Lead Network Engineer

Network Engineering, Sr Staff

The Engineering Excellence Group drives innovation velocity and enterprise infrastructure automation, which are critical elements of our growth and scaling strategy. This team is chartered to drive significant productivity, robustness, agility, and time-to-market advantage in the creation of Synopsys products and solutions. The group also leads corporate infrastructure transformation as we continue to drive IT operations leadership and invest in the next wave of disruptive technologies.

Key Roles & Responsibilities:

- Create architectural approaches for Enterprise Network design and implementation.
- Provide architectural governance and oversight over MSP supplied solutions.
- Provide thought leadership, strategy, and lead innovation by exploring, investigating, recommending, benchmarking, and implementing technologies for SDN and service orchestration.
- Network Engineering, Sr Staff will provide in-depth Network & Security Operations subject matter expertise and guidance to executive management as well as other stakeholders responsible for the positioning, planning, and delivery of Network services.
- Collaborate with cross-functional teams to identify and resolve complex technical issues, ensuring timely resolution and minimal disruption to business operations.
- Liaise with various vendors and suppliers to improve and optimize existing Network Services.
- Provide technological vision and strategy for Network transformation. Responsible for complex Network design and changes within a global enterprise network.
- Lead the architecture discussions to work through risk, security, capacity, and performance concerns.
- Maintain vulnerability management processes and policies using a risk-based priority methodology.
- Identify and implement opportunities for process automation and improvement.
- Aid with change management process such as impact analysis, risk assessment, change plan, test plan, monitoring (pre and post change) and user communications

Required Skills

- Demonstrated experience and success with completion of risk assessments and vulnerability assessments, Vulnerability Management Scanning Tools (e.g., Qualys, Rapid7, Tenable, Wiz, etc.)
- Expertise in Enterprise Network Architecture Designs and Security Implementations.
- Enterprise security knowledge and skills: Internet/DMZ/Internal Firewalls, Identity Access Management (IAM), Risk Management, Security Information Event Management (SIEM), and Web Proxy Services.
- Hands-on experience with various areas of network security, such as NGFWs, IDS/IPS, SSE/SASE, SWG, ZTNA.
- Management and patching experience with DataCenter network technologies such as Cisco ACI, Whitebox Switching with SONiC OS, BeyondEdge orchestrator, Cisco Nexus Platforms (9K, 5K, 2K).
- Administration of campus infrastructure: Cisco Catalyst and Aruba OS Switching, Aruba Wireless Controllers, APs, Versa Networks SD-WAN appliances
- General understanding of cloud architectures such as AWS, Azure, GCP, IBM cloud etc.
- Cloud connectivity solutions: Direct Connect, Express route, IPSec Tunnels, VPC Peering
- Strong knowledge of routing protocols and failover scenarios. BGP, OSPF are a must.
- Network device configuration and infrastructure automation skills using tools such as Python, Ansible, etc.

Experience & Education

- Bachelor's degree in information technology, computer science, or related fields.
- 12+ years of relevant experience in design & implementation of LAN / WAN, Firewalls, Load balancers, Wireless Network Infrastructure and large-scale network migrations including Data Centres.
- Proficiency with the design, implementation, and configuration of Cisco, Palo Alto, and Cloud networking & security solutions (e.g., NGFW / SSE / SASE).
- Expertise in Design & Implementation of Cisco ACI, SONiC OS and SD WAN solutions.
- Expert level knowledge of Layer-2 and Layer 3 network technologies; highly proficient and hands on experience in the inter-networking technologies i.e., IGP (OSPF), BGP, VXLAN.
- Proven working experience with Next-Generation Firewalls (i.e., Palo Alto firewalls), IPS/IDS.
- Proven experience with network management and monitoring systems.
- Experience with Cloud Networking technologies (i.e., MS Azure, AWS, Google Cloud Platform).
- Ability to Strategize and Simplify Network Services landscape with focus on continuous improvement of service and enhancing user experience.
- Demonstrated ability to partner with business stakeholders and navigate across conflicting priorities to balance critical tactical and strategic needs.
- Self-directed, self-motivated, and driven who can fill in the gaps as to what is needed, and to drive expected results.
- Professional certifications (Palo Alto or Zscaler or Cisco) required; CCIE (Enterprise Infrastructure) preferred.

Inclusion and Diversity are important to us. Synopsys considers all applicants for employment without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, military veteran status, or disability.

---