Senior Network & Security Admin – Datacenter & Cloud

Job Title: Senior Network & Security Admin – Datacenter & Cloud

Location: Rosemead CA -Onsite 
Experience Level: Senior (Typically 8–12+ years)

Job Overview

We are seeking a highly skilled Senior Network & Security Admin – Datacenter & Cloud to design, implement, secure, and support enterprise‑scale data center, cloud, and hybrid network environments. This role requires strong networking fundamentals, hands‑on Cisco ACI expertise, micro‑segmentation, SD‑WAN, hybrid cloud connectivity, and deep experience with Palo Alto Networks firewalls and VPN technologies.

The ideal candidate will demonstrate strong troubleshooting, automation, and collaboration skills while working closely with cloud, security, and infrastructure teams.

Key Responsibilities

Datacenter Leaf & Spine Networking & Cisco ACI -                                                                             Must Have Hands on Skills

• Design, deploy, operate, and troubleshoot Cisco ACI leaf‑spine architectures.
• Perform APIC operations and day‑to‑day management.
• Build and maintain ACI constructs including:
  • Tenants, VRFs, bridge domains, subnets
  • Endpoint Groups (EPGs), contracts, filters
  • Service graphs, external Layer 3 connections (L3Out)
  • Fabric access policies
• Ensure high availability, scalability, and performance of data center networks.

Micro‑Segmentation & Network Security -                                                                                                          Must Have Hands on Skills

• Design and implement micro‑segmentation strategies based on Zero Trust and least‑privilege principles.
• Enforce policy‑based networking using Cisco ACI contracts and, where applicable, host‑based controls.
• Partner with security teams to align network segmentation with enterprise security requirements.

SD‑WAN -                                                                                                                                                    Must Have Hands on Skills

• Implement and operate SD‑WAN solutions.
• Troubleshoot overlay and underlay connectivity, routing, and performance issues.
• Integrate SD‑WAN with data center, cloud, and security architectures.

Hybrid Cloud Networking -                                                                                                                      Must Have Hands on Skills

• Design and support hybrid cloud connectivity solutions including:
  • Site‑to‑site VPN and IPsec
  • Dedicated cloud interconnects (AWS Direct Connect, Azure ExpressRoute, Google Cloud Interconnect)
• Manage cloud networking constructs such as:
  • Cloud Routing, NAT
  • Security Groups / Network Security Groups (NSGs)
  • Multi‑Account and Multi‑Subscription Network Architectures

Network Security: Palo Alto Networks                                                                                                  Must Have Hands on Skills

• Engineer and support Palo Alto Networks Firewalls, including:
  • Initial firewall builds and deployments
  • Security policy, zone, and NAT configuration
  • Software/OS upgrades and Hardware Refresh activities
  • Troubleshooting and Solution Delivery
  • License Management and Renewals
• Implement and manage security services such as:
  • WildFire
  • URL Filtering
  • Advanced Threat Prevention features
• Design, configure, and troubleshoot Site‑To‑Site VPN tunnels.
• Build, manage, and troubleshoot Palo Alto Global Protect VPN (Remote Access VPN) environments

Core Networking -                                                                                                                                     Must Have Hands on Skills

• Apply strong fundamentals in:
  • TCP/IP, IP Subnetting
  • Dynamic Routing Protocols (Cisco Routing - BGP, EIGRP, OSPF)
  • Switching Technologies (Cisco Nexus, Cisco Catalyst, Vlan, STP, vPC, vDC, LACP)
  • QoS and Multicast fundamentals

• Complex Traffic Analysis
  • Must be well-experienced in using Advance Wireshark – Packet Capture & Traffic Analysis
  • Perform complex troubleshooting using packet captures, traffic flow analysis, and log correlation.
  • Perform advanced network traffic capture and analysis using Wireshark to identify latency, packet loss, protocol, and performance issues.
  • Analyze TCP/IP flows, retransmissions, handshakes, and application behavior to support root‑cause analysis.
  • Correlate packet‑level findings with logs and network telemetry to resolve complex incidents.
  • Provide clear documentation and insights from packet captures to engineering and operations teams.

Network and DNS Load Balancing                                                                             Must Have Knowledge and Preliminary Skill

• (F5 LTM and F5 GTM) - End to End Support, Design, Build, Solution, Troubleshooting
• Maintenance (OS Upgrade, HW Refresh, License Renewals).

Automation & Tooling                                                                                                 Must Have Knowledge and Preliminary Skill

• Develop and maintain automation using:
  • Python, Ansible, and/or Terraform
• Use Git for version control and infrastructure‑as‑code workflows.
• Improve operational efficiency through scripting and automation.

Collaboration & Communication

• Work cross‑functionally with cloud, security, application, and operations teams.
• Provide clear documentation, network diagrams, and technical guidance.
• Communicate complex network designs and issues effectively to both technical and non‑technical stakeholders.
• Team Work, Customer-focused, Process-oriented, Result-driven, presentation skills, customer-facing, knowledge sharing

Required Qualifications

• Strong foundation in enterprise networking and data center architectures.
• Hands‑on experience with Cisco ACI in production environments.
• Experience with micro‑segmentation and policy‑based networking.
• Proven experience with SD‑WAN deployment and operations.
• Hybrid cloud networking experience.
• Strong troubleshooting and analytical skills.
• Experience with automation/scripting and Git.
• Excellent communication and teamwork skills.

Preferred Qualifications

• Experience in large‑scale enterprise or regulated environments.
• Multi‑cloud networking experience (AWS, Azure, Google Cloud Platform).
• Strong hands‑on experience with Palo Alto Networks security platforms.
• Relevant certifications (CCNP/CCIE, PCNSE, cloud networking certifications).

Good To Have Skills

• Web Application Firewalls (Cloud WAF) – End to End Support, Design, Build, Solution, Troubleshooting and Maintenance. (Experience in Imperva WAF is preferred and will be added advantage).
• Experience in handling DDoS Prevention Setup (Imperva Incapsula preferred).
• End Point Network Access Control (NAC) (ForeScout Preferred) - End to End Support, Design, Build, Solution, Troubleshooting and Maintenance (Policy Management, OS Upgrade, HW Refresh, License Renewals).
• Proficient in executing diagnostic techniques with Good Experience in NetScout Traffic Analyzing Tool.
• Proficiency in working with Packet Broker Switches (IXIA Preferred) to capture Live Traffic
• Good Experience in working with Datacenter Cabling team, understanding Racking/Un-racking/ Datacenter Standards, TAP usage, Power Supply placement and Optimal Rack usage.
• Infoblox – IPAM (IP Address Management) and Maintenance (OS Upgrade, HW Refresh, License Update)
• Experience in handling Network Security Technologies - NetMotion Mobility VPN, RSA, Cisco ISE