We are seeking a highly experienced Senior Network Engineer to design, implement, operate, and support a complex enterprise network environment. This role requires deep expertise in routing, switching, firewalls, SASE, SSE, SD-WAN, VPNs, and internet connectivity, combined with strong troubleshooting skills, automation capabilities, and the ability to contribute to network architecture and long-term strategy. The successful candidate will be a key member of the Network Engineering team and will participate in an on-call rotation (weekly) to support production environments.

What to Expect

Design, deploy, configure, and maintain enterprise-scale network infrastructure across cloud, on-prem, and hybrid environments
Manage and support LAN, WAN, WLAN, and data center networks ensuring high availability, performance, and resiliency
Provision, configure, and troubleshoot internet circuits including DIA, MPLS, VPN, and cloud connectivity
Design and implement SASE (Secure Access Service Edge) solutions, including Zero Trust access and cloud-delivered security controls, to modernize and secure user-to-application connectivity across distributed environments
Implement and support routing protocols (BGP, OSPF, EIGRP), VLANs, STP, VXLAN, and related technologies
Design and manage Check Point firewall policies, NAT, VPNs (site-to-site and remote access), and Maestro hyperscale environments
Lead advanced troubleshooting across layers 1–7 including packet capture and traffic analysis using tools such as Wireshark and tcpdump
Participate in a weekly on-call rotation providing after-hours and weekend support for production environments
Develop and maintain automation solutions using Python, Bash, APIs, and Ansible to improve operational efficiency

What you Bring

8+ years of hands-on experience in enterprise network engineering
Strong expertise with Cisco routers and switches, Arista platforms, and Check Point firewalls including Maestro
Experience designing and implementing Secure Access Service Edge (SASE) architectures, integrating networking and security into a unified cloud-delivered model
Hands-on experience with ZTNA (Zero Trust Network Access), SWG, CASB, and FWaaS components
Proven ability to migrate traditional VPN and perimeter-based architectures to Zero Trust / SASE models
Deep understanding of TCP/IP, routing protocols, and network security principles
Experience supporting 24x7 production environments with on-call rotation
Strong knowledge of ITSM processes and tools such as ServiceNow
Hands-on experience with automation, scripting, and Infrastructure as Code
Experience with cloud networking across AWS, Azure, and GCP
Relevant certifications such as CCNP, CCIE, or Check Point CCSA/CCSE are considered an asset

Salary Range: $69,500-$119,500