Senior Network Engineer

DescriptionWe are seeking a Senior L4 Network Engineer / Architect with strong expertise in Cisco SD-WAN architecture, enterprise WAN design, MPLS routing, and fiber-based WAN/LAN integration. This role will be responsible for defining and leading the SD-WAN portion of the solution, including how Cisco SD-WAN will be designed, deployed, integrated, and supported across MPLS, Internet, broadband, LTE/5G, and other WAN transport options.The ideal candidate is a Senior technical leader who understands how to build and operate Cisco SD-WAN environments over complex underlays, including MPLS and carrier Ethernet services. While deep MPLS knowledge is important, this role is not limited to traditional MPLS engineering. The primary need is for someone who can define how the SD-WAN overlay should operate, how it integrates with existing WAN and LAN environments, and how it supports routing, segmentation, performance, resiliency, security, and operational requirements.This person must also understand how WAN services physically enter a site, including carrier handoffs, fiber termination, optics, demarcation points, WAN edge routers, firewalls, and LAN aggregation infrastructure. The role requires hands-on technical depth, architectural judgment, troubleshooting discipline, and the ability to guide engineering teams through complex design, implementation, migration, and escalation scenarios.Key ResponsibilitiesCisco SD-WAN Architecture and Solution Definition· Lead the design and definition of Cisco SD-WAN solutions for enterprise and mission-critical environments.· Develop SD-WAN architectures using MPLS, Internet, broadband, LTE/5G, private-line, and hybrid WAN transport models.· Define how Cisco SD-WAN overlays will operate across existing and future WAN underlays.· Design SD-WAN control, data, and management plane architecture using Cisco SD-WAN components such as vManage, vBond, vSmart, and Cisco WAN Edge routers.· Build and validate SD-WAN policies for application-aware routing, traffic steering, segmentation, path preference, SLA-based forwarding, failover, and resiliency.· Define transport-side and service-side VPN designs, including how WAN edge devices connect into LAN, firewall, data center, and cloud environments.· Lead SD-WAN migration planning from legacy WAN or MPLS-centric environments to modern Cisco SD-WAN architectures.· Establish SD-WAN design standards, implementation templates, validation methods, and operational handoff documentation.Cisco SD-WAN Deployment and Operations· Configure, deploy, troubleshoot, and support Cisco SD-WAN environments using centralized templates, policies, and device-level configurations.· Support Cisco SD-WAN edge platforms, including Cisco Catalyst 8000/8500, ISR, ASR, and other IOS-XE SD-WAN-capable platforms.· Troubleshoot SD-WAN control connections, tunnel formation, BFD behavior, policy application, routing advertisements, NAT traversal, certificate issues, and overlay reachability.· Validate application performance across multiple WAN transports using routing, SLA, QoS, and performance monitoring tools.· Support high-risk SD-WAN cutovers, site migrations, circuit transitions, and production troubleshooting events.· Partner with security, LAN, cloud, voice, application, and carrier teams to ensure SD-WAN designs meet business and technical requirements.WAN, MPLS, and Routing Integration· Design and support WAN environments that include MPLS, carrier Ethernet, Internet, broadband, private fiber, and hybrid transport models.· Understand how Cisco SD-WAN operates over MPLS underlays, including transport VPN design, routing exchange, path selection, QoS treatment, and failover behavior.· Support MPLS-related routing requirements, including L3VPN, L2VPN, VRF segmentation, PE/CE routing, route targets, route distinguishers, and carrier handoff models.· Configure and troubleshoot advanced routing using BGP, OSPF, IS-IS, EIGRP, route redistribution, route filtering, prefix lists, route maps, communities, and routing policies.· Work with carriers and service providers to validate circuit delivery, MPLS routing handoffs, CE/PE demarcation, SLA performance, and escalation of provider-side issues.· Ensure WAN routing designs support SD-WAN overlay requirements, application performance, segmentation, and resiliency objectives.WAN/LAN Edge and Physical Handoff Integration· Define how WAN services terminate into customer environments, including routers, switches, firewalls, optical handoffs, and LAN aggregation points.· Validate WAN/LAN interface designs involving routed handoffs, VLAN tagging, trunking, port channels, VRFs, firewall zones, and segmentation boundaries.· Understand how fiber-based services are delivered into a site, including carrier demarcation, cross-connects, patching, optics, transceivers, and handoff types.· Work with field teams and providers to validate fiber paths, patch schedules, port assignments, light levels, media types, and physical connectivity.· Troubleshoot physical and Layer 1/Layer 2 issues involving fiber, optics, dirty connectors, incorrect transceivers, speed/duplex mismatches, VLAN tagging, port configuration, and cabling errors.· Ensure SD-WAN edge devices are properly integrated with upstream carrier services and downstream LAN, firewall, and data center infrastructure.High Availability, Resiliency, and Performance· Design resilient SD-WAN and WAN architectures using dual circuits, diverse carriers, redundant WAN edge devices, diverse fiber paths, HA designs, and multiple transport types.· Define failover and traffic-steering behavior between MPLS, Internet, broadband, LTE/5G, and private transport options.· Implement and validate QoS strategies across SD-WAN, MPLS, and LAN/WAN handoff points.· Support voice, video, business-critical applications, operational technology, cloud services, and venue-specific traffic requirements.· Validate latency, jitter, packet loss, throughput, convergence, tunnel stability, and application performance across the WAN.· Use Cisco SD-WAN analytics, packet captures, flow data, SNMP/telemetry, ThousandEyes, router diagnostics, provider test results, and optical test data to isolate and resolve issues.Senior L4 Escalation and Technical Leadership· Serve as the Senior escalation point for complex Cisco SD-WAN, WAN routing, MPLS integration, carrier handoff, and WAN/LAN edge issues.· Lead root-cause analysis for high-impact or recurring network incidents.· Provide technical direction to L1–L3 engineers, field teams, project managers, vendors, and client stakeholders.· Review proposed designs and changes for technical accuracy, risk, resiliency, operational impact, and alignment with architecture standards.· Lead technical bridges during major incidents, circuit turn-ups, SD-WAN migrations, maintenance windows, and cutover events.· Communicate clearly with both technical and non-technical audiences, including client leadership and executive stakeholders.Documentation, Standards, and Governance· Produce and maintain high-quality technical documentation, including HLDs, LLDs, SD-WAN design documents, routing diagrams, WAN topology diagrams, IP addressing plans, implementation plans, test plans, and as-built documentation.· Document Cisco SD-WAN policies, templates, device roles, transport mappings, VPN designs, routing behavior, and failover logic.· Document WAN/LAN handoffs, carrier demarcation points, fiber cross-connects, optics, port assignments, circuit IDs, and provider escalation information.· Create repeatable standards for SD-WAN deployment, WAN edge integration, circuit validation, migration planning, and operational readiness.· Support change management, risk reviews, technical governance, and knowledge transfer activities.Required Qualifications· 10+ years of enterprise or service provider network engineering experience, with significant hands-on responsibility for WAN, routing, and production network environments.· Strong hands-on experience designing, deploying, and troubleshooting Cisco SD-WAN solutions.· Strong understanding of Cisco SD-WAN architecture, including overlay/underlay design, vManage, vBond, vSmart, WAN edge routing, templates, policies, and centralized management.· Experience building Cisco SD-WAN solutions over MPLS, Internet, broadband, LTE/5G, and hybrid WAN transports.· Strong routing expertise with BGP, OSPF, IS-IS, EIGRP, route redistribution, route filtering, route maps, prefix lists, communities, and policy-based routing.· Working knowledge of MPLS services, including L3VPN, L2VPN, VRFs, PE/CE routing, QoS, and carrier handoff models.· Hands-on experience with Cisco WAN edge and routing platforms such as Cisco Catalyst 8000/8500, ASR, ISR, or equivalent enterprise/service provider platforms.· Strong understanding of how WAN circuits physically terminate into customer environments, including carrier handoffs, fiber, optics, routers, switches, firewalls, and LAN aggregation devices.· Ability to troubleshoot across multiple layers, including physical fiber, carrier services, routing, SD-WAN overlays, QoS, firewall integration, and application performance.· Experience leading technical cutovers, site migrations, WAN transformations, circuit turn-ups, and high-risk maintenance windows.· Ability to create clear technical documentation, diagrams, implementation plans, validation plans, and operational handoff materials.· Strong communication skills with the ability to explain Cisco SD-WAN, WAN, routing, and fiber concepts to technical teams, project teams, and client stakeholders.Preferred Qualifications· Active or previous CCIE Enterprise Infrastructure, CCIE Service Provider, CCNP Enterprise, or equivalent-level certification.· Advanced experience with Cisco SD-WAN templates, centralized policies, localized policies, segmentation, application-aware routing, and large-scale deployment models.· Experience integrating Cisco SD-WAN with firewalls, SASE platforms, cloud connectivity, data centers, remote sites, and campus LAN environments.· Experience with DWDM, dark fiber, optical transport, optical power budgeting, OTDR testing, fiber route diversity, and carrier Ethernet services.· Experience with monitoring and observability platforms such as ThousandEyes, SolarWinds, LogicMonitor, NetFlow, packet brokers, or similar tools.· Experience with automation tools such as Ansible, Python, REST APIs, Git, or infrastructure-as-code workflows.· Experience supporting mission-critical environments with strict uptime, change control, SLA, and operational readiness requirements.· Experience working directly with carriers, fiber providers, field engineers, construction teams, vendors, and client stakeholders.SkillsNetwork engineeringTop Skills DetailsNetwork engineeringAdditional Skills & QualificationsTechnical SkillsCisco SD-WAN· Cisco SD-WAN architecture and design· vManage, vBond, vSmart, and WAN Edge platforms· SD-WAN templates and centralized policies· Application-aware routing· SLA-based path selection· Transport-side and service-side VPNs· Segmentation and traffic steering· SD-WAN over MPLS, Internet, broadband, and LTE/5G· SD-WAN migration and cutover planning· SD-WAN troubleshooting and operational supportWAN and Routing· Enterprise and hybrid WAN architecture· MPLS L3VPN and L2VPN concepts· BGP, OSPF, IS-IS, EIGRP· VRFs, route targets, route distinguishers· Route redistribution and filtering· QoS and traffic engineering· Dual-carrier and multi-transport WAN designs· Carrier handoff and CE/PE integrationWAN/LAN and Fiber Integration· WAN edge and LAN edge integration· Routed and switched handoffs· VLAN tagging, trunking, and port channels· Firewall and LAN aggregation connectivity· Fiber handoffs and carrier demarcation· SFP/SFP+/QSFP optics· Dark fiber, lit fiber, and carrier Ethernet· Cross-connects, patching, and optical validation· OTDR and light-level test interpretationCisco Platforms· Cisco Catalyst 8000/8500 series· Cisco ISR and ASR platforms· Cisco IOS-XE and IOS-XE SD-WAN· Cisco Catalyst switching· Cisco Nexus experience preferredTools and Operational Practices· Packet capture and protocol analysis· Cisco SD-WAN analytics and diagnostics· Network monitoring and telemetry· ThousandEyes or equivalent performance monitoring· Change management and maintenance-window execution· HLD/LLD/as-built documentation· Implementation, validation, and rollback planning Work Style and Expectations· Operates as L4 engineer and SD-WAN technical authority, noExperience LevelExpert LevelJob Type & LocationThis is a Contract to Hire position based out of Los Angeles, CA.Pay and BenefitsThe pay range for this position is $70.00 - $85.00/hr.Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following:

• Medical, dental & vision
• Critical Illness, Accident, and Hospital
• 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available
• Life Insurance (Voluntary Life & AD&D for the employee and dependents)
• Short and long-term disability
• Health Spending Account (HSA)
• Transportation benefits
• Employee Assistance Program
• Time Off/Leave (PTO, Vacation or Sick Leave)Workplace TypeThis is a fully onsite position in Los Angeles,CA.Application DeadlineThis position is anticipated to close on Aug 20, 2026.About TEKsystemsWe're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company. The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.About TEKsystems and TEKsystems Global Services We’re a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. We’re a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. We’re strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. We’re building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.Job SummaryJob number: JP-006205195Profession: Network Engineer