Senior Network Engineer
23 days ago
Menlo Park
Job DescriptionOverviewWe are seeking an experienced and highly skilled Senior Network Engineer to join ourTechnical Services team. This role is ideal for a seasoned professional who thrives in ahands-on environment, implementing, maintaining, and optimizing modern networkinfrastructure. You will be responsible for designing and supporting enterprise-grade network and securitysystems, including next-generation firewalls, campus switching, and enterprise wireless. Yourexpertise will help drive reliability, performance, and security through robust design,automation, and disciplined change management. This senior-level position requires deep technical knowledge of networking and networksecurity, particularly in Palo Alto Networks firewalls and Cisco/Meraki wired and wirelessenvironments.Core Tools & Technologies • Vendors/OS: Palo Alto Networks (PAN-OS & Panorama), Cisco (IOS), Meraki, SonicWall (SonicOS, NSM), Ruckus, • Protocols: BGP, STP, LACP, 802.1X (EAP), IPsec/SSL VPN, QoS, DNS/DHCP, NAT, IPv6, LACP/EtherChannel, MC-LAGG/vPC, • Security Features: Malware Prevention, Anti-Spyware, Antivirus, Vulnerability Protection, File Blocking, Data Filtering, DNS Security, DoS/DDoS Protection, Zone Protection, Micro-Segmentation/ACLs, Zero-Trust Networking (ZTNA)Key Responsibilities, • Network Implementation: Configure and deploy LANs, WANs, and wireless networks,, • including switches, firewalls, access points, and supporting hardware/software., • Wireless & Wired Network Management: Oversee the lifecycle of Cisco switching and Meraki wireless infrastructure, including deployment, configuration, tuning, and capacity planning., • Troubleshooting & Performance: Serve as a senior escalation point for all network-related issues. Perform advanced troubleshooting and root cause analysis (RCA) to ensure availability and performance., • Firewall & Network Security: Manage and maintain Palo Alto Networks NGFWs and Panorama. Develop and implement robust security policies, NAT rules, and threat prevention strategies., • Documentation & Collaboration: Maintain comprehensive network documentation and collaborate cross-functionally to deliver projects and resolve issues effectively.Mandatory Qualifications (in order of importance), • Cisco / Meraki Expertise, • Extensive hands-on experience with Cisco IOS and Meraki switches and access points., • Deep experience designing, deploying, and operating Meraki MR wireless solutions, including Dashboard administration, RF optimization, and 802.1X authentication., • Mastery of core network concepts: VLANs, trunking, STP, inter-VLAN routing, LACP/EtherChannel, MC-LAGG/vPC, DHCP Snooping, BPDU Guard., • 7–10+ years of experience configuring and troubleshooting enterprise wired and wireless networks., • Advanced Troubleshooting Skills, • Proven ability to diagnose complex network issues using tools such as Wireshark/TCPDump, ping, and traceroute., • Strong preference for candidates with CCNP- or CCIE-level wireless troubleshooting expertise., • Demonstrated ability to troubleshoot NGFW policy and feature set issues (e.g., URL Filtering, DNS Security, Threat Prevention, Data Filtering, App-ID, User-ID)., • Communication Skills, • Exceptional written and verbal communication skills., • Ability to clearly articulate complex technical concepts to both technical stakeholders (architects, SMEs) and non-technical audiences (executives, directors)., • Palo Alto Networks Expertise, • Proven experience managing, configuring, and troubleshooting Palo Alto NGFWs and Panorama., • Strong knowledge of HA, templates, device groups, and best-practice implementation of full NGFW feature sets., • 3–5+ years of experience configuring and operating Palo Alto Networks NGFWs.Desired Qualifications, • Certifications, • Cisco Certified Network Professional (CCNP), • Palo Alto Networks Certified Network Security Engineer (PCNSE), • Additional Technical Experience, • Familiarity with SonicWall firewalls and/or Ruckus wireless systems., • Strong understanding of BGP, route maps, and redistribution profiles., • Experience with Palo Alto’s Advanced Routing Engine (ARE) and multi–virtual router topologies., • Hands-on experience with 802.1X, RADIUS, PKI, DNS, and related technologies., • Experience with network automation tools such as Ansible, Terraform, Jinja2, and PAN XAPI.Why Join Us, • You’ll be part of a small, high-impact team responsible for mission-critical infrastructure across multiple sites. This role offers the opportunity to work with cutting-edge technologies, shape architectural standards, and contribute to a high-performance, security-focused network environment.This is an exempt role.