Network Engineer (Mortgage Industry)

CMG Financial

27d•$110,000 - $130,000•Onsite

About The Position

CMG Financial is looking for an experienced Network Engineer to design, implement, and manage enterprise network infrastructure across on-premises, hybrid, and Azure cloud environments. You will work with cutting-edge technologies including Palo Alto next-generation firewalls, Azure networking services, and modern SASE architectures to ensure secure, high-availability connectivity for our organization.

Requirements

Bachelor's degree in Computer Science, Information Technology, or a related field — or equivalent hands-on experience
3–7+ years of network engineering experience in enterprise, multi-site, or hybrid cloud environments
Deep understanding of TCP/IP, subnetting, routing, switching, VLANs, DNS, and DHCP
Experience Cisco Catalyst, Nexus and Meraki switches
Experience with BGP in enterprise or hybrid cloud environments
Hands-on experience with firewalls, including rule creation, NAT, and VPNs
Experience with load balancing technologies (NetScaler ADC Preferred) and network segmentation, including Zero Trust design principles
Strong troubleshooting capability across Layer 1–7, including incident response, root cause analysis, and performance optimization
Strong understanding of network security concepts: Zero Trust architecture, IDS/IPS, and DDoS mitigation
Experience implementing secure segmentation across on-premises and cloud environments
Hands-on experience with Palo Alto NGFW: security policy management, NAT, App-ID, User-ID, and Content-ID
Experience configuring site-to-site and remote access VPNs using Palo Alto firewalls
Experience with threat prevention, URL filtering, and WildFire services
Experience using Panorama / Strata Cloud Manager for centralized firewall management
Experience with Prisma Access (SASE), including remote user access, service connections, and identity integration (SAML, Azure AD)
Experience with Strata Cloud Manager for policy management, visibility, logging, and analytics
Understanding of Zero Trust Network Access (ZTNA) and modern SASE architectures
Experience with network monitoring and troubleshooting tools: SolarWinds, and Wireshark
Familiarity with SD-WAN and enterprise wireless networking (802.11 standards, controllers, access points)
Strong communication skills with the ability to work across technical and non-technical teams
Ability to document network architecture, standards, and operational procedures
Strong analytical and problem-solving skills with attention to detail
Ability to participate in on-call rotation as needed

Nice To Haves

Azure Network Engineer Associate certification
Palo Alto PCNSE certification
Cisco CCNA / CCNP certification
Strong experience with Azure networking: VNets, subnet design, and IP addressing strategies
Experience configuring and managing NSGs, ASGs, and Azure Firewall policies
Experience with Azure Load Balancer (Layer 4), Application Gateway (Layer 7), and Azure Front Door
Experience designing hybrid connectivity: Site-to-Site VPN, Point-to-Site VPN, and ExpressRoute with BGP routing
Experience with Private Endpoints, Private Link, VNet peering, hub-and-spoke architectures, and Azure Private DNS Zones
Experience integrating PaaS resources with virtual networks (VNet integration, service endpoints)
Experience using Azure Network Watcher, Connection Monitor, NSG flow logs, and packet capture
Scripting experience in Python, PowerShell, or Bash for automation and operational efficiency
Experience with IaC tools: Terraform, ARM templates, and Bicep
Familiarity with YAML for configuration, pipelines, and automation workflows
Experience with Azure landing zones and large-scale hub-and-spoke architectures
Experience with enterprise SASE deployments
Experience in DevOps / NetDevOps environments
Familiarity with compliance frameworks such as NIST or ISO 27001

Responsibilities

Review and update Palo Alto security policies, NAT rules, and App-ID/User-ID configurations
Monitor threat prevention alerts, URL filtering hits, and WildFire submissions
Manage VPN tunnels (site-to-site and remote access) — check tunnel status, address drops or mismatches
Monitor NSG flow logs, Azure Network Watcher, and Connection Monitor for anomalies
Review hub-and-spoke topology health — VNet peering, private endpoints, DNS resolution
Check Azure Firewall policy hits and deny logs
Implement and document approved network changes (firewall rules, VLAN changes, routing updates)
Use Panorama/Strata Cloud Manager to push policy updates across managed firewalls
Maintain and update network documentation (topology diagrams, runbooks, IP addressing)
Respond to and triage network incidents — Layer 1–7 troubleshooting, root cause analysis
Triage and prioritize incoming tickets from the service desk queue; assign severity and ownership
Investigate and resolve network-related incidents (connectivity failures, latency, application access issues)
Perform root cause analysis on recurring issues and document findings for problem records
Update ticket status, add work notes, and communicate resolution steps to stakeholders
Escalate complex issues to senior engineers or vendors with full diagnostic context (logs, captures, configs)
Close resolved tickets with detailed resolution notes for knowledge base reuse
Write or maintain PowerShell/Python/Bash scripts for operational tasks
Update Terraform configs for infrastructure changes; validate and plan before apply
Communicate with application, security, and helpdesk teams on connectivity issues
Participate in on-call rotation; hand off or escalate as needed
Attend change advisory or ops standup meetings