Senior Network Engineer
Job Description
Job Description
ABOUT THE ROLE
We are looking for a mid-level Network Engineer to join a lean, high-output team and take real ownership of our core network infrastructure. This role exists to backfill a critical position. You will inherit a live environment with production responsibilities from day one. You will own and operate our core switching infrastructure, deliver network projects for customers, and extend capabilities into cloud networking across Azure and AWS. If you are someone who wants to be the person others call when things break, and who can also plan and execute complex network projects, this role is built for you.
WHAT YOU'LL DO
- Own and operate core switching infrastructure, including configuration, maintenance, and performance tuning of Juniper and related platforms
- Manage and support the CATO Networks SASE platform, covering policy management, site onboarding, and troubleshooting
- Design, implement, and deliver customer-facing network projects from scoping through production handoff
- Configure and manage cloud networking in Microsoft Azure (VNets, ExpressRoute, NSGs, Azure Firewall) and AWS (VPC, Transit Gateway, Direct Connect)
- Troubleshoot and resolve complex layer 2 and layer 3 network issues independently and under pressure
- Manage routing protocols in production, including BGP, OSPF, and static routing across on-premises and hybrid environments
- Configure and maintain network security controls, including firewalls, ACLs, VPNs (IPSec/SSL), and segmentation policies
- Monitor network health and performance; proactively identify and address degradation before it becomes an incident
- Produce and maintain accurate network diagrams, runbooks, and project documentation
- Participate in on-call rotation and serve as an escalation point for network-related incidents
REQUIRED QUALIFICATIONS
- 3–5 years of hands-on network engineering experience in a production environment
- Direct, hands-on experience with Juniper switches and routers, including JunOS CLI, configuration, and troubleshooting
- Hands-on experience with the CATO Networks SASE platform, including site configuration, policy management, and troubleshooting
- Strong layer 2 and layer 3 fundamentals: VLANs, STP, LACP, BGP, OSPF, and inter-VLAN routing
- Working experience with Microsoft Azure networking, including VNets, VPN Gateway, NSGs, peering, and hybrid connectivity
- Working experience with AWS networking, including VPC design, subnetting, security groups, Transit Gateway, and routing
- Experience with network security: firewall policy, VPN (IPSec/SSL), ACLs, and segmentation
- Proven ability to manage and deliver network projects with multiple stakeholders and competing priorities
- Must be legally authorized to work in the United States. H-1B visa sponsorship is not available for this position
- Must be able to work fully on-site. Remote work is not available for this role
NICE TO HAVE
- Certifications: Juniper JNCIA/JNCIS, Cisco CCNA/CCNP, Microsoft AZ-700, AWS Advanced Networking Specialty, or CATO Networks certified
- Experience with SD-WAN platforms beyond CATO (Meraki, VeloCloud, Fortinet)
- Scripting or automation experience using Python, Ansible, or Terraform for network configuration and provisioning
- Familiarity with network monitoring platforms (SolarWinds, PRTG, Zabbix, or similar)
- Experience with wireless networking such as Mist, Meraki, or Aruba
- Exposure to Zero Trust network architecture or SASE design principles beyond CATO
Work Authorization Notice
This position requires full-time, on-site presence. Candidates must be authorized to work in the United States. We do not offer H-1B visa sponsorship, transfer, or any other visa sponsorship for this role, now or in the future.