Senior WAN Engineer

Job Title: Senior WAN Engineer

Remote in US - customer is located in LA so must be able to support CST. This will be a remote position even after conversion.

Engagement: 6 Months to Hire

Schedule: Participation in an on-call rotation is required

Target start: Within 30 days of selection About the Opportunity

We are seeking a Senior WAN Engineer to support a global, mission-critical network spanning operational sites, offices, data centers, carrier interconnects, cloud environments, and satellite communications infrastructure. This hands-on role is responsible for building, operating, documenting, troubleshooting, and continuously improving the organization’s wide-area network.

The ideal candidate brings deep production experience with BGP, internet edge routing, SD-WAN/SASE, carrier circuits, and cloud interconnects. This role works closely with network architecture, cybersecurity, telecom services, carriers, and technology leadership to deliver secure, resilient, and high-performing connectivity.

Key Responsibilities

• Configure, maintain, and troubleshoot eBGP and iBGP across internet-edge and carrier interconnect environments.
• Manage route policies, prefix filtering, BGP communities, peering relationships, capacity changes, and failover testing.
• Deploy and support enterprise SD-WAN/SASE sites, including appliances, site configuration, security policies, performance optimization, and user-impact troubleshooting.
• Engineer and operate cloud connectivity through platforms such as Equinix Fabric, AWS Direct Connect, and comparable cloud on-ramps.
• Lead carrier circuit turn-up, acceptance testing, cutovers, outage response, maintenance coordination, and SLA escalation for optical, Ethernet, DIA, and MPLS services.
• Build and support LAN and WAN connectivity for operational sites, data centers, and industrial or operational-technology devices.
• Maintain network monitoring, flow analytics, alerting, dashboards, performance telemetry, and capacity reporting.
• Create and maintain accurate network diagrams, as-built documentation, circuit inventories, IP and BGP records, and operational runbooks.
• Execute production changes through established change-management and audit processes.
• Partner with cybersecurity, telecom services, carriers, and technical leadership on network design reviews, implementations, and incident resolution.

Required Qualifications

• U.S. Person status as defined under ITAR/EAR due to access to export-controlled technical data.
• Active CCNP in Enterprise, Service Provider, or Data Center, or an equivalent professional-level routing and switching certification.
• Seven or more years of hands-on network engineering experience, including at least three years focused on WAN, internet edge, or service-provider connectivity in a production environment.
• Strong production BGP experience, including carrier or internet-exchange peering, route policy, prefix lists, communities, and failover behaviour.
• Hands-on experience deploying and operating SD-WAN platforms. Cato Networks experience is strongly preferred; VeloCloud, Cisco Viptela, Palo Alto Prisma, or Fortinet experience will also be considered.
• Experience turning up and troubleshooting carrier circuits and working directly with carrier network operations centers.
• Working knowledge of cloud interconnect services such as Equinix Fabric, AWS Direct Connect, or equivalent technologies.
• Strong documentation, incident-management, and change-control practices in an audited production environment.

Preferred Qualifications

• CCIE certification or CCNP Service Provider certification.
• Experience supporting satellite communications, telecom, carrier, ISP, or similarly complex infrastructure.
• Hands-on experience with EVPN/VXLAN, Kentik or comparable flow analytics, and Check Point firewalls.
• Python or Ansible experience for network configuration, validation, or automation.
• Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent professional experience.

What Success Looks Like

• Quickly develops ownership of network monitoring, circuit inventory, documentation, and incident response.
• Independently leads site turn-ups, circuit activations, and production changes.
• Maintains accurate BGP, IP, carrier, and as-built records.
• Delivers reliable implementations with strong change-control discipline and minimal operational disruption.
• Why JoinThis opportunity offers the chance to take meaningful ownership of a complex, global network environment while working with modern WAN, SASE, cloud-connectivity, carrier, and automation technologies. The six-month contract period provides both the selected candidate and the employer an opportunity to evaluate long-term fit before conversion.