Network Engineer IV - US

Responsible for the design, architecture, engineering, implementation, and support of the Enterprise and multi datacenter network environment, spanning routing, switching, campus fabric, and network security. Acts as a senior technical resource for troubleshooting and architecting complex network solutions and may serve as a project lead or mentor for other engineers on the team.

Location: Remote - Work from Home. Pacific Northwest-based preferred but not required. Periodic travel to the Seattle, WA metropolitan area required, up to 10%.

Key Responsibilities

-
Designs and architects scalable, resilient network solutions across routing, switching, fabric, and security domains

-
Leads complex troubleshooting efforts, including routing protocol issues, fabric/switching connectivity, and firewall policy conflicts

-
Architects and maintains Cisco ACI fabric environments, including tenant design, endpoint groups, contracts, and fabric integration

-
Architects and maintains Cisco SD-Access (SDA) fabric environments, including underlay/overlay design, fabric edge/border/control-plane nodes, and DNA Center-based policy and segmentation

-
Designs, configures, and troubleshoots BGP and OSPF routing environments, including route redistribution, policy control, and multi-site architectures

-
Architects highly available switching infrastructure across Nexus, ACI, and SD-Access fabric environments, including VXLAN/EVPN-based segmentation and fabric-based redundancy to eliminate single points of failure

-
Configures, maintains, and troubleshoots Palo Alto Networks firewalls, including security policy design, NAT, VPN, and threat prevention

-
Designs and manages network access control (NAC) policies and device compliance using Forescout or Aruba Clearpass.

-
Serves as an escalation point for high-level, service-impacting network issues

-
Identifies, reviews, and recommends security postures to peers and appropriate security teams

-
Researches, evaluates, and recommends hardware, software, and vendor solutions based on cost, performance, and business need

-
Leads implementation planning prior to installation of network hardware such as routers, firewalls, wireless controllers, and switches

-
Develops project plans and task lists for network initiatives, and participates in peer design reviews

-
Partners with vendors and third-party providers to evaluate and integrate new equipment and services

-
Creates and maintains technical documentation, network diagrams, and standard operating procedures

-
Mentors and provides technical guidance to less experienced engineers

-
Participates in on-call support rotation per team design

-
Architects and implements automation and infrastructure-as-code pipelines (Python, Ansible) to drive configuration consistency, enforce compliance, and accelerate policy deployment across the enterprise network and security fabric

Knowledge

-
Advanced knowledge of the design, configuration, installation, maintenance, and upgrade of enterprise network environments

-
Advanced knowledge of TCP/IP, OSI model, and switching technologies

-
Advanced knowledge of BGP and OSPF design, troubleshooting, and optimization

-
Advanced knowledge of Cisco ACI architecture and data center fabric design

-
Advanced knowledge of Cisco SD-Access architecture and campus fabric design

-
Strong knowledge of network security architecture, including Palo Alto Networks firewall policy design and segmentation strategies

-
Strong knowledge of network access control (NAC) concepts and enforcement using Forescout

-
Working knowledge of equipment from multiple vendors, such as Cisco, Juniper, Palo Alto Networks, and Brocade

Skills

- Network Architecture & Design

-
Network Automation & Infrastructure-as-Code (Python, Ansible)

-
Complex Troubleshooting & Root Cause Analysis

- Network Rack & Patch-Panel Design

- Network Service Monitoring Systems

-
Technical Documentation & Network Diagramming