Network Engineer L-3

Coretek Services

About The Position

Coretek is seeking a Network Engineer – L3 to design, implement, support, and continuously improve enterprise network and network security environments for managed services clients across Azure, hybrid, and on-premises data centers. The role owns complex routing, switching, firewall, SD-WAN, and cloud connectivity solutions, translating business, security, and compliance requirements into resilient, secure, and supportable network architectures. The engineer is the senior escalation point for network incidents, leads root cause analysis, reduces recurring issues, and advances standards, automation, and continuous improvement across the managed network estate. The role also serves as a trusted network advisor to clients, leads design reviews and technical discovery, mentors other engineers and service desk staff, and collaborates across cloud, security, EUC, service delivery, and account teams. Participation in an escalation/on-call rotation is expected.

Requirements

At least 5 years of enterprise network engineering experience, including at least 4 years as a Cloud Network Engineer supporting multiple clients and systems.
Hands-on experience designing and supporting Azure networking and hybrid connectivity in production environments.
Strong experience administering Palo Alto and/or Fortinet next-generation firewalls.
Experience providing L3 escalation support, leading major incident triage, and completing root cause analysis in a managed services or multi-client environment.
Ability to move between design, hands-on implementation, troubleshooting, and client communication.
Microsoft Certified: Azure Network Engineer Associate (AZ-700) certification is required.
Technical expertise in Azure networking, including VNets, hub-and-spoke, and Virtual WAN.
Technical expertise in ExpressRoute, VPN, and hybrid connectivity.
Technical expertise with Palo Alto PAN-OS, Panorama, and VM-Series.
Technical expertise with Fortinet FortiGate and FortiManager.
Technical expertise in routing and switching, including BGP, OSPF, and VLANs.
Technical expertise in SD-WAN, load balancing, and DNS.
Technical expertise in Zero Trust, segmentation, and Azure Firewall.
Technical expertise in Terraform, Bicep, Ansible, and network automation.
Disciplined, methodical troubleshooting and strong network design judgment.
Consultative, client-focused communication during normal operations and high-severity incidents.
Ownership, accountability, urgency, and bias for action.
Ability to work independently while collaborating across cloud, security, and support teams.
Strong documentation, knowledge transfer, and diagramming skills.
Coaching mindset and willingness to grow the technical capability of the team.
Commitment to secure, stable, automated, and standards-driven network outcomes.

Nice To Haves

Palo Alto Networks Certified Network Security Professional certification.
Fortinet Certified Professional: Network Security certification.
Palo Alto Networks Certified Next-Generation Firewall Engineer certification.
Microsoft Certified: Azure Security Engineer Associate (AZ-500) certification.
CCNP Enterprise or equivalent certification.

Responsibilities

Design, deploy, and support Azure network architectures, including hub-and-spoke, Virtual WAN, VNets, peering, UDRs, NSGs, Private Endpoints, and Private DNS.
Implement and troubleshoot hybrid connectivity using site-to-site VPN, point-to-site VPN, and ExpressRoute.
Configure and support Azure Firewall, Application Gateway/WAF, Azure Load Balancer, Front Door, and DNS services.
Align network designs with Cloud Adoption Framework landing-zone connectivity guidance and Well-Architected principles.
Maintain network diagrams, IP address plans, architecture decisions, and configuration standards.
Design, deploy, and manage Palo Alto and Fortinet firewalls on-premises and in Azure.
Build and maintain security policies, NAT, IPsec tunnels, GlobalProtect and remote-access VPN, URL filtering, and threat-prevention profiles.
Apply Zero Trust and network-segmentation principles across cloud and data center environments.
Perform firewall rule reviews, policy cleanup, and security posture assessments; create prioritized remediation plans.
Coordinate with security operations teams on threat investigations, vulnerability remediation, and compliance requirements.
Support and optimize routing and switching environments, including BGP, OSPF, VLANs, STP, and Layer 2/Layer 3 designs.
Manage SD-WAN, wireless, load balancing, and data center network infrastructure.
Plan and execute network upgrades, migrations, firmware/OS lifecycle management, and data center-to-cloud transitions.
Validate capacity, redundancy, and failover designs to meet availability commitments.
Provide L3 escalation support for complex network, firewall, connectivity, and performance issues across multiple clients.
Lead technical triage, packet capture and traffic analysis, service restoration, and coordination with ISPs, vendors, and client teams.
Perform root cause analysis, document corrective actions, and eliminate recurring incidents through engineering improvements.
Improve network monitoring, alert quality, runbooks, and change and maintenance procedures.
Participate in an escalation/on-call rotation and provide clear, timely status communications during major incidents.
Automate network deployment and configuration tasks using Terraform, Bicep, Ansible, PowerShell, or Python.
Develop and enforce network standards, templates, and configuration baselines across client environments.
Review incident, ticket, and capacity trends to identify proactive improvements.
Track remediation completion, risk reduction, and service stability outcomes.
Serve as a trusted network advisor and escalation point for managed services clients.
Lead network design reviews, technical discovery, and recommendation readouts.
Mentor Systems Engineers and service desk staff and develop reusable troubleshooting guidance and knowledge articles.
Collaborate with Azure, security, EUC, service delivery, and account teams; support presales discovery and client onboarding into managed services.