NETWORK ENGINEER L4(CONTRACT)

Senior Network EngineerWe are looking for a highly skilled Senior Network Engineer to design, implement, and manage our enterprise network infrastructure spanning campus, data center, cloud, and remote access environments. You will be responsible for ensuring high availability, performance, and security across a complex multi-site global network.The ideal candidate brings deep hands-on expertise in wireless networking, routing & switching, firewall security, VPN technologies, and cloud networking — with the ability to lead projects, troubleshoot complex issues, and mentor junior engineers.Key ResponsibilitiesDesign, deploy, and manage enterprise wireless infrastructure using Aruba controllers and access points (campus, warehouse, and high-density environments)Configure and maintain complex routing protocols including BGP (eBGP/iBGP), OSPF (multi-area), and route redistribution across the enterpriseManage Layer 2/Layer 3 switching environments — VLANs, trunking, STP/RSTP/MSTP, port-channels, and access controlImplement and manage next-generation firewalls including rule creation, NAT, decryption, threat prevention, URL filtering, and security policy lifecycle managementDesign and troubleshoot IPSec VPN tunnels (site-to-site and remote access) and VPN gateways for secure connectivity across hybrid environmentsArchitect and manage network infrastructure in Google Cloud Platform (GCP) — VPCs, Cloud Interconnect, Cloud VPN, shared VPCs, firewall rules, and Cloud RouterDeploy and manage SD-WAN solutions for branch connectivity, traffic steering, application-aware routing, and WAN optimizationPerform capacity planning, network health monitoring, and proactive performance optimizationLead incident response for network outages — root cause analysis, resolution, and post-mortem documentationCollaborate with Security, Cloud, and Application teams on network architecture decisionsDevelop and maintain network automation scripts (Python, Ansible, Terraform) for configuration managementMentor junior network engineers and contribute to knowledge base documentationRequired Skills & ExperienceWireless Networking: 5+ years hands-on experience with Aruba wireless — controller-based and Aruba Central (cloud-managed) deployments, RF design, site surveys, 802.11ax/Wi-Fi 6, AP provisioning, and wireless security (WPA3, 802.1X, RADIUS)Routing: Expert-level knowledge of BGP (peering, route policies, communities, prefix lists) and OSPF (area design, LSA types, stub areas, route summarization)Switching: Advanced L2/L3 switching — STP tuning, VXLAN/EVPN (preferred), 802.1Q, LACP, DHC Prelay, ARP optimizationFirewall & Security: Solid understanding of next-gen firewall concepts — zone-based policy, App-ID, decryption, threat prevention, and security profilesVPN / IPSec: Hands-on with IKEv1/IKEv2, IPSec tunnel and transport mode, GRE over IPSec, certificate-based and PSK authentication, VPN gateway high availabilityCloud Networking (GCP): Experience with GCP networking — VPC design, Cloud Interconnect/Partner Interconnect, Cloud VPN, Cloud NAT, GCP firewall rules, Private Service ConnectSD-WAN: Experience deploying and managing SD-WAN solutions (Prisma SD-WAN, Viptela, Velocloud, or equivalent) — hub/spoke, application policies, SLA-based routingGeneral: 8+ years in enterprise network engineering across campus, WAN, data center, and cloud environmentsPreferred / Nice-To-HavePalo Alto Networks firewall experience — PAN-OS, Panorama management, Global Protect VPN, decryption, and security profiles (strong advantage)Experience with Prisma Access (SASE) and Prisma SD-WANCertifications: ACMP (Aruba), PCNSE (Palo Alto), CCNP/CCIE, Google Cloud Network EngineerNetwork automation: Python, Ansible, Terraform, REST APIsExperience with network monitoring tools (PRTG, Logic Monitor, Thousand Eyes, ADEM)Familiarity with Zero Trust Network Architecture (ZTNA) conceptsExperience managing networks in a global, multi-region environmentUnderstanding of DNS, DHCP, NTP, NTP, SNMP, syslog, and Netflow at enterprise scale