Network Engineer

Senior L3 Network Engineer

Client is seeking a Senior L3 Network Engineer to provide advanced engineering and support across enterprise, data center, cloud, and manufacturing network environments. This role requires deep Cisco, Palo Alto, SD-WAN, cloud networking, Operational Technology, and network automation expertise.

Core Responsibilities

• Provide L3 support across enterprise, data center, cloud, and manufacturing network environments.
• Design, deploy, and maintain Cisco routing and switching infrastructure.
• Configure and support BGP, OSPF, EIGRP, MPLS, route redistribution, VLANs, STP, EtherChannel, HSRP, and QoS.
• Administer Palo Alto Strata Next-Generation Firewalls, Panorama, GlobalProtect, NAT, and security policies.
• Implement Zero Trust architecture, network segmentation, and IT/OT security controls.
• Design, deploy, and support Cisco SD-WAN using Viptela and Palo Alto Prisma SD-WAN.
• Support compute-area projects, including a VMware vSAN project within the U.S. domestic region.
• Manage WAN connectivity across MPLS, Internet, DIA, VPN, and hybrid network environments.
• Design and support networking across Azure, AWS, and GCP.
• Implement and maintain ExpressRoute, Direct Connect, Cloud VPN, Transit Gateway, and Virtual WAN solutions.
• Support manufacturing and Operational Technology networks, including SCADA, PLC, MES, and industrial systems.
• Perform root-cause analysis, problem management, and major incident resolution for network outages.
• Develop network automation using Terraform, Ansible, Python, and infrastructure-as-code practices.
• Monitor network performance, security, and availability using enterprise monitoring and security tools.
• Create technical documentation, lead network modernization initiatives, and collaborate with security, cloud, and infrastructure teams.

Essential Qualifications, Skills, and Technologies

• 10 years of enterprise network engineering experience.
• Strong Cisco routing and switching experience with Catalyst, Nexus, ISR, and ASR platforms.
• Advanced experience with BGP, OSPF, EIGRP, MPLS, and route redistribution.
• Strong Layer 2 and Layer 3 networking experience, including VLANs, STP, EtherChannel, HSRP, and QoS.
• Hands-on Palo Alto experience with Strata, Panorama, GlobalProtect, NAT, and security policies.
• Experience with Cisco SD-WAN using Viptela and Palo Alto Prisma SD-WAN.
• Cloud networking experience across Azure, AWS, and GCP.
• Experience with network security, Zero Trust, and IT/OT segmentation.
• Manufacturing or Operational Technology networking experience with SCADA, PLC, MES, or industrial systems.
• Network automation experience using Terraform, Ansible, Python, and infrastructure-as-code practices.
• Experience with Wireshark, SolarWinds, ThousandEyes, and Splunk.
• Experience supporting enterprise, data center, WAN, cloud, and manufacturing network environments.

Preferred Skills or Experience

• CCNP certification.
• PCNSE certification.

Work Details

• 12-month assignment.
• Hybrid role in Durham, North Carolina.
• Must be onsite at least 3 days per week.
• No travel required.

Nesco Resource offers a comprehensive benefits package for our associates, which includes a MEC (Minimum Essential Coverage) plan that encompasses Medical, Vision, Dental, 401K, and EAP (Employee Assistance Program) services.

Nesco Resource provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.