- Design, implement, and manage Layer 2/3 infrastructure using Arista switches, with a focus on high availability, performance, and scalability.

- Administer Palo Alto Networks NGFWs (physical and virtual) for enterprise perimeter and site-to-site connectivity, including GlobalProtect, App-ID, and Threat Prevention.

- Build and maintain secure hybrid-cloud networking including :

1. AWS : VPC design, Transit Gateway, PrivateLink, Route 53, security groups, and network ACLs

2. Azure : Virtual Network (VNet) peering, Azure Firewall, Application Gateway, and ExpressRoute

3. GCP : VPC design, Cloud Router, Shared VPC, Private Google Access, and firewall policies

- Design and maintain VPN and SD-WAN solutions for secure global connectivity.

- Automate configuration, testing, and change deployments using Python, PowerShell, or REST APIs.

- Monitor, analyze, and resolve network performance issues using tools like Arista CloudVision, Palo Alto Panorama, and Elastic/NetFlow/SNMP-based monitoring.

- Perform regular firewall rule audits, policy tuning, and network segmentation reviews in collaboration with Security and Compliance.

- Lead cloud migration and interconnectivity efforts, ensuring performance and secure access between cloud and on-prem environments.

- Document network architecture, configuration baselines, and change history in accordance with ITIL and security best practices.

- Act as final escalation point for critical network issues across corporate and internal business unit environments.

- Participate in DR planning, network hardening, and lifecycle refresh initiatives.

Responsibilities :

- Manage routing, segmentation, and network policy across hybrid cloud and physical infrastructure.

- Operate and optimize Palo Alto Networks hardware and VM-Series firewalls in production.

- Configure Arista EOS switching infrastructure for campus and data center environments.

- Automate operational tasks and repeatable workflows through scripts and APIs.

- Support DNS, DHCP, NTP, and IPAM tools and infrastructure services.

- Maintain connectivity and secure access to cloud-native services, third-party SaaS tools, and vendor platforms.

- Collaborate with Security, CloudOps, and DevOps to support internal product environment connectivity.

- Participate in after-hours support rotation and provide senior-level incident response.

Qualifications :

- 8+ years of enterprise network engineering experience, including routing, switching, and security.

- 3+ years of experience designing and supporting Palo Alto Networks firewalls in a production environment.

- Experience with Arista EOS switches in data center or enterprise core deployments.

- Deep familiarity with cloud-native networking concepts in AWS, Azure, and GCP, including VPC/VNet peering, cloud routing, and native firewalling.

- Proficiency in Python or PowerShell scripting for network automation.

- Strong understanding of BGP, OSPF, NAT, VLANs, VPN (IPSec, SSL), and multicast.

- Experience with SDN frameworks, preferably Arista CloudVision or Palo Alto SD-WAN.

- Hands-on experience with network monitoring and telemetry tools.

- Familiarity with zero-trust network design and segmentation best practices.

- Excellent documentation and collaboration skills, with experience working in globally distributed teams.

- Bachelors degree in Information Systems, Computer Engineering, or equivalent experience.

Preferred Certifications :

- PCNSE (Palo Alto Networks Certified Network Security Engineer)

- Arista ACE or other Arista certification

- AWS Advanced Networking Specialty, Azure Network Engineer Associate, or Google Cloud Network Engineer