Network Engineer

Senior L3 Network EngineerCTI Staffing is partnering with a leading consumer goods manufacturer to find a Senior L3 Network Engineer for their network security team based in Pleasanton, CA. This team is leading a plant-wide network remediation and OT security initiative, converging IT and industrial network environments while modernizing core routing infrastructure. This is a high-visibility role for someone who wants to own both the network backbone and the industrial security layer protecting it.What You'll Do:Serve as the subject matter expert for BGP routing across data center, WAN, and cloud environmentsDesign and enforce Zero Trust microsegmentation across industrial control system environmentsArchitect and deploy industrial-grade WiFi networks engineered for high-interference manufacturing environmentsAdminister next-generation firewall infrastructure and Zero Trust security policiesDesign and support SD-WAN solutions across hybrid WAN and direct cloud connectivityImplement and maintain multi-cloud network architecture across major cloud providersBuild network automation using infrastructure-as-code toolingLead root cause analysis and resolution for major network incidentsRequirements:What You Bring:Must-Have: 10+ years of enterprise network engineering experience across data center, cloud, and manufacturing/OT environmentsSME-level expertise in BGP routing, including traffic engineering and route redistribution at enterprise scaleDemonstrated hands-on experience designing and deploying industrial/OT WiFi networks in factory floor settingsExperience with OT/ICS microsegmentation technologies protecting SCADA/PLC/MES systemsDeep experience with enterprise-grade routing and switching platformsStrong background administering next-generation firewalls and Zero Trust security policiesExperience designing and deploying SD-WAN solutionsNative multi-cloud networking experience across major cloud platformsNice-to-Have: Infrastructure-as-code experience (Terraform, Ansible, Python)Experience with enterprise network monitoring platformsCCNP Enterprise / CCIE (Routing & Switching, Enterprise, or Wireless)PCNSE certificationCWNA or ISA/IEC 62443 Cybersecurity Specialist certificationTechnical Environment:Cisco Catalyst, Nexus, ISR/ASR routing and switchingPalo Alto Strata, Panorama, GlobalProtectCisco Viptela and Palo Alto Prisma SD-WANAzure, AWS, GCPTerraform, Ansible, PythonWireshark, SolarWinds, ThousandEyes, SplunkWhat Success Looks Like:OT network segmentation implemented and validated within the first 3-6 monthsIndustrial WiFi deployment completed with documented RF site survey resultsStable, well-documented BGP routing posture across WAN and cloud connectivity