Network Engineer

Job Title: Network Engineer, Campus and Datacenter

Industry: Technology

Location: Palo Alto, CA

Top 3 Skills

• Next-generation firewall administration on Palo Alto Networks and Panorama, including security policy, zone segmentation, and GlobalProtect VPN
• Enterprise routing and switching, including BGP, OSPF, VLANs, STP, and L2/L3 design
• Enterprise wireless LAN design and support, including Wi-Fi 6 and RF optimization

What You ll Do

• Design and maintain the corporate LAN (access, distribution, and core switching, VLANs, STP, and QoS) for headquarters and remote offices
• Manage the wireless LAN, both controller-based and cloud-managed, including site surveys, RF planning, SSID design, and client troubleshooting
• Administer 802.1X network access control, certificate-based authentication, and guest network segmentation
• Operate and evolve the datacenter spine-leaf network with BGP, VxLAN/EVPN overlays, and high-availability designs
• Monitor capacity and latency baselines, and partner with server, storage, and platform teams on rack-and-stack connectivity and expansions
• Manage Palo Alto Networks PA-Series, Panorama, and SCM, covering security policy, App-ID, URL filtering, Threat Prevention, and WildFire
• Administer GlobalProtect VPN and Prisma Access and enforce zero-trust segmentation between zones
• Run firewall rule reviews, clean up unused policies, and support security audits
• Monitor network health with SNMP, streaming telemetry, and NetFlow/sFlow, and lead incident resolution and root-cause analyses
• Build automation in Python, Ansible, and Terraform, and use AI-assisted tools for log analysis, runbooks, and documentation

What We Need From You

• 4 to 6 years of hands-on enterprise network engineering
• Palo Alto Networks NGFW and Panorama experience, including security policy management, zone-based segmentation, and GlobalProtect VPN
• Routing and switching fundamentals: BGP, OSPF, STP/RSTP, VLANs, LACP, and L2/L3 design
• Enterprise wireless design and support on Cisco Meraki, Aruba, or equivalent, including Wi-Fi 6 and RF optimization
• Working knowledge of datacenter spine-leaf, VxLAN/EVPN, and high-availability failover, and the ability to work onsite in Palo Alto, CA

Preferred / Bonus

• PCNSE, CCNP Enterprise, CWNA/CWSP, or equivalent certifications
• Network automation with Python, Ansible, or Terraform
• Public cloud networking on AWS, Azure, or GCP, including hybrid connectivity such as Direct Connect, ExpressRoute, and VPN
• Load balancers such as F5, AVI/NSX ALB, or NGINX
• 802.1X/NAC platforms such as Cisco ISE or Aruba ClearPass
• Comfort using AI tools such as Claude or Copilot for network operations and documentation