BGP, OSPF, IS-IS, EIGRP, route redistribution, route filtering, prefix lists, route maps, communities, and routing policies.
Work with carriers and service providers to validate circuit delivery, MPLS routing handoffs, CE/PE demarcation, SLA performance, and escalation of provider-side…