Lead Network Engineer; Hybrid Remote

Hybrid Remote / Work from Home (Tuesday, Wednesday, Thursday in office) Richmond, VA About the Role

We are seeking a highly skilled and motivated Lead Network Engineer to architect, deploy, and maintain our network and cloud infrastructure. In this role, you will be the technical cornerstone of our networking team, ensuring high availability, robust security, and seamless scalability across our on‑premises environments and cloud platforms.

• Design, implement, and maintain scalable, resilient core routing and switching environments (LAN/WAN, SD‑WAN, BGP, OSPF, EIGRP).
• Optimize network performance, monitor traffic telemetry, and troubleshoot complex infrastructure issues to ensure maximum uptime.
• Manage and scale data center networking, including fabric topology and load balancing (e.g., F5 BIG‑IP).
• Architect and implement secure hybrid‑cloud network topologies, seamlessly connecting physical data centers to cloud environments (AWS VPCs, Azure VNet, Google Cloud VPC).
• Manage cloud routing, gateways, and connectivity solutions such as AWS Direct Connect, Azure Express Route, and transit gateways.
• Serve as the primary engineer for Palo Alto Networks firewalls (physical appliances and virtual VM‑Series).
• Design and enforce robust security policies, URL filtering, Threat Prevention, SSL decryption, and Wild Fire malware analysis.
• Configure and maintain secure remote access solutions, including Global Protect VPN and site‑to‑site IPsec VPNs.
• Manage firewall orchestration and centralized policy deployment via Palo Alto Panorama.
• Lead complex network engineering projects from conception through to execution.

• 7+ years of progressive experience in network engineering and infrastructure design.
• 3+ years in a lead or senior technical capacity.
• Proven track record of designing and deploying enterprise‑grade Palo Alto Firewalls in high‑availability environments.
• Hands‑on experience architecting network networking components within AWS, Azure, or GCP.

• Routing/Switching: BGP, OSPF, EVPN/VXLAN, Cisco/Arista hardware, SD‑WAN architectures.
• Security:
  Palo Alto NGFW, Panorama, Prisma Access, Zone‑based firewalls, IDS/IPS, NAT, and Zero Trust Architecture.
• Automation:
  Scripting with Python, Ansible, or Terraform for network orchestration.