Overview
Job Details
A financial services client is in the middle of a major modernization push. Implementing new Palo Alto firewalls, Zero Trust architecture, SASE rollout, and the groundwork for a dedicated SOC. They’re looking for a hands-on Network Administrator / Engineer to own the day-to-day health of a Cisco-based network while helping stabilize and harden their new perimeter environment.
This isn’t a “monitor and maintain” job — you’ll be part of a small, collaborative team that designs, implements, and fine-tunes the backbone of a growing financial institution. If you thrive in an environment where you can directly influence infrastructure strategy and see the results of your work across the enterprise, this is it.
Note this is a direct hire (W2 position) working onsite in the valley. We are not engaging third-party vendors for this role. Candidates must apply directly and be able to work on a W2 basis. no C2C, 1099, or third-party representation will be considered. Strong preference will be given to candidates who are already local to the valley.
What You’ll Be Doing
-
Own core network operations — administer and optimize Cisco switching/routing, VLANs, wireless integration (Meraki), and IPAM.
-
Support the Palo Alto environment post-implementation, handling policy updates, routing, and security tuning.
-
Implement best-practice security controls across network infrastructure, incorporating Radius, Cisco ISE, and Zero Trust design principles.
-
Contribute to enterprise projects including SASE/SSE rollout, new circuit and BGP edge configurations, and identity management enhancements.
-
Partner with cross-functional teams (IT Ops, upcoming SOC, vendors) on incident response, continuity testing, and ongoing infrastructure hardening.
Top 3 Must-Haves
-
Strong Network Engineering Core – Strong in routing protocols (OSPF, BGP), VLAN design, packet capture, and switch configuration in Cisco environments.
-
Security-Aware Mindset – Experience supporting or administering firewalls (Palo Alto preferred) with an understanding of Zero Trust, Radius, and SASE concepts.
-
Team-First Mindset & Growth Mentality – Someone who thrives in a collaborative, low-ego culture where sharing knowledge and learning from teammates is the norm. Brings curiosity, humility, and accountability to the table.
Nice-to-Haves
-
Exposure to IPAM tools, Meraki wireless, and Cisco ISE.
-
Familiarity with SIEM/log management platforms and SOC collaboration.
-
Understanding of NIST framework and incident response process.
-
Experience working in regulated industries (banking/credit union/finance).
Why You’ll Love It
-
Stable, growth-oriented organization investing heavily in modern infrastructure.
-
High-impact, highly visible work across networking, security, and IT operations.
-
Collaborative team culture (no silos, no egos).
-
Competitive pay, annual incentive bonus, and robust benefits.
Determining compensation for this role (and others) at Vaco/Highspring depends upon a wide array of factors including but not limited to the individual’s skill sets, experience and training, licensure and certifications, office location and other geographic considerations, as well as other business and organizational needs. With that said, as required by local law in geographies that require salary range disclosure, Vaco/Highspring notes the salary range for the role is noted in this job posting. The individual may also be eligible for discretionary bonuses, and can participate in medical, dental, and vision benefits as well as the company’s 401(k) retirement plan.