Senior Network Engineer

The Opportunity

Location:

Remote US/Travel as needed

Reports To:

Director of Infrastructure & Network Security

Job Type: Full-time

Vesta Corporation is seeking a Senior Network Engineer to lead the design, implementation, and ongoing operations of our global enterprise network. This is a senior individual-contributor role that operates at the intersection of complex multi-site networking, hybrid cloud infrastructure, and PCI compliance. The ideal candidate brings 10+ years of hands-on enterprise networking experience, deep familiarity with both commercial and open-source tooling, and the ability to drive infrastructure modernization initiatives with limited oversight.

• Design, implement, and maintain scalable, secure network infrastructure across data centers, remote sites, and cloud environments (AWS and Azure).
• Architect and operate routing and switching infrastructure including BGP, NAT, VLANs, Spanning Tree, IPsec VPNs, P , and HSRP.
• Manage and tune enterprise firewall platforms (Cisco, pf Sense, Check Point) in alignment with PCI DSS segmentation and access control requirements.
• Administer and optimize F5 BIG-IP LTM/GTM for application delivery, load balancing, and traffic steering across production environments.
• Manage Cloudflare DNS, WAF, and network security policies for internet-facing properties.
• Maintain network security policy management via Fire Mon; contribute to access path analysis and rule lifecycle management.
• Evaluate, deploy, and operationalize free open-source software (FOSS) as replacements for commercial products where appropriate (e.g., network monitoring, IPAM, configuration backup).
• Manage Proxmox-based virtualization as it relates to network-adjacent workloads and VM/LXC networking.
• Coordinate with vendors and carriers to manage WAN circuits, resolve outages, and drive cost optimization.
• Maintain comprehensive documentation for network topology, configurations, and operational runbooks; support PCI DSS and SOC 1 Type 2 audit evidence collection.
• Participate in on-call rotation and be available for after-hours work including unscheduled incidents.
• Travel to domestic data center and office locations as needed to support deployments or incidents.

• 10+ years of hands-on enterprise networking experience in large-scale, multi-site environments.
• Expert-level Cisco routing and switching: IOS/NX-OS, BGP, OSPF, EIGRP, VLANs, STP.
• Enterprise firewall administration:
  Cisco ASA/FTD, pf Sense, and Check Point — rule management, segmentation strategy, and change control.
• F5 BIG-IP LTM/GTM: virtual servers, pools, iRules, traffic policies, GTM topology records.
• Cloudflare: DNS management, WAF rulesets, and security policy administration.
• Fire Mon: policy analysis, rule review workflows, access path validation.
• Deep understanding of TCP/IP, DNS, DHCP, routing/switching protocols, and secure remote access.
• Experience operating in PCI DSS‑compliant environments including control implementation and audit evidence collection.
• Strong troubleshooting capabilities with the ability to resolve complex outages under time pressure.

• Proxmox VE: VM/LXC provisioning, cluster management, and software‑defined networking.
• Experience deploying FOSS tools to replace commercial networking or monitoring products (e.g., Oxidized, Net Box, or similar).
• Hybrid cloud networking: AWS Direct Connect, Azure Express Route, site-to-site VPN, cloud-native security groups.
• Zero-trust / overlay VPN concepts and implementation (e.g., Tailscale or equivalent).
• Structured cabling standards, rack design, and power management in physical data center environments.
• Vendor management: circuit provisioning, carrier escalations, hardware lifecycle coordination.

• 10+ years of enterprise networking experience in complex, multi-site or global environments.
• Demonstrated ability to work independently and drive projects to completion without heavy oversight.
• Strong vendor management skills — able to coordinate service delivery and incident resolution with carriers, ISPs, and hardware vendors.
• Proven ability to document infrastructure for audits,…