Network Engineer L3

Position: Network Engineer L3

Location: Muscatine IA 52761 (Onsite)

Hiring: Fulltime Hexaware Technologies

Job Title:

Role Summary:

• Lead L3 escalation, troubleshoot complex network issues, and drive stability across WAN, LAN, DC, wireless, and security domains.
• Design and implement network solutions (including SD-WAN and cloud connectivity), automate routine tasks, and mentor L1/L2 teams.
• Own incident, problem, and change management for critical services, ensuring SLAs and security standards are met.

Key Responsibilities:

• Incident and Problem Management.
• Act as L3 escalation for major incidents; perform deep packet analysis and RCA.
• Reduce repeat incidents through problem management and permanent fixes.
• Design and Delivery.
• Design/implement enterprise network solutions: routing, switching, DC, wireless, SD-WAN, and cloud edge.
• Produce HLD/LLD, diagrams, and implementation plans; execute changes with rollback strategies.
• Operations and Optimization.
• Oversee capacity planning, performance tuning, and resilience improvements.
• Define and maintain standard configurations, golden images, and runbooks.
• Security and Compliance.
• Collaborate on firewall policies, segmentation, NAC, and zero-trust patterns.
• Ensure compliance with audit, regulatory, and internal standards; remediate findings.
• Automation and Tooling.
• Build automation for config, compliance, and validation (e.g., Ansible, Python, Terraform).
• Enhance observability via NMS, NetFlow, syslog, and telemetry dashboards.
• Stakeholder and Vendor Management.
• Engage vendors/TAC for complex cases; manage RMAs and advisory notices.
• Communicate effectively with customers and leadership on incidents and projects.
• Mentor L1/L2 engineers; conduct knowledge transfer and develop skill matrices.
• Contribute to standards, best practices, and continuous improvement initiatives.

Core Technical Skills:

• Routing and Switching
• BGP, OSPF, EIGRP, HSRP/VRRP, STP/RSTP/MST, VXLAN/EVPN, QoS, Multicast.
• Platforms: Cisco Catalyst/Nexus, Aruba/HP, Juniper EX/QFX.
• WAN and SD-WAN
• MPLS, DMVPN, IPSec; SD-WAN (Cisco Viptela/Meraki, Fortinet, Versa, Aruba EdgeConnect).
• Datacenter Networking
• Cisco NX-OS, ACI or equivalent fabric, spine-leaf architectures, load balancing (F5/NGINX).
• Network Security
• Firewalls (Palo Alto, Fortinet, Cisco ASA/FTD), site-to-site VPNs, segmentation, NAT.
• NAC/802.1X (Cisco ISE/Aruba ClearPass), URL filtering, IPS/IDS basics.
• Wireless
• Enterprise WLAN design and operations, controllers, RF fundamentals, WPA2/3, 802.11 standards.
• Cloud Networking
• AWS Transit Gateway, VPC/VPN/Direct Connect; Azure vWAN/VNet/ExpressRoute; Google Cloud Platform VPC/Cloud Router.
• Automation and Scripting
• Ansible, Terraform, Python (Netmiko/NAPALM/Paramiko), Git-based workflows, CI/CD basics.
• Monitoring and Tooling
• NMS: SolarWinds/LogicMonitor, NetBrain, NetBox/IPAM, Splunk/ELK, Wireshark, Cisco DNA Center/Prime, SD-WAN controllers, Panorama/FortiManager, ServiceNow.

Qualifications:

• Education: Bachelor s degree in computer science, Information Technology, Electronics, or equivalent experience.
• Certifications (one or more strongly preferred):
• Cisco CCNP Enterprise/SP; CCIE preferred.
• Juniper JNCIP-ENT/SP; JNCIE a plus.
• Security: PCNSE, Fortinet NSE4+.
• Load Balancing: F5-CA/CTS.
• Cloud: AWS Advanced Networking Specialty, Azure Network Engineer Associate.
• ITIL Foundation or higher.