Senior L3 Network Engineer

Senior L3 Network Engineer

CTI Staffing is partnering with a leading consumer goods manufacturer to find a Senior L3 Network Engineer for their network security team based in Pleasanton, CA. This team is leading a plant-wide network remediation and OT security initiative, converging IT and industrial network environments while modernizing core routing infrastructure. This is a high-visibility role for someone who wants to own both the network backbone and the industrial security layer protecting it.

What You'll Do:

• Serve as the subject matter expert for BGP routing across data center, WAN, and cloud environments
• Design and enforce Zero Trust microsegmentation across industrial control system environments
• Architect and deploy industrial-grade WiFi networks engineered for high-interference manufacturing environments
• Administer next-generation firewall infrastructure and Zero Trust security policies
• Design and support SD-WAN solutions across hybrid WAN and direct cloud connectivity
• Implement and maintain multi-cloud network architecture across major cloud providers
• Build network automation using infrastructure-as-code tooling
• Lead root cause analysis and resolution for major network incidents

Requirements:

What You Bring:

• Must-Have: 10+ years of enterprise network engineering experience across data center, cloud, and manufacturing/OT environments
• SME-level expertise in BGP routing, including traffic engineering and route redistribution at enterprise scale
• Demonstrated hands-on experience designing and deploying industrial/OT WiFi networks in factory floor settings
• Experience with OT/ICS microsegmentation technologies protecting SCADA/PLC/MES systems
• Deep experience with enterprise-grade routing and switching platforms
• Strong background administering next-generation firewalls and Zero Trust security policies
• Experience designing and deploying SD-WAN solutions
• Native multi-cloud networking experience across major cloud platforms
• Nice-to-Have: Infrastructure-as-code experience (Terraform, Ansible, Python)
• Experience with enterprise network monitoring platforms
• CCNP Enterprise / CCIE (Routing & Switching, Enterprise, or Wireless)
• PCNSE certification
• CWNA or ISA/IEC 62443 Cybersecurity Specialist certification

Technical Environment:

• Cisco Catalyst, Nexus, ISR/ASR routing and switching
• Palo Alto Strata, Panorama, GlobalProtect
• Cisco Viptela and Palo Alto Prisma SD-WAN
• Azure, AWS, GCP
• Terraform, Ansible, Python
• Wireshark, SolarWinds, ThousandEyes, Splunk

What Success Looks Like:

• OT network segmentation implemented and validated within the first 3-6 months
• Industrial WiFi deployment completed with documented RF site survey results
• Stable, well-documented BGP routing posture across WAN and cloud connectivity