Networking Consultant

Position Summary

We are seeking an experienced Network Engineer to support, maintain, and improve our enterprise network infrastructure across the United States and our global operations.

This is a technical role responsible for network security, connectivity, cloud networking, firewalls, routing, switching, and remote access. The ideal candidate has strong experience with Cisco networking, Cisco Firepower firewalls, Netskope, Microsoft Azure networking, and enterprise virtual private network (VPN) technologies.

The Network Engineer will work closely with our global infrastructure, security, cloud, and operations teams to maintain reliable network services, implement security controls, troubleshoot complex issues, and support our ongoing network modernization initiatives.

Key Responsibilities

Network Infrastructure and Operations

Configure, maintain, and troubleshoot enterprise Cisco routers, switches, and network infrastructure.

Support local area networks (LAN), wide area networks (WAN), virtual local area networks (VLAN), and wireless connectivity.

Manage routing protocols, including Border Gateway Protocol (BGP), Open Shortest Path First (OSPF), and static routing.

Maintain network performance, availability, capacity, and redundancy across corporate offices, data centers, and distribution facilities.

Troubleshoot complex connectivity, latency, routing, Domain Name System (DNS), and network performance issues.

Support network upgrades, equipment replacements, firmware updates, and lifecycle management.

Maintain accurate network diagrams, configurations, documentation, and operational runbooks.

Firewall and Network Security

Administer and troubleshoot Cisco Firepower Threat Defense (FTD) firewalls and Cisco Firewall Management Center (FMC).

Manage firewall policies, access control lists, network address translation (NAT), security zones, and intrusion prevention capabilities.

Implement and maintain network segmentation using firewall-enforced security boundaries and least-privilege access.

Review and optimize firewall rules, eliminate unnecessary access, and support regular rule recertification.

Support Palo Alto Networks firewalls and other security technologies used across our global infrastructure.

Work with the Security team to investigate network threats, suspicious traffic, and security incidents.

Support firewall logging, monitoring, and integration with security information and event management (SIEM) platforms.

Ensure network configurations comply with corporate security standards and change management requirements.

Netskope and Secure Remote Access

Administer and support Netskope Security Service Edge (SSE) and Zero Trust Network Access (ZTNA) solutions.

Configure private application access, access policies, user connectivity, and secure remote access.

Troubleshoot Netskope client connectivity, application access, routing, and performance issues.

Support Netskope deployment, configuration, and operational management across global locations.

Maintain site-to-site and remote access VPN connections, including Internet Protocol Security (IPsec) and Secure Sockets Layer (SSL)/Transport Layer Security (TLS) VPN technologies.

Support migration from traditional VPN access to Zero Trust access models.

Work with identity and security teams to integrate access controls with Microsoft Entra ID and Okta.

Microsoft Azure Networking

Configure and support Microsoft Azure networking services, including virtual networks (VNets), subnets, network security groups (NSGs), and route tables.

Manage Azure VPN Gateway, private endpoints, DNS, and hybrid connectivity between Azure and on-premises environments.

Troubleshoot Azure network routing, connectivity, firewall rules, and application access.

Support Azure Firewall, load balancing, and other cloud networking services where deployed.

Work with cloud and infrastructure teams to implement secure network architectures and connectivity between regional environments.

Support cloud network monitoring, security controls, and operational documentation.

Network Monitoring, Incident Response, and Recovery

Monitor network health, availability, performance, and security events.

Investigate and resolve network incidents, outages, and performance degradation.

Participate in incident response, root cause analysis, and corrective action planning.

Support disaster recovery planning, network failover testing, and recovery validation.

Maintain network configuration backups and documented restoration procedures.

Participate in scheduled maintenance, change management, and an on-call support rotation as required.

Coordinate with global engineering teams to provide operational coverage across time zones.

Network Engineering and Improvement

Implement network segmentation, firewall modernization, and secure connectivity improvements.

Identify and remediate unsupported network equipment, outdated firmware, and insecure configurations.

Support network automation, configuration management, and repeatable deployment processes.

Assist with network architecture reviews, infrastructure upgrades, and new technology implementations.

Work with vendors and service providers to resolve technical issues and support infrastructure projects.

Collaborate with infrastructure, cybersecurity, and application teams to ensure reliable and secure connectivity.

Required Qualifications

5 or more years of experience supporting enterprise network environments.

Strong experience configuring and troubleshooting Cisco routers and switches.

Experience administering Cisco Firepower Threat Defense and Firewall Management Center.

Experience with Netskope, preferably Netskope Private Access and Zero Trust Network Access.

Working knowledge of Microsoft Azure networking, including VNets, NSGs, VPN Gateway, and hybrid cloud connectivity.

Strong understanding of Transmission Control Protocol/Internet Protocol (TCP/IP), routing, switching, DNS, Dynamic Host Configuration Protocol (DHCP), and network segmentation.

Experience configuring and troubleshooting IPsec and SSL/TLS VPN connections.

Experience with firewall policies, NAT, access control lists, and network security troubleshooting.

Experience using packet capture and network diagnostic tools, including Wireshark.

Ability to troubleshoot complex network issues across multiple technologies and locations.

Experience supporting production infrastructure in a business-critical environment.

Strong documentation, communication, and problem-solving skills.

Ability to work independently and collaborate with geographically distributed engineering teams.

Preferred Qualifications

Cisco Certified Network Professional (CCNP) or Cisco Certified Network Associate (CCNA).

Netskope certification or significant Netskope administration experience.

Microsoft Azure networking certification, such as Azure Network Engineer Associate (AZ-700).

Experience administering Palo Alto Networks firewalls.

Familiarity with F5 application delivery controllers, load balancing, and web application firewall technologies.

Experience with Cloudflare DNS and external DNS management.

Familiarity with network security monitoring and SIEM integration.

Experience with Python, PowerShell, Ansible, or other network automation technologies.

Experience supporting VMware-based data centers and hybrid cloud environments.

Knowledge of network access control, Zero Trust architecture, and privileged access management.

Experience supporting distribution centers, warehouse systems, or other operationally critical facilities.

Familiarity with IT Infrastructure Library (ITIL) processes and enterprise change management.

Key Skills and Technologies

Technology

Cisco Routing and Switching

Cisco Firepower / FMC

Netskope SSE / ZTNA

Microsoft Azure Networking

IPsec / SSL VPN

BGP / OSPF / TCP/IP

Network Segmentation

Palo Alto Firewalls

DNS / DHCP / NAT

F5 / Load Balancing

Wireshark / Packet Analysis

Network Automation

Entra ID / Okta Integration