Senior Network Engineer

Senior Network Engineer

Location: Santa Clara CA (5 days Onsite)

We are looking for a highly skilled Senior Network Engineer to design, implement, and manage our enterprise network infrastructure spanning campus, data center, cloud, and remote access environments. You will be responsible for ensuring high availability, performance, and security across a complex multi-site global network. The ideal candidate brings deep hands-on expertise in wireless networking, routing & switching, firewall security, VPN technologies, and cloud networking — with the ability to lead projects, troubleshoot complex issues, and mentor junior engineers.

Key Responsibilities

• Design, deploy, and manage enterprise wireless infrastructure using Aruba controllers and access points (campus, warehouse, and high-density environments)
• Configure and maintain complex routing protocols including BGP (eBGP/iBGP), OSPF (multi-area), and route redistribution across the enterprise
• Manage Layer 2/Layer 3 switching environments — VLANs, trunking, STP/RSTP/MSTP, port-channels, and access control
• Implement and manage next-generation firewalls including rule creation, NAT, decryption, threat prevention, URL filtering, and security policy lifecycle management
• Design and troubleshoot IPSec VPN tunnels (site-to-site and remote access) and VPN gateways for secure connectivity across hybrid environments
• Architect and manage network infrastructure in Google Cloud Platform (GCP) — VPCs, Cloud Interconnect, Cloud VPN, shared VPCs, firewall rules, and Cloud Router
• Deploy and manage SD-WAN solutions for branch connectivity, traffic steering, application-aware routing, and WAN optimization
• Perform capacity planning, network health monitoring, and proactive performance optimization
• Lead incident response for network outages — root cause analysis, resolution, and post-mortem documentation
• Collaborate with Security, Cloud, and Application teams on network architecture decisions
• Develop and maintain network automation scripts (Python, Ansible, Terraform) for configuration management
• Mentor junior network engineers and contribute to knowledge base documentation

Required Skills & Experience

• Wireless Networking: 5+ years hands-on experience with Aruba wireless — controller-based and Aruba Central (cloud-managed) deployments, RF design, site surveys, 802.11ax/Wi-Fi 6, AP provisioning, and wireless security (WPA3, 802.1X, RADIUS)
• Routing: Expert-level knowledge of BGP (peering, route policies, communities, prefix lists) and OSPF (area design, LSA types, stub areas, route summarization)
• Switching: Advanced L2/L3 switching — STP tuning, VXLAN/EVPN (preferred), 802.1Q, LACP, DHC Prelay, ARP optimization
• Firewall & Security: Solid understanding of next-gen firewall concepts — zone-based policy, App-ID, decryption, threat prevention, and security profiles
• VPN / IPSec: Hands-on with IKEv1/IKEv2, IPSec tunnel and transport mode, GRE over IPSec, certificate-based and PSK authentication, VPN gateway high availability
• Cloud Networking (GCP): Experience with GCP networking — VPC design, Cloud Interconnect/Partner Interconnect, Cloud VPN, Cloud NAT, GCP firewall rules, Private Service Connect
• SD-WAN: Experience deploying and managing SD-WAN solutions (Prisma SD-WAN, Viptela, Velocloud, or equivalent) — hub/spoke, application policies, SLA-based routing
• General: 8+ years in enterprise network engineering across campus, WAN, data center, and cloud environments

Preferred / Nice-to-Have

• Palo Alto Networks firewall experience — PAN-OS, Panorama management, Global Protect VPN, decryption, and security profiles (strong advantage)
• Experience with Prisma Access (SASE) and Prisma SD-WAN
• Certifications: ACMP (Aruba), PCNSE (Palo Alto), CCNP/CCIE, Google Cloud Network Engineer
• Network automation: Python, Ansible, Terraform, REST APIs
• Experience with network monitoring tools (PRTG, Logic Monitor, Thousand Eyes, ADEM)
• Familiarity with Zero Trust Network Architecture (ZTNA) concepts
• Experience managing networks in a global, multi-region environment
• Understanding of DNS, DHCP, NTP, SNMP, syslog, and Netflow at enterprise scale

Technical Competencies

• Aruba Controllers & APs (Wi-Fi 6)
• BGP (eBGP / iBGP)
• OSPF (Multi-Area)
• STP / RSTP / MSTP
• IPSec VPN (IKEv1/v2)
• VPN Gateways (HA)
• Next-Gen Firewalls
• Palo Alto Networks (preferred)
• GCP Cloud Networking
• SD-WAN
• VLAN / Trunking / 802.1Q
• 802.