Senior L3 Network Engineer

Job Description About This Opportunity CTI Staffing is partnering with a leading consumer goods manufacturer to find a Senior L3 Network Engineer for their network security team based in Pleasanton, CA. This team is leading a plant-wide network remediation and OT security initiative, converging IT and industrial network environments while modernizing core routing infrastructure. This is a high-visibility role for someone who wants to own both the network backbone and the industrial security layer protecting it. What You'll Do Serve as the subject matter expert for BGP routing across data center, WAN, and cloud environments Design and enforce Zero Trust microsegmentation across industrial control system environments Architect and deploy industrial-grade WiFi networks engineered for high-interference manufacturing environments Administer next-generation firewall infrastructure and Zero Trust security policies Design and support SD-WAN solutions across hybrid WAN and direct cloud connectivity Implement and maintain multi-cloud network architecture across major cloud providers Build network automation using infrastructure-as-code tooling Lead root cause analysis and resolution for major network incidents Requirements What You Bring Must-Have: 10+ years of enterprise network engineering experience across data center, cloud, and manufacturing/OT environments SME-level expertise in BGP routing, including traffic engineering and route redistribution at enterprise scale Demonstrated hands-on experience designing and deploying industrial/OT WiFi networks in factory floor settings Experience with OT/ICS microsegmentation technologies protecting SCADA/PLC/MES systems Deep experience with enterprise-grade routing and switching platforms Strong background administering next-generation firewalls and Zero Trust security policies Experience designing and deploying SD-WAN solutions Native multi-cloud networking experience across major cloud platforms Nice-to-Have: Infrastructure-as-code experience (Terraform, Ansible, Python) Experience with enterprise network monitoring platforms CCNP Enterprise / CCIE (Routing & Switching, Enterprise, or Wireless) PCNSE certification CWNA or ISA/IEC 62443 Cybersecurity Specialist certification Technical Environment: Cisco Catalyst, Nexus, ISR/ASR routing and switching Palo Alto Strata, Panorama, GlobalProtect Cisco Viptela and Palo Alto Prisma SD-WAN Azure, AWS, GCP Terraform, Ansible, Python Wireshark, SolarWinds, ThousandEyes, Splunk What Success Looks Like: OT network segmentation implemented and validated within the first 3-6 months Industrial WiFi deployment completed with documented RF site survey results Stable, well-documented BGP routing posture across WAN and cloud connectivity CTI Staffing Inc