Network Services Engineer

Responsibilities Design, deploy, and operate enterprise LAN/WAN infrastructure across retail, corporate, and datacenter environments. Manage and optimize Juniper Mist Wi‑Fi deployments across large‑scale retail locations, including AP provisioning, RF tuning, and policy management via the Mist cloud portal. Support and expand Fortinet SD‑WAN (FortiGate / FortiManager) rollouts, including ZTP, policy configuration, and integration with Zscaler SASE. Administer VMware SD‑WAN (VeloCloud) overlay network: edge configuration, profile management, link QoS, and tunnel health monitoring. Configure and manage Palo Alto Networks firewalls (PA‑5400 series) via Panorama, including policy lifecycle, NAT, URL filtering, GlobalProtect VPN, and security profile management. Support NSX‑T micro‑segmentation initiatives including distributed firewall rules, security groups, and East‑West traffic policy enforcement. Assist with Zerto‑based DR replication and failover testing across Equinix CH3 and DE2 sites. Maintain and troubleshoot routing protocols (BGP, OSPF) across datacenter switching (Nexus 93600/93180) and WAN edge platforms. Participate in a rotating on‑call schedule, including evenings and weekends, to respond to P1/P2 incidents and network outages. Document configurations, runbooks, and architecture decisions in Confluence following established team standards. Contribute to automation and monitoring initiatives using SolarWinds, Dynatrace, and custom tooling. Coordinate with ISPs and managed service vendors for circuit provisioning, troubleshooting, and escalation. Qualifications 15+ years of enterprise network engineering experience in a multi‑site environment. Hands‑on experience with Juniper networking products – Mist Wi‑Fi platform strongly preferred (AP provisioning, Mist AI, WLANs, client troubleshooting). Proficiency with Palo Alto Networks firewalls and Panorama (policy management, NAT, security profiles, GlobalProtect). Experience with SD‑WAN platforms – Fortinet (FortiGate/FMG) and/or VMware VeloCloud. Solid understanding of network segmentation concepts – VLANs, VRFs, micro‑segmentation, Zero Trust principles. Strong working knowledge of BGP, OSPF, and enterprise switching (Cisco Nexus or equivalent). Familiarity with VMware NSX‑T (distributed firewall, logical routing, security groups). Understanding of cloud networking fundamentals (AWS VPC, Azure VNet, or equivalent). Ability and willingness to participate in a 24/7 on‑call rotation. Strong documentation habits – ability to write clear runbooks, change records, and architecture notes. #J-18808-Ljbffr Jobtailor