Senior Network Engineer

Duration: 6+ Months
Location: Houston, TX (Hybrid)

Description:
* Preferred 15 or more years of LAN/WAN, enterprise, and data center network, routing, switching, and wireless experience.
* Minimum 8 years designing, configuring, and maintaining, Palo Alto or Cisco firewall policies, security rules, NAT, VPNs (IPSec/SSL), and application-based filtering
* Security appliance experience integrating firewalls and security solutions with (SIEM, IDPS/IPS, and Threat intelligence), centralized firewall administration and policy orchestration using tools such as Panorama, and conduct rule base and configuration reviews ensuring audit and control compliance.
* Minimum 4 years of cloud network and infrastructure technologies experience
* Experience designing, configuring, and implementing unified communications a plus. VoIP, Telephony on-prem and cloud, conference systems, third-party telephony integration, SIP, and PSTN.
* Preferred certifications or equivalent: Cisco CCNP Enterprise or Security, PCNSE, MS Azure Network, Network +
* In-depth experience designing, implementing, maintaining, and troubleshooting converged global network infrastructure consisting of Cisco IOS, NXOS, 802.1x, BGP, OSPF, EIGRP, MPLS, VPNs, DMVPN, SD-WAN, Access List, LAN, WAN, firewalls, SASE, and wireless.
* Experience configuring and using networking and security tools such as NetBrain, ThousandEyes, SecureCRT, Wireshark, MS Visio, PRTG, Infoblox, IP Fix aggregator, and log collector.
* Experience planning and migrating acquisitions, divestitures, on-premises systems, SaaS, facilities, firewalls, and cloud services.
* Experience diagnosing and resolving network, firewall, application flow, and telecommunication issues, including hardware and software failures, connectivity problems, and performance bottlenecks, using network diagnostic tools and techniques.
* Ability to deliver illustrative design solution documentation that outlines guidance on licensing, physical architecture, logical configuration, checklist application inventory, security policy protection phases, and basic administration, including system configuration baseline and security policy configuration baseline.
* Proven ability to perform network architectural design, modeling, engineering, implementation, migration, technical refresh, upgrades, and lifecycle services for the data center, security systems, and Cloud enterprise network infrastructure.
* Extensive experience supporting network services and products which include, but are not limited to, routers, switches, firewalls, web application firewalls, load balancers, DNS, email gateways, proxy services, VPN, Local Area Network (LAN), Wide Area Network (WAN) and protocols, cryptographic devices, associated device software and firmware, diagnostic tools, and automation systems.
* Experience configuring and deploying TACACS, Cisco DNAC, Cisco Client, Cisco Prime, SD-WAN, load balancer, WAF, Palo Alto Panorama or similar centralized firewall and cloud security management.
* Cisco Routers experience: ISR 4331, 8500, 2911, and 8300.
* Palo Alto firewall deployment and configuration: Palo Alto 3000, 400, Panorama, Layer 7 app control and threat prevention, IP Sec Tunnel, Global Protect, and policy rule template, and template stack.
* Cisco Switches experience: 9300, 9200, 8200,4500, 3850, 2960 series & Cisco Nexus 7k, 5k, and 2k switches.
* Wireless experience: Cisco AP & WLC, Aruba AP & WLC, Meraki AP, Meraki MG cellular wireless
* SD-WAN and SASE experience: Cisco Meraki MX, Palo Alto Prisma SD-WAN, Cisco Secure Access, Secure Connect
* Routing Protocol experience: BGP, OMP, EIGRP, RIP, MP-BGP, VRF, Redistribution, and Static Routing.
* Switching Protocol experience: STP, RSTP, PVSTP, VTP, VPC, ARP, FHRP, HSRP, VRRP, GLBP, VLAN, VXLAN, inter-VLAN routing.
* Supporting features, services, and security experience: IP Subnetting, VLSM, VLAN, DHCP, DNS, NAT, PAT, IP Sec, ACL, VRF, VSS, QoS, VXLAN, SSH, LDAP integrations, DNS Filtering, 802.1x, MAC Authentication, ACLs, and Certificate.
* History of delivering tier 3 and tier 4 support and acting as an escalation point across enterprise and data center networks, telecommunication, and cloud services.
* Delivering configuration and build patterns for TCP/IP networking as well as Cloud Load Balancers, Application gateway, Security Groups, VNETs/Subnets, VPN Gateways, Private links/endpoints, ExpressRoute, Route tables, DNS, traffic manager, and NAT configuration.
* Experience managing, diagnosing, and resolving Internet circuits, WAN, MPLS, point-to-point network, SIP Trunk, and SIP services.
* Familiarity with external and internal audit processes regarding IT designs, services, and configuration changes.
* Proficiency and knowledge of automation tools and scripting languages (e.g., Python, PowerShell/Automate)
* Experience in the regular evaluation of LAN, WLAN, WAN, firewall, security zones, telephony systems, cloud environments, enterprise network, and data center infrastructure performance, ensuring optimal operation by proactively troubleshooting issues and implementing solutions that minimize downtime.