Network Engineering M

Senior L3 Network Engineer
Client is seeking a Senior L3 Network Engineer to provide advanced engineering, solution design, and operational support across enterprise, data center, cloud, WAN, manufacturing, and Operational Technology network environments. This role requires deep networking expertise, hands-on microsegmentation and OT experience, BGP routing, and network automation using Terraform and Ansible.
Core Responsibilities

Gather detailed project requirements and design, develop, and implement network solutions.
Provide L3 engineering and support across enterprise, data center, cloud, WAN, manufacturing, and OT network environments.
Design, deploy, and maintain Cisco routing and switching infrastructure.
Configure and support BGP, OSPF, EIGRP, MPLS, route redistribution, VLANs, STP, EtherChannel, HSRP, and QoS.
Implement network microsegmentation, Zero Trust architecture, and IT/OT security controls.
Administer Palo Alto Strata Next-Generation Firewalls, Panorama, GlobalProtect, NAT, and security policies.
Design, deploy, and support Cisco SD-WAN using Viptela and Palo Alto Prisma SD-WAN.
Manage WAN connectivity across MPLS, Internet, DIA, VPN, and hybrid network environments.
Design and support networking across Azure, AWS, and GCP, including ExpressRoute, Direct Connect, Cloud VPN, Transit Gateway, and Virtual WAN.
Support manufacturing and OT networks, including environments with SCADA, PLC, HMI, MES, and industrial systems.
Develop and maintain network automation using Terraform, Ansible, Python, and infrastructure-as-code practices.
Perform root-cause analysis, problem management, and major incident resolution for network outages.
Monitor network performance, security, and availability; create technical documentation; and support network modernization initiatives.
Essential Qualifications, Skills, and Technologies

• 10+ years of enterprise network engineering experience.
• Experience gathering detailed requirements and designing network solutions.
• Strong L3 routing and switching background, including hands-on BGP experience.
• Hands-on network microsegmentation experience, including Cisco Client, Security Group Tags, PVLANs, or related segmentation controls.
• Operational Technology networking experience supporting environments with PLCs, HMIs, SCADA, MES, or industrial systems.
• Hands-on Terraform and Ansible experience for network automation; exposure alone is not sufficient.
• Strong Cisco routing and switching experience with Catalyst, Nexus, ISR, and ASR platforms.
• Hands-on Palo Alto experience with Strata, Panorama, GlobalProtect, NAT, and security policies.
• Experience with Cisco SD-WAN using Viptela and Palo Alto Prisma SD-WAN.
• Cloud networking experience across Azure, AWS, and GCP.
• Experience with Zero Trust, network security, and IT/OT segmentation.
• Experience with Wireshark, SolarWinds, ThousandEyes, and Splunk.

Preferred Skills or Experience

CCNP certification.
PCNSE certification.
VMware vSAN project experience.
Work Details

• 12-month assignment.
• Hybrid role in Durham, North Carolina.
• Onsite at least 3 days per week.
• No travel required.

Nesco Resource offers a comprehensive benefits package for our associates, which includes a MEC (Minimum Essential Coverage) plan that encompasses Medical, Vision, Dental, 401K, and EAP (Employee Assistance Program) services. Nesco Resource provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.