Principal Network Engineer

Location & Employment

Location: Tulsa, OK

Onsite: Yes

Hybrid: Yes, Tues/Thurs onsite

Type: Direct Hire

Direct Report: No. Hands‑on engineer but they will lead teams when leading projects and mentor junior team members.

Visa: USC or GC only

Relocation assistance: Available

Certs required: CCNP or CCIE (routing/switch)

• Architectural Design & Implementation:
  Design, configure, and maintain enterprise‑grade network infrastructure (Cisco, Aruba, Meraki, and F5 platforms) across global data centers, cloud environments, and remote operating sites in strict adherence to approved design standards.
• Operational Excellence & Optimization:
  Ensure high availability, redundancy, and performance through proactive capacity planning and monitoring. Oversee complex hybrid WAN architectures, including MPLS, SDWAN, DIA, and LEO Satellite, optimizing traffic flow while maintaining security policies.
• Governance, Security & Compliance:
  Drive network security posture through macro/micro‑segmentation, Zero Trust Network Architecture (ZTNA), and regular compliance audits. Manage incident response protocols and ensure network modifications strictly follow formal IT change management processes.
• Documentation & Standardization:
  Responsible for precise, comprehensive documentation of network topologies, configurations, disaster recovery plans, and Standard Operating Procedures (SOPs). Champion the adoption of best practices and standardization across the networking team.
• Technical Leadership & Mentorship:
  Lead the technical execution of cross‑functional infrastructure projects and data center migrations. Mentor peers and junior engineers, conducting structured technical reviews to ensure architectural integrity and professional development.
• Strategic Evaluation:
  Systematically evaluate emerging technologies, perform risk assessments, understand ROI and fiscal responsibilities, and present formal business cases and solution proposals to IT leadership to improve network scalability and security.

• Experience:
  
  10+ years of progressive enterprise networking experience within highly regulated environments, including at least 10 years serving in a Lead Network Engineer capacity.
• Education &
  
  Certifications:
  
  Active Cisco Certified Network Professional (CCNP) certification is required.
• Routing & Switching Mastery:
  Expert‑level proficiency in Cisco technologies, specifically Cisco ACI. Deep understanding of dynamic routing protocols (BGP, OSPF, EIGRP), route redistribution, policy‑based routing, and BGP peering in hybrid cloud environments.
• SD‑WAN & Wireless: 5+ years of hands‑on operational experience with Aruba and Meraki solutions (including Aruba SD‑WAN and Meraki Wireless). Deep understanding of SDWAN with experience in Juniper SDWAN and Aruba SDWAN a plus.
• Application Delivery:
  Proven expertise in designing, configuring, and operating F5 load balancing platforms.
• Security & Identity Integration:
  Extensive experience with AAA services (RADIUS, TACACS+), Cisco ISE or Azure AD, Internet edge design, BGP multihoming, cloud‑based firewalls, and DDoS mitigation.
• Core Network Services & Connectivity:
  Deep understanding of heavy‑duty Ethernet technologies (1/10/40/100
  
  GbE, VLANs, VXLAN, 802.1Q trunking) and foundational enterprise services including DNS, DHCP, NTP, IPAM platforms (e.g., Infoblox).
• Diagnostic Expertise:
  Advanced proficiency in network packet analysis and performance diagnostics using Wireshark, Live Action, and Cisco Stealthwatch.
• Automation (Preferred):
  Experience applying infrastructure‑as‑code principles and scripting tools (Python, Ansible, Terraform) to standardize deployments and automate routine network operations.
• Zero Trust and Purdue Model:
  In‑depth knowledge of the Purdue model and other Zero Trust best practices.
• Additional Experience (Optional):
  Experience in energy sectors and IT/OT networking; CCIE;
  Degree in MIS, Computer Science, or similar;
  Cloud certifications (Azure, GCP, AWS).

• Analytical Problem Solving:
  Approaches complex network anomalies using a logical, methodical sequence. Identifies root causes accurately and mitigates risks while…