Senior Network Engineer

About the Role

We are partnering with a leading organization in Bethpage, NY, seeking an experienced, highly hands-on Senior Network Engineer to support enterprise network infrastructure initiatives across campus, data center, and IT/OT environments. This position requires an engineer who can independently own network projects from start to finish, including requirements gathering, solution design, implementation, testing, troubleshooting, and documentation. The ideal candidate combines advanced Cisco routing and switching expertise with strong firewall administration, BGP traffic engineering, data center networking, and physical infrastructure experience. This is not a position focused solely on network monitoring, operational support, or high-level architecture. We need someone comfortable developing a technical approach, making decisions, coordinating resources, and personally executing the work. The engineer will work across multiple infrastructure projects and must be comfortable operating independently with minimal supervision.

Responsibilities

• Key Responsibilities
• End-to-End Network Project Delivery
• Independently manage assigned network infrastructure projects from requirements gathering through implementation and completion.
• Evaluate existing network designs, recommend improvements, and develop technical solutions based on business and operational requirements.
• Perform hands-on configuration, deployment, testing, troubleshooting, and validation of network infrastructure.
• Coordinate with internal teams, vendors, telecommunications providers, and project stakeholders.
• Manage network migrations, upgrades, maintenance activities, and production changes.
• Maintain accurate network diagrams, configuration documentation, and implementation procedures.
• Cisco Routing, Switching & Advanced Networking
• Configure, administer, and troubleshoot enterprise Cisco routing and switching infrastructure.
• Support advanced routing protocols, including BGP, OSPF, and related Layer 2/Layer 3 technologies.
• Perform BGP traffic engineering, including inbound and outbound traffic optimization across multiple ISP or partner connections.
• Demonstrate practical knowledge of BGP attributes and routing policies, including AS-path prepending, MED, communities, and local preference.
• Configure and troubleshoot spanning tree technologies, including BPDU Guard, Root Guard, and related network protection mechanisms.
• Support network resiliency, redundancy, failover, and performance optimization.
• Firewall Administration & Network Security
• Perform hands-on firewall administration across enterprise security platforms such as Palo Alto, Cisco ASA/Firepower, or Check Point.
• Create, modify, troubleshoot, and validate firewall security rules, access policies, and ACLs.
• Configure and troubleshoot site-to-site IPsec VPN connections with external partners and remote locations.
• Perform firewall upgrades, migrations, and security infrastructure changes.
• Troubleshoot network connectivity and security issues across multiple layers of the network.
• Data Center & Enterprise Infrastructure
• Configure and support Cisco Nexus switching infrastructure in enterprise data center environments.
• Troubleshoot Nexus vPC configurations, including peer links, keepalive connections, and redundancy.
• Support modern data center networking technologies such as Cisco ACI and VXLAN.
• Participate in campus network, data center, and IT/OT infrastructure deployments.
• Support Cisco ISE and network access control technologies, including endpoint profiling, policy enforcement, and TrustSec where applicable.
• Physical Infrastructure & Connectivity
• Perform hands-on network equipment installation, rack-and-stack activities, and physical connectivity troubleshooting.
• Support structured cabling requirements, cabling design, and installation coordination.
• Work directly with telecommunications providers to order, provision, test, and turn up network circuits.
• Coordinate hardware installations, equipment replacements, and infrastructure upgrades.
• Troubleshoot issues across Layers 1 through 4, including physical connectivity, switching, routing, and transport protocols.
• Additional Network Technologies
• Depending on project requirements, the engineer may also support:
• SD-WAN and SASE technologies
• Cisco DNA Center and Software-Defined Access (SD-Access)
• F5 load balancing technologies
• Enterprise wireless infrastructure
• Cisco VoIP and video conferencing environments
• Network automation and infrastructure modernization initiatives

Qualifications

• Required Qualifications
• Extensive hands-on experience supporting complex enterprise network environments, preferably in a senior-level engineering capacity.
• Demonstrated ability to independently deliver network infrastructure projects with limited oversight.
• Advanced experience configuring and troubleshooting Cisco routers and switches, including Catalyst and Nexus platforms.
• Strong knowledge of BGP, OSPF, spanning tree, VLANs, and enterprise routing and switching technologies.
• Practical experience with BGP traffic engineering, including influencing inbound traffic across multiple connections.
• Strong, direct firewall administration experience, including firewall rule changes, site-to-site VPN configuration, troubleshooting, and upgrades.
• Experience with enterprise firewall platforms such as Palo Alto, Cisco ASA/Firepower, or Check Point.
• Hands-on data center networking experience, including Cisco Nexus and vPC.
• Experience supporting physical network infrastructure, including cabling, equipment installations, and circuit provisioning.
• Strong troubleshooting skills across Layers 1–4.
• Ability to coordinate vendors, communicate technical requirements, and execute changes in production environments.
• Strong documentation, communication, problem-solving, and organizational skills.
• Ability to work onsite in Bethpage, NY, five days per week and support after-hours or weekend implementations when required.

Required Skills

• Extensive hands-on experience supporting complex enterprise network environments, preferably in a senior-level engineering capacity.
• Demonstrated ability to independently deliver network infrastructure projects with limited oversight.
• Advanced experience configuring and troubleshooting Cisco routers and switches, including Catalyst and Nexus platforms.
• Strong knowledge of BGP