Network Engineer
Office Ally•Vancouver, WA
•$100,000 - $120,000
About The Position
The Network Engineer is responsible for designing, managing, and securing our enterprise network infrastructure. This is a hands-on role serving as the primary technical owner of our network stack spanning Palo Alto firewalls, F5 load balancers, DNS, NGINX reverse proxies, and Ubiquiti-based office networking, ensuring high availability, performance, and security across our data center, cloud, and office environments. This role works closely with cloud engineering, security, and application teams to deliver a reliable, well-segmented network fabric that supports our business operations and compliance obligations including SOC 2 and HIPAA.
Requirements
- Bachelor's degree in Computer Science, Information Technology, Network Engineering, or a related field; equivalent experience or relevant industry certifications will also be considered
- 3+ years of hands-on network engineering experience in an enterprise or multi-site environment
- Proficiency with Palo Alto Networks firewalls and PAN-OS including policy management, NAT, VPN, and HA configuration
- Experience administering F5 BIG-IP LTM including virtual servers, iRules, SSL offload, and health monitors
- Solid DNS fundamentals including zone management, split-horizon, record types, and hybrid DNS troubleshooting
- Hands-on NGINX experience for reverse proxying, TLS termination, and upstream load balancing
- Experience deploying and managing Ubiquiti UniFi environments across multiple sites
- Thorough understanding of core networking protocols including TCP/IP, BGP, OSPF, VLAN/802.1Q, STP, and LACP
- Familiarity with network security principles including segmentation, ACLs, NAC, 802.1X, and zero-trust concepts
- Experience with packet capture and analysis tools (Wireshark, tcpdump) for troubleshooting
- Ability to read and write basic automation scripts (Python, Bash) for network tasks
Nice To Haves
- Healthcare, SaaS, or regulated-industry experience
- Palo Alto Networks certifications (PCNSA, PCNSE)
- F5 certifications (F5-CA, F5 201/301)
- CCNA, CCNP, or equivalent vendor-neutral networking certifications
- Exposure to network automation and IaC tooling including Ansible and Terraform (network providers)
- Experience with Azure networking including VNets, VPN Gateway, ExpressRoute, Azure Firewall, and Private Endpoints
- Background in regulated environments (SOC 2, HIPAA, PCI-DSS) and evidence-based compliance support
- Experience with SIEM integration for network log forwarding and correlation (Microsoft Sentinel, Rapid7)
Responsibilities
- Administer and maintain Palo Alto Networks firewalls (PA-Series, VM-Series) and Panorama for centralized policy management
- Design and enforce security policy rulesets, NAT policies, application-based controls, and URL filtering using PAN-OS
- Manage GlobalProtect VPN for remote access, including gateway configuration, split tunneling, and MFA integration
- Configure and maintain IPsec VPN tunnels for site-to-site connectivity with data centers and cloud environments
- Operate and tune Palo Alto HA pairs, monitor threat logs, and respond to firewall-identified incidents
- Stay current on PAN-OS releases, evaluate CVEs, and manage firmware upgrade cycles in coordination with the security team
- Administer F5 BIG-IP LTM for application load balancing, SSL/TLS offload, and traffic steering across server pools
- Configure and maintain virtual servers, pool members, health monitors, iRules, and persistence profiles
- Manage SSL certificate lifecycle on F5, including certificate installation, renewal, and cipher suite hardening
- Collaborate with application teams to optimize traffic policies, implement session persistence, and troubleshoot application delivery issues
- Deploy, configure, and manage Ubiquiti UniFi switching, wireless access points, and security gateways across office locations
- Administer UniFi Network Application / UniFi OS for centralized device management, VLAN segmentation, and SSID configuration
- Design and maintain office network architecture including inter-VLAN routing, QoS policies, and guest network isolation
- Support office expansions, equipment refreshes, and new site bring-ups including cabling coordination and wireless site surveys
- Troubleshoot connectivity, throughput, and roaming issues across distributed office environments
- Implement and maintain network segmentation strategies using VLANs, micro-segmentation, and firewall zones
- Support zero-trust network access (ZTNA) initiatives and enforce least-privilege access at the network layer
- Manage network access control (NAC) and 802.1X authentication for wired and wireless endpoints
- Conduct periodic network security reviews, firewall rule audits, and access path analysis
- Support SOC 2 and HIPAA compliance obligations through network-level controls, evidence collection, and audit support
- Collaborate with the security team on threat detection, network traffic analysis, and incident containment
- Implement and maintain network monitoring using SNMP, NetFlow, syslog, and dashboarding tools
- Maintain accurate and up-to-date network topology diagrams, IP address management (IPAM), and runbooks
- Drive continuous improvement initiatives including capacity planning, redundancy reviews, and technology refresh cycles
Benefits
- medical, dental, and vision coverage
- 401(k) with company match
- paid time off
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
