Network Engineer - Routing & Switching

Description :

- Routing & Switching : Architect, configure, manage, and troubleshoot enterprise routing and switching environments utilizing Cisco and Meraki technologies.

- Protocol Management : Implement and optimize advanced routing protocols including BGP, OSPF, and EIGRP. Ensure stable neighbor relationships and optimal path selection.

- Layer 2/3 Optimization : Configure and maintain VLANs, Spanning Tree Protocol (STP), port channels (LACP/PAGP), MTU tuning, and trunking.

- Asymmetric Routing Resolution : Identify, isolate, and resolve complex asymmetric routing and stateful firewall synchronization issues.

- Performance Analysis : Conduct deep-dive packet captures (using Wireshark or similar tools) and network performance analysis to diagnose intermittent latency or connectivity anomalies.

Security & Firewall Management :

- Palo Alto Administration : Manage, policy-engineer, and maintain Palo Alto Firewalls globally utilizing Panorama for centralized management.

- Cisco Security : Administer Cisco security ecosystems via Firepower Management Center (FMC).

- Policy Enforcement : Design, implement, and audit next-generation firewall policies, App-ID, User-ID, and URL filtering.

- Configure complex Network Address Translation (NAT) rules (Static, Dynamic, PAT) and perform comprehensive traffic flow analysis to ensure secure, deterministic routing.

- Maintain comprehensive network documentation, topology maps, and standard operating procedures (SOPs).

- Participate in an on-call rotation to support critical infrastructure outages and high-severity incidents.

- Collaborate with systems, cloud, and DevOps teams to securely integrate infrastructure components.

Qualifications & Skills :

- Experience : 5+ years of hands-on experience in enterprise network engineering and security administration.

- Hardware : Deep familiarity with Cisco Catalyst/Nexus switches, Meraki MS/MX series, and Palo Alto PA-Series hardware.

- Mastery of BGP, OSPF, EIGRP, STP, LACP, 802.1q VLANs, and IPsec VPNs.

- Expert-level proficiency with Wireshark, tcpdump, NetFlow analyzers, and network monitoring platforms.

- Strong analytical and troubleshooting skills - ability to look at raw packets and translate them into root causes.

- Excellent communication skills with the ability to articulate complex technical issues to non-technical stakeholders.