Network Engineering Tech Lead

Network Engineering Tech Lead

Contract / CTH

On-site — Sunnyvale, CA

About this role:

We are seeking a hands-on Network Engineering Technical Lead to take end-to-end ownership of our global corporate network and network security posture. This role requires a CCIE-certified professional with proven expertise in both wired (LAN/WAN) and wireless (Wi-Fi) enterprise networks . The successful candidate will lead architecture, operations, and modernization initiatives, ensuring secure, resilient, and scalable connectivity across multiple sites and cloud environments.

Key Responsibilities

• Global Network Architecture & Operations

  • Design, implement, and maintain enterprise LAN, WAN, and Wi-Fi standards.

  • Oversee dual-ISP redundancy, failover, and site connectivity.

  • Manage firewall estates (Palo Alto, Cisco ASA/Meraki) and Infoblox DDI (DNS, DHCP, IPAM).

• Zero Trust & Secure Remote Access

  • Lead migration to SASE/ZTNA architectures (Zscaler, Prisma Access, or equivalent).

  • Implement Zero Trust access models, app segmentation, and least-privilege policies.

  • Decommission legacy VPNs and enable secure remote access solutions.

• Site & Inter-Office Connectivity

  • Architect secure, performant connectivity between offices, data centers, and cloud environments.

  • Develop repeatable playbooks for rapid office setup and expansion.

• Leadership & Roadmap

  • Serve as the technical authority and escalation point for all network-related matters.

  • Partner with IT and Security leadership to define the multi-year network roadmap.

  • Manage vendor relationships, licensing, renewals, and escalations.

  • Establish monitoring, alerting, and documentation standards for operational transparency.

Required Qualifications

• CCIE Certification (mandatory) - Routing & Switching, Enterprise Infrastructure, or Security.

• 8+ years in network engineering/architecture roles with multi-site enterprise experience.

• Hands-on expertise with Palo Alto firewalls, Cisco Meraki switching/wireless, Infoblox DDI .

• Experience designing or migrating to SASE/ZTNA architectures (Zscaler strongly preferred).

• Strong grasp of routing/switching, VLANs, SD-WAN, DNS/DHCP, NAT, 802.1X/NAC.

• Proven ability to standardize and automate operations across growing infrastructure.

• Experience governing mobile/BYOD access (NAC, MDM integration).

• Comfort operating strategically (roadmap, vendor strategy, budget) while remaining hands-on.

Preferred Skills

• Experience with cloud networking (AWS, Azure, GCP).

• Familiarity with automation tools (Python, Ansible, Terraform).

• Exposure to DevOps environments and CI/CD pipelines for network automation.

• Strong documentation and communication skills for executive and technical audiences.