Senior Network Specialist

Overview

Responsibilities

• Senior Network Engineer role with strong implementation and operational experience, capable of managing high‑priority incidents and complex network and security architectures.
• Periodic on‑call/standby support outside office hours and on weekends (approximately once per month).
• Design and deliver scalable, secure, and high‑performance network solutions across campus, branch, and cloud environments.
• Lead enterprise wireless design and operations using Aruba and Cisco platforms.
• Design, implement, and support security solutions including next‑generation firewalls, Zero Trust, secure access, DNS, WAFs, load balancers, and proxy solutions.
• Design and support hybrid connectivity between on‑premises networks and Microsoft Azure.
• Act as a Level 3 escalation point, leading root cause analysis and preventive actions.
• Define network standards, documentation, and governance.
• Automate network operations using tools such as Python, APIs, and Ansible (preferred).
• Collaborate with security, cloud, and application teams, mentor junior engineers, and participate in change management, capacity planning, security audits, upgrades, and EoL hardware refreshes.
• Architect and support Azure networking including VNets, subnetting, peering, NSGs, UDRs, Azure Firewall, Application Gateway, VPN Gateway, and ExpressRoute.

Qualifications

• Advanced hands‑on experience with enterprise networking and security technologies.
• Strong expertise in the Aruba wireless ecosystem (Central, CPPM, AirWave, Controllers, IAP), including RF fundamentals and large‑scale enterprise wireless deployments.
• Advanced operational experience with next‑generation firewalls, including FortiGate (advanced features, SD‑WAN, security profiles) and Palo Alto (App‑ID, Threat Prevention, WildFire, Panorama, GlobalProtect, IPSec).
• Strong hands‑on knowledge of F5 architectures, including load balancers, HTTP profiles, LTM policies, SSL, WAF, DDoS protection, brute‑force mitigation, and OWASP Top 10.
• Deep understanding of Zero Trust architecture, network segmentation and micro‑segmentation, and threat detection and mitigation.
• End‑to‑end deployment experience with Zscaler ZIA and ZPA, including traffic forwarding, authentication, and policy control.
• Expert knowledge of Layer 2 / Layer 3 protocols and enterprise network design.
• Strong expertise in Microsoft Azure networking, hybrid architectures, and cloud security/connectivity models.
• Experience with software upgrades and end‑of‑life (EoL) hardware refreshes.
• Knowledge of DNS, SSO, and identity services is a plus.
• Preferred certifications: Aruba ACMP/ACCP/ACDX, Fortinet NSE 4/7, Palo Alto PCNSE, Microsoft AZ‑104/AZ‑700, F5 301/303.