Network Engineer

Paladin Technologies - Seattle, WA

Full-time - Mid Level

Seattle, WA

1,001-5,000 employees

Professional, Scientific, and Technical Services

About the position

As part of the IT Operations Team at Paladin Technologies, the Network Engineer (NetEng) will lead network operations, overseeing all aspects of physical and virtual networking managed by the IT Operations team to support the business and its IT services. This role involves managing complex IP networks across multi-regional environments, including on-premise data centers, branch offices, and public cloud locations (AWS/Azure). The Network Engineer will provide senior-level network support to the Systems Administration (SysAdmin) and IT Service Desk (ITSD) teams, which includes network design, managing change requests and ITSM tickets, and offering technical assistance to diagnose and resolve application security and performance issues related to IP networks. Collaboration with the Security Operations (SecOps) team is essential, recognizing the critical role that network infrastructure plays in the security of the organization's IT systems, as well as in safeguarding colleague and customer data. The position requires leading and managing network operations within the IT Operations team, ensuring robust, secure, and efficient network services that support the business's goals. Upholding Paladin's culture by exemplifying core values of Leadership, People Development, Teamwork, and Client Focus is also a key aspect of this role.

Responsibilities

• Lead the design, management, and support of wired networks using Juniper Mist across all branch office and data center locations.
• Lead the design, management, and support of wireless networks using the Ruckus One cloud controller for all branch offices.
• Collaborate with the Manager of IT Operations on network monitoring initiatives, including recommending, designing, implementing, and managing tools for monitoring IP network service uptime, security, and performance (NPM).
• Manage projects focused on branch office network enhancements, including infrastructure upgrades, legacy device migrations, and replacements.
• Support Bosch PMI projects related to network infrastructure, involving upgrades and modifications at branch offices and data center locations.
• Conduct weekly meetings with the Systems Administrator team and the Manager of IT Operations to provide updates on active projects, ITSM tickets, and discuss new business, including recommendations for improving IT system performance and security.
• Assist with the IT change management process, including planning and implementing changes, reviewing change requests, creating MOPs, conducting tests, deploying network changes, and documenting activities in the ITSM platform.
• Collaborate with the SecOps team to review vendor security bulletins and vulnerability information, schedule and perform software upgrades for switches, routers, wireless APs, and firewalls to address security vulnerabilities.
• Work with the SecOps team to manage perimeter firewalls, including policy management, IPSec VPN tunnels, routing (OSPF/BGP), NGFW features (IDP, Web filtering), and DNS security.
• Support the SecOps team in managing the ZTNA solution (Tailscale), including user management via SCIM-provisioned groups, ACL management (JSON), implementation and management of subnet routers and exit nodes, and enforcement of device posture for compliance.
• Collaborate with the SysAdmin team to advance the organization's transition toward a 'zero-trust' security model, enhancing security for network access to wired/wireless networks, applications/services, and remote access.
• Provide training to IT Ops team members to enhance their knowledge of IP networking and to effectively utilize networking tools/platforms for troubleshooting within data centers and branch office locations.
• Maintain effective communication and promptly address customer and company inquiries.
• Collaborate proactively and positively with colleagues across all departments, demonstrating a positive attitude towards work and company objectives.
• Adhere to all company policies, procedures, and standards.

Requirements

• Advanced IP networking certification (e.g., CCNP/IE or JNCIP/E) or equivalent experience in designing, managing, and securing complex IP networks across multi-regional on-premise and public cloud data centers, as well as branch offices.
• Over 2 years of experience managing network firewalls and next-generation firewall (NGFW) services.
• Over 4 years of experience designing and managing enterprise-level Layer 2 (L2) networks and related technologies.
• Over 2 years of experience designing and managing enterprise-level Layer 3 (L3) networks, including expertise in OSPF and BGP routing protocols.
• Over 4 years of experience designing and managing secure remote access systems (VPN/ZTNA).
• Over 4 years of experience managing Juniper Junos devices.
• Proven intermediate experience with network security protocols and cryptographic frameworks, such as IPsec, TLS, QUIC, HTTPS, and DNS-over-TLS/HTTPS/QUIC.
• Advanced experience with network monitoring and management protocols, including SNMP v2/3, ICMP, Syslog, NETCONF, and SSH.
• Intermediate experience using both GUI and CLI management tools for Juniper devices.
• Intermediate experience with network flow and traffic sampling/analysis technologies, such as NetFlow, J-Flow, and IPFIX.
• Experience using ITSM platforms, such as Jira Service Management or ServiceNow.

Nice-to-haves

• Expertise in designing, deploying, and managing SD-WAN networks.
• Experience managing Brocade/Ruckus ICX switches (legacy Layer 2).
• Proficient in managing and deploying Juniper SRX firewalls.
• Skilled in managing and deploying Juniper SSR (Smart Session Routers) for SD-WAN.
• Experience in designing, deploying, and managing wired networks (switching/WAN edge) using Juniper Mist cloud management and AI platform.
• Strong project management skills, with the ability to plan, execute, and monitor multiple projects simultaneously, ensuring they are completed on time and within budget.
• Proficient in network automation, with experience using Python and deploying automation tools and platforms, such as Ansible, to streamline and manage automation tasks.