Senior Network Engineer III

Overview

We are looking for a skilled and knowledgeable Senior Network Engineer to join our IT Infrastructure team.

The ideal candidate will have strong experience in designing, implementing, and maintaining secure and efficient network infrastructures. Key areas of expertise include SASE (Secure Access Service Edge), BGP (Border Gateway Protocol), Firewall management, SD-WAN (Software-Defined Wide Area Network), CSP (Cloud Service Provider) operations, Reverse Proxy technology, and Data Center Network Architecture (Layer 3 leaf-spine / Clos fabric design) and Wifi Technology. The role also requires a solid IT Security background beyond firewall administration.

Professional English proficiency (written and spoken) is mandatory — this role requires daily collaboration with a globally distributed team and stakeholders across Europe, the US, and India.

Responsibilities

Network Design and Implementation:

Design, deploy, and maintain high-performance and resilient network infrastructures that meet the organization’s business needs.

Implement SASE solutions to enhance network security and ensure secure access across different environments.

Configure and manage BGP routing for optimal network performance and reliability.

Data Center Network Architecture:

Design, deploy, and operate Layer 3 leaf-spine (Clos) data center fabric architectures, ensuring predictable, low-latency, non-blocking connectivity between compute and storage resources.

Implement and maintain underlay routing (BGP-based) and overlay technologies (VXLAN/EVPN) to support scalable, multi-tenant data center fabrics.

Support data center migrations, cutovers, hardware refresh, and fabric expansion projects with minimal service disruption.

Firewall and Security Management:

Configure, manage, and monitor firewalls, including rule sets, VPNs, and threat prevention features.

Conduct regular firewall audits and assessments to ensure compliance with security policies and industry standards.

SD-WAN Management:

Design and implement SD-WAN solutions to optimize connectivity and performance across multiple locations.

Monitor and manage SD-WAN environments, addressing any issues or performance bottlenecks.

Cloud Service Provider Operations:

Integrate and manage network services within CSP environments (e.g., AWS, Azure, GCP), ensuring secure and efficient cloud connectivity.

Implement and manage VPNs, VPCs, and other cloud networking components.

Reverse Proxy Management:

Configure and manage reverse proxy technologies to optimize and secure web traffic, ensuring proper load balancing and protection for backend servers.

Monitor reverse proxy performance and troubleshoot issues to ensure reliable application delivery.

IT Security and Compliance:

Apply IT security best practices across network infrastructure, including system/device hardening, vulnerability management, and secure configuration baselines.

Work closely with the security team on Zero Trust network access principles, network segmentation, and threat detection.

Implement and maintain intrusion detection and prevention systems (IDS/IPS).

Support security audits, vulnerability/penetration test remediation, and compliance reporting against industry standards.

Troubleshooting and Support:

Provide advanced troubleshooting for network issues, identifying root causes and implementing effective solutions.

Collaborate with other IT teams to resolve complex technical problems and support network-related incidents.

Documentation and Reporting:

Maintain detailed documentation of network configurations, changes, and procedures.

Generate regular reports on network performance, security incidents, and project progress for management review.

Continuous Improvement:

Stay updated on the latest industry trends and technologies, applying this knowledge to improve network efficiency, security, and performance.

Propose and implement network upgrades and enhancements to meet evolving business needs.

Qualifications

Education:

Bachelor’s degree in Computer Science, Information Technology, or a related field. Relevant certifications (e.g., CCNA, CCNP, CISSP) are a plus.

Experience:

5–8 years of experience in network engineering, with a strong focus on SASE, BGP, Firewalling, SD-WAN, CSP operations, and Reverse Proxy technologies, including hands‑on experience operating data center network fabrics (spine‑leaf / Clos architectures).

Technical Skills:

Proficient in configuring and managing SASE solutions and technologies.

In‑depth knowledge of BGP and other routing protocols.

Hands‑on experience with firewall technologies (e.g., Palo Alto