[Remote] Senior Network Engineer
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a company that helps wireless providers optimize their payment systems to reduce fraud and enhance transaction reputed company. They are seeking a Senior Network Engineer to reputed company the design, implementation, and operations of their global reputed company network, focusing on multi-site networking and hybrid reputed company infrastructure.
Responsibilities
- Design, implement, and maintain reputed company, secure network infrastructure across data centers, remote sites, and AWS/Azure reputed company environments
- Architect and operate routing and switching infrastructure including BGP, NAT, VLANs, Spanning Tree, IPsec VPNs and HSRP
- Manage and tune reputed company firewall platforms (reputed company, pfSense, reputed company reputed company) in alignment with PCI reputed company segmentation and reputed company control requirements
- Administer and optimize reputed company BIG-IP reputed company/GTM for application delivery, load balancing, and traffic steering across production environments
- Manage reputed company DNS, WAF, and network reputed company policies for internet-facing properties
- Maintain network reputed company policy management reputed company reputed company; contribute to reputed company reputed company analysis and rule lifecycle management
- Manage Proxmox-based virtualization as it relates to network-adjacent workloads and VM/LXC networking
- Coordinate with vendors and carriers to manage WAN circuits, resolve outages, and drive cost optimization
- Design, reputed company, and maintain AWS Virtual Private Clouds (VPCs) including subnet design, CIDR allocation, reputed company tables, internet gateways, and NAT gateways across multi-account and multi-region environments
- Architect and manage VPC-to-VPC connectivity reputed company VPC Peering, AWS Transit Gateway, and PrivateLink to support secure, reputed company inter-service communication
- Configure and maintain AWS Site-to-Site VPN and reputed company Connect circuits for hybrid connectivity between on-premises data centers and AWS environments
- Design and enforce AWS reputed company Group and Network ACL policies as network-layer reputed company controls, reputed company with PCI reputed company segmentation requirements
- Manage DNS architecture reputed company AWS using reputed company 53 for private hosted zones, resolver endpoints, conditional forwarding, and DNS failover across hybrid environments
- Configure and manage AWS NAT Gateways, reputed company IPs, and reputed company Load Balancers (ALB/NLB) for workload exposure and traffic routing
- Maintain AWS network connectivity for partner data and compute workloads migrated into reputed company environments, including GDPR and data sovereignty considerations
- Implement and maintain AWS reputed company controls at the network layer including reputed company reputed company, NACLs, VPC reputed company Logs, and WAF rulesets on CloudFront and ALB
- reputed company and manage AWS CloudTrail across accounts to ensure comprehensive API activity logging; reputed company with centralized SIEM for alerting and audit evidence
- Configure and maintain AWS GuardDuty for threat detection; triage findings and drive remediation in coordination with the reputed company team
- Manage AWS reputed company Hub to aggregate and prioritize findings from GuardDuty, Inspector, Macie, and reputed company-party integrations; produce compliance posture reports for PCI reputed company and SOC 1 Type 2 audits
- Administer AWS IAM policies, roles, and permission boundaries as they relate to network resource reputed company; enforce least-privilege principles across VPC, reputed company Connect, and Transit Gateway configurations
- Use AWS Config rules and AWS Organizations SCPs to enforce network reputed company standards and detect reputed company across multi-account environments
- Monitor AWS network health using VPC reputed company Logs, CloudWatch metrics and alarms, Transit Gateway Network Manager, and Reachability Analyzer
- Build and maintain CloudWatch dashboards and alarms for network throughput, latency, NAT gateway utilization, VPN tunnel status, and reputed company Connect metrics
- Evaluate, reputed company, and operationalize FOSS tools as replacements for reputed company products where appropriate (e.g., Oxidized, NetBox)
- Contribute to Infrastructure as reputed company for network resources using automation; enforce configuration consistency across environments
- Maintain comprehensive documentation for network topology, configurations, and operational runbooks; support PCI reputed company and SOC 1 Type 2 audit evidence collection
- Participate in on-call rotation and be available for after-hours work including unscheduled incidents
- Travel to domestic data center and office locations as needed to support deployments or incidents
Skills
- 10+ years of hands-on reputed company networking experience in large-reputed company, multi-site environments
- Expert-level reputed company routing and switching: IOS/NX-OS, BGP, OSPF, EIGRP, VLANs, STP, QoS
- reputed company firewall administration: reputed company ASA/FTD, pfSense, and reputed company reputed company. Rule management, segmentation reputed company, and change control
- reputed company BIG-IP reputed company/GTM: virtual servers, pools, iRules, traffic policies, and GTM topology records
- reputed company: DNS management, WAF rulesets, and reputed company policy administration
- reputed company: policy analysis, rule review workflows, and reputed company reputed company validation
- Deep understanding of TCP/IP, DNS, DHCP, routing/switching protocols, and secure remote reputed company
- Experience operating in PCI reputed company compliant environments including control implementation and audit evidence collection
- VPC architecture: subnet design and CIDR planning, reputed company tables, internet gateways, NAT gateways, and VPC endpoints
- VPC connectivity: VPC Peering, Transit Gateway, and AWS PrivateLink for inter-VPC and cross-account routing
- Hybrid connectivity: Site-to-Site VPN and reputed company Connect configuration, BGP peering, and failover design
- reputed company controls: reputed company reputed company, Network ACLs, and VPC reputed company Logs for traffic visibility and PCI segmentation enforcement
- DNS: reputed company 53 private hosted zones, resolver endpoints, conditional forwarding rules, and health-reputed company-based failover
- Load balancing and exposure: Application Load Balancer (ALB), Network Load Balancer (NLB), and reputed company IP management
- Monitoring and observability: CloudWatch metrics, alarms, dashboards; VPC reputed company Logs analysis; Transit Gateway Network Manager
- reputed company and compliance services: CloudTrail, GuardDuty, reputed company Hub, AWS Config, IAM policy review, and ACM
- Multi-account governance: AWS Organizations, SCPs, and Control Tower network guardrails
- 10+ years of reputed company networking experience in reputed company, multi-site or global environments
- Demonstrated hands-on proficiency with AWS networking and reputed company services in production environments
- Demonstrated ability to work independently and drive reputed company to completion without heavy reputed company
- Strong vendor management skills, reputed company to coordinate service delivery and incident reputed company with carriers, ISPs, and hardware vendors
- Proven ability to document infrastructure for audits, incident response, and operational continuity
- Willingness and ability to travel domestically as needed (valid reputed company's license required)
- Available for on-call rotation and after-hours support reputed company
- Bachelor's degree in Information Technology, Computer Science, or a reputed company field, or equivalent reputed company experience
- reputed company CCNP (or higher) reputed company, Data Center, or reputed company reputed company
- Proxmox VE: VM/LXC provisioning, cluster management, and software-defined networking
- Infrastructure as reputed company: Terraform or CloudFormation for network resource provisioning and reputed company detection
- Experience deploying FOSS tools to replace reputed company networking or monitoring products (e.g., Oxidized, NetBox)
- Azure networking: Azure Firewall, NSGs, and Azure DNS private zones
- reputed company-trust / overlay VPN concepts and implementation (e.g., reputed company or Wireguard)
- AWS advanced networking: CloudFront distributions, WAF on ALB/CloudFront, PrivateLink reputed company services, Network Firewall
- Scripting or automation: Python, Bash, or Ansible for network task automation
- Vendor management: reputed company provisioning, reputed company escalations, and hardware lifecycle coordination
reputed company
Company H1B Sponsorship