Senior Network Engineer

Role:
Senior Network Engineer – Enterprise & Data Center Infrastructure
Location:
Palo Alto, CA (Hybrid)
Contract Role

Department:
Global Infrastructure and Platform Services (GIPS)
Role Overview
A leading technology organization is seeking a skilled Senior Network Engineer to design, deploy, and operate enterprise and data center network infrastructure supporting global business operations and production environments.
This role will own the complete lifecycle of corporate and data center networks, including campus LAN, wireless networks, spine-leaf data center fabrics, and next-generation firewall infrastructure. The ideal candidate will drive network reliability, security, scalability, and automation while collaborating closely with Security, IT, Cloud Engineering, Server, Storage, and Platform teams.
The engineer will leverage modern networking technologies and automation tools, including AI-assisted solutions, to improve troubleshooting, documentation, operational efficiency, and network reliability.
Key Responsibilities
Enterprise & Campus Networking

• Design, implement, and maintain corporate LAN infrastructure across headquarters and remote offices.
• Manage access, distribution, and core switching environments.
• Configure and troubleshoot VLANs, STP/RSTP, LACP, QoS, and Layer 2/Layer 3 network designs.
• Manage enterprise wireless networks, including controller-based and cloud-managed solutions.
• Perform wireless site surveys, RF planning, SSID design, and client troubleshooting.
• Administer 802.1X authentication, certificate-based access control, and guest network segmentation.

• Operate and enhance modern data center network architectures, including spine-leaf designs.
• Support BGP routing, VXLAN/EVPN overlays, and high-availability network solutions.
• Ensure network stability, performance, and scalability across production environments.
• Partner with infrastructure teams on server connectivity, rack deployments, service launches, and capacity expansions.

• Manage next-generation firewall platforms, including enterprise firewall appliances and centralized management systems.
• Configure and maintain security policies, NAT, application controls, URL filtering, threat prevention, and security integrations.
• Support secure remote access solutions and enforce network segmentation using Zero Trust principles.
• Conduct firewall policy reviews, cleanup unused rules, and support security audits.

• Monitor network health using SNMP, streaming telemetry, Net Flow/sFlow, and observability platforms.
• Troubleshoot complex production incidents and perform root cause analysis.
• Develop automation workflows using Python, Ansible, and Terraform.
• Improve operational efficiency through configuration management and infrastructure automation.
• Use AI-assisted tools to accelerate troubleshooting, documentation, log analysis, and runbook generation.

• 4–6 years of hands-on enterprise network engineering experience.
• Strong experience with enterprise firewall platforms and centralized firewall management.
• Experience managing security policies, network segmentation, VPN technologies, and access controls.
• Strong understanding of enterprise routing and switching:
  • BGP
  • OSPF
  • VLANs
  • STP/RSTP
  • LACP
  • Layer 2/Layer 3 network design
• Experience supporting enterprise wireless networks (Aruba, Cisco Meraki, or equivalent).
• Knowledge of Wi-Fi 6 / 802.11ax technologies and RF optimization.
• Experience with data center networking:
  • Spine-leaf architecture
  • VXLAN/EVPN
  • High availability designs
• Strong troubleshooting methodology and experience working in production environments.
• Excellent communication skills with the ability to create technical documentation, runbooks, and incident reports.

• Relevant networking certifications such as:
  • PCNSE
  • CCNP Enterprise
  • CWNA/CWSP
• Experience with network automation using Python, Ansible, or Terraform.
• Familiarity with public cloud networking:
  • AWS
  • Azure
  • GCP
• Experience with hybrid connectivity:
  • VPN
  • Direct Connect
  • Express Route
• Exposure to load balancing technologies:
  • F5
  • AVI/NSX ALB
  • NGINX
• Experience with NAC solutions:
  • Cisco Client
  • Aruba Clear Pass
• Comfortable using AI tools for network operations, documentation, and automation.

• Enterprise Network Engineering
• Palo Alto / Next-Generation Firewall Administration
• Firewall Policy Management & VPN
• BGP & OSPF Routing
• VLAN, STP, LACP Switching
• Data Center Networking (Spine-Leaf, VXLAN/EVPN)
• Enterprise Wireless Networking
• Network Security & Segmentation
• Python, Ansible, Terraform Automation
• Network Monitoring & Troubleshooting