Principal Cloud Network Engineer

Please email me your resumes @ ()or call me on my cell .

Job Title: Principal Cloud Network Engineer Location: Waltham, MA 3 days in office mandatory. Duration: 6-12 months extendable

Job Description:
This role will have responsibility for providing tier 3/4 support for the global data center network and overall service delivery. Vendor and cloud certifications, strong network (specifically
Data Center/WAN/Cloud WAN and Overlay/Underlay technologies) and cloud experience is a must.

This position s responsibilities include:

Network architecture and design engineering scalable, high-performance, secure, highly available data center-based solutions

12+ or more years of experience in a technical network position supporting networks
6 or more years of experience in a large, global environment is preferred
Must have strong network and cloud operational experience

Education/Certifications:
BS/MS or equivalent work experience
Cisco CCNP or CCIE (Enterprise/Data Center/Security), Cisco DevNet preferred
IaC/Automation certifications: Terraform Associate, Terraform Authoring and Operations Professional, Red Hat Enterprise Ansible certifications, Python PCEP, PCAP, or PCPP
Cloud certifications with networking focus: Azure Network Engineer, Google Cloud Platform Associate/Professional, AWS DevOps Engineer, AWS Advanced Networking Specialty

This position is part of GBS (Global Business Services) IT that provides holistic support for numerous IT domains including Architecture/Engineering, Project Management, LAN, Data Center Hosting (including Cloud Computing). These services are provided in all regions globally including North America, Europe, and Asia Pacific.

This role will play a key role in the architecture, design, project management and operations of the global network of Wolters Kluwer to deliver high quality network performance for its users and applications.

The ideal candidate will have deep expertise in Data Center technologies, Cisco NX-OS, Cisco Firepower, Cisco FMC, Fortinet, Cisco NDFC, Cisco DNA Center, and automation technologies like Ansible, Python, and Terraform. This role requires a strategic thinker with hands-on experience in networking, security, automation, and infrastructure as code (IaC) methodologies.

The role requires expertise and a strong track record of success in managing a hybrid network with data center (primary), campus & cloud-based network technologies, with rapidly increasing emphasis on Cloud based technologies.

This is a highly technical and functional role, combining industry knowledge of best practices in Data Center Networking, Security and cloud technology with leadership & day-to-day management of internal and external staff of Network Engineers across North America, Europe and Asia Pac.

This role requires deep expertise and a track record of success in the operation and support of a global network. This role is responsible for designing, managing, maintaining, troubleshooting, and the global network which could include Data Center/WAN/LAN/and cloud (hybrid and native). All operations and support are handled by this team without escalation to other technology towers. It also requires on call support and occasional travel to data centers and offices for evaluation, analysis, troubleshooting, and remediation activities.

This position will facilitate and support Network/Cloud operations, monitoring, projects, and support a team of network engineers.

Experience with the following network technology domain areas include but not limited to:

Cloud certifications and strong cloud network experience (Azure, Google Cloud Platform, and AWS preferred)
Wide Area Network (WAN) and SDWAN
Disparate transport networks, including Internet, MPLS
Design, implement, and manage route-based and policy-based VPN solutions to ensure secure connectivity across data centers and remote sites

Develop and maintain automation scripts using Ansible, Python, and Terraform to streamline network operations, MACD and infrastructure provisioning, in support of IaC initiatives
Maintain detailed documentation of network architecture, automation workflows, and standard operating procedures
Stay up to date with emerging networking and automation technologies, making recommendations for future improvements
Experience with Equinix services, including Colocation, Network Edge, Equinix Fabric, Equinix FCR, Equinix Portal/Marketplace
Implement IT security best practices, including firewall configurations, network micro/macro segmentation, compliance with regulatory requirements, and with industry standards (such as vendor-validated designs, and adherence to IETF RFC compliance)
Unicast/Anycast/Multicast/Policy-Based routing
Load balancer experience, including Azure LB, Google Cloud Platform CLB, AWS ELB, CloudFlare, F5 BigIP
Expert in problem isolation and identification/troubleshooting
IP Addressing (Schemas, VLANS, DNS, DHCP)
Expert at packet capture technologies (Ethanalyzer, Wireshark, TCPDump), as well as expert ability to read packet captures
Route engineering and performance-based routing
Expert in exterior gateway routing protocols (eBGP/iBGP), including: ECMP, route-filtering/leaking, route-optimization, including well-defined secondary and tertiary pathing.
Expert in interior gateway routing protocols (OSPF), including: ECMP, route-filtering/leaking, route-optimization, including well-defined secondary and tertiary pathing.
Expert in cloud route table optimization and troubleshooting.
AAA (RADILDAP/Kerberos/SAML)
Expert in Cisco ISE/Microsoft NPS
VRF-Lite/FVRF
Overlay/Underlay routing experience, including EVPN VxLAN, L2TPv3, etc
Expert with NDFC (Nexus Dashboard Fabric Controller)
Experience with Cisco iWAN/DMVPN/NHRP
Expert with Cisco DNA Center (including SWIM).
Expert in Automation, including POAP, Terraform, Python, Ansible, etc
Expert in cloud security technologies, including, but not limited to: Network Security Gateways, Security Groups, Fortigate/Fortianalyzer, Host-Based Firewalls, IDS/IPS.
Expert in problem isolation and identification/troubleshooting
SolarWinds, PRTG, SNMPv3, NetFlow/SFlow
Data plane/control plane protection/isolation
Expert with STP and STP optimization (PVST, PVST+,RPVST, MSP, BPDU, etc)
Expert with IEEE 802.3ad Link Aggregation, MC-LAG/VPC
Expert with tagging technologies and encapsulation (802.1q, q-in-q)
Expert with QOS (marking, classification, shaping, policing)
Expert with First-Hop redundancy protocols (VRRP/HSRP/GLBP)

Regards,

Harjeet Singh

Marlabs LLC. | One Corporate Place South | Piscataway, NJ 08854

Tel: X1496 | Mobile: | Fax: |