Network Engineer

We are seeking an experienced Network Engineer to support, maintain, and improve our enterprise network infrastructure across the United States and our global operations.

This is a technical role responsible for network security, connectivity, cloud networking, firewalls, routing, switching, and remote access. The ideal candidate has strong experience with Cisco networking, Cisco Firepower firewalls, Netskope, Microsoft Azure networking, and enterprise virtual private network (VPN) technologies.

The Network Engineer will work closely with our global infrastructure, security, cloud, and operations teams to maintain reliable network services, implement security controls, troubleshoot complex issues, and support our ongoing network modernization initiatives.

• Configure, maintain, and troubleshoot enterprise Cisco routers, switches, and network infrastructure.
• Support local area networks (LAN), wide area networks (WAN), virtual local area networks (VLAN), and wireless connectivity.
• Manage routing protocols, including Border Gateway Protocol (BGP), Open Shortest Path First (OSPF), and static routing.
• Maintain network performance, availability, capacity, and redundancy across corporate offices, data centers, and distribution facilities.
• Troubleshoot complex connectivity, latency, routing, Domain Name System (DNS), and network performance issues.
• Support network upgrades, equipment replacements, firmware updates, and lifecycle management.
• Maintain accurate network diagrams, configurations, documentation, and operational runbooks.

• Administer and troubleshoot Cisco Firepower Threat Defense (FTD) firewalls and Cisco Firewall Management Center (FMC).
• Manage firewall policies, access control lists, network address translation (NAT), security zones, and intrusion prevention capabilities.
• Implement and maintain network segmentation using firewall-enforced security boundaries and least-privilege access.
• Review and optimize firewall rules, eliminate unnecessary access, and support regular rule recertification.
• Support Palo Alto Networks firewalls and other security technologies used across our global infrastructure.
• Work with the Security team to investigate network threats, suspicious traffic, and security incidents.
• Support firewall logging, monitoring, and integration with security information and event management (SIEM) platforms.
• Ensure network configurations comply with corporate security standards and change management requirements.

• Administer and support Netskope Security Service Edge (SSE) and Zero Trust Network Access (ZTNA) solutions.
• Configure private application access, access policies, user connectivity, and secure remote access.
• Troubleshoot Netskope client connectivity, application access, routing, and performance issues.
• Support Netskope deployment, configuration, and operational management across global locations.

Maintain site-to-site and remote access VPN connections, including Internet Protocol Security (IPsec) and Secure Sockets Layer (SSL)/Transport Layer Security (TLS) VPN technologies.

Support migration from traditional VPN access to Zero Trust access models.

Work with identity and security teams to integrate access controls with Microsoft Entra  Okta.

• Configure and support Microsoft Azure networking services, including virtual networks (VNets), subnets, network security groups (NSGs), and route tables.
• Manage Azure VPN Gateway, private endpoints, DNS, and hybrid connectivity between Azure and on-premises environments.
• Troubleshoot Azure network routing, connectivity, firewall rules, and application access.
• Support Azure Firewall, load balancing, and other cloud networking services where deployed.
• Work with cloud and infrastructure teams to implement secure network architectures and…