Principal Network Engineer

Key responsibilities :

- Responsible for the implementation, testing and training of new projects and initiatives.

- Performs the analysis, design, and development of new LAN/WAN initiatives.

- Responsible for integrating business systems within the corporate information technology environment.

- Develops business cases for request for new or additional hardware or software.

- Coordinates with Management and Technology Managers/Engineers to resolve issues relating to LAN/WAN.

- Conducts training and mentoring sessions. Provides the highest level of support to the technical operations groups and junior level engineers.

- Acts as a liaison with vendors and third-party providers.

- Responsible for creating and maintaining documentation for all assigned Enterprise network designs.

- Capable of project managing complex technical projects and communicating status to Customers.

- Flexible person with the ability to manage stressful situations and adapt to rapidly changing environments and requirements.

- Ability to thrive in a fast paced, multi-cultural, customer-oriented environment.

- Ability to workdays, evenings, and weekends as required; 24x7 support.

- Exceptional documentation and communication skills.

- Team motivated, especially when implementing new solutions and troubleshooting issues - the entire team must be able to work with other groups (network, telecom, systems) to build an environment or resolve an issue.

- Ability to communicate and interact with a variety of people at different levels (must have strong "people skills" to communicate basic non-technical concepts with end users, technical skills to communicate with engineering team, etc.)

- Other duties as assigned by management.

- Design, configure, and maintain network infrastructure using network automation tools.

- Have a passion to find out network operations use cases and automate them using tools such as Ansible and Python.

Core Networking Requirements :

- In-depth knowledge and implementation skills of Cisco's ACI, Switching, Routing and Security products.

- Well versed in SDWAN Technology; in particular SD-WAN Manager (formerly vManage) & Cisco SD-WAN (formally Viptela).

- In-depth knowledge of Voice Over IP; experience with Cisco and Avaya VOIP Products and or VoIP standard protocols ie SIP, H323 etc.

- In-depth knowledge of IP Routing, Quality of Service technologies with demonstrated implementation in a large enterprise organization.

- Cloud networking experience strongly desired. Practical experience with AWS and/or GCP and/or Azure

- Knowledge of Infrastructure as Code technology to include common scripting languages.

- Knowledgeable in Packet capture and packet analysis.

- Highly knowledgeable in Dynamic routing protocols such as OSPF, BGP, EIGRP etc.

- Ability to effectively troubleshoot complex IP networks that support voice, data and possibly video.

- In-depth knowledge of F5 BIG-IP with implementation experience in a large enterprise organization or equivalent Load Balancing schemas.

- Knowledgeable in UCS/VDI data center environments.

- Familiarization in VPN/IPSEC tunnels and NAT protocols.

- Ability to effectively communicate with internal Operations groups, company clients and or vendors.

- Highly knowledgeable in IP Management for Enterprise systems.

- Knowledgeable in WiFi design components and WiFi implementations.

- Expert knowledge of LAN/WAN systems, networks, and Layer 4-8 applications

- As in a computer-related field, Vendor certification classes, or equivalent experience with aptitude for certification in network administration (CCNA a start, CCNP desirable and CCIE Certification a plus).

- Develop new ideas and technical procedures to increase automation, improve operational efficiency with network focused tooling and enhance workflow to minimize and/or eliminate manual CLI processes.

- Possess automation tool abilities using such tools as Python, Ansible playbooks, Json, YAML, Jinja2, Netmiko, Paramiko desired.

- Knowledge of Terraform and Kubernetes tools used in application deployment and lifecycle management is a plus.

Network Security Requirements

- Responsible for the design, configuration and installation of our security infrastructure, including firewalls, proxy servers and policies, and virtual private networks (VPN).

- Thorough understanding of the latest technologies, security principles, and protocols

- Complete command of dealing with security systems, intrusion detection systems, firewalls, anti-virus software, log management, authentication systems, content filtering, etc.

- Extremely Strong troubleshooting skills on network and security platforms is a must; ability to triage multiple, concurrent technical issues.

- In-depth knowledge and implementation skills Palo Alto Networks PA-7000 Series, PA-5200 Series, PA-5000 Series, PA-3000 Series, PA-800 Series running PAN OS 8.X Cisco Systems ASA5500 Series running IOS 9.X, and Check Point 12200, 21800 running Gaia R77.30 with plans to migrate to Gaia R80.10

- Practical experience with Palo Alto Prisma strongly desired

- In-depth knowledge and implementation skills of proxy technology to include WCCP, PAC Files, specifically utilizing the Cisco WSA series proxy platform.

- As some Security Engineer desired skills should be around policy, risk, assessments, and recommendations regarding technology in this related field. Course of studies should include CISSP as well as SANS certifications to complement.

General Requirements

- BA/BS degree or equivalent experience

- 10+ years of experience

- Some travel may be required.