Network Engineer
About The Position
We are launching a comprehensive initiative to modernize network architecture across corporate offices, branch locations, and manufacturing plants. This project focuses on standardizing LAN and edge designs, upgrading firewall security platforms, and simplifying IT/OT segmentation through a migration to Prisma SD-WAN. The Senior Network Engineer will execute a standardized Core/Distribution/Access model to improve scalability and performance. Key objectives include: Gateway Migration: Moving select VLAN gateways from firewalls to Core Switch SVIs to optimize traffic flow. Security Refresh: Replacing legacy PA-440 firewalls with PA-1420 platforms. Segmentation: Optimizing OT network environments with dedicated IT/OT core switching and reduced firewall zone complexity. SD-WAN Standardization: Transitioning edge infrastructure from VeloCloud to Prisma SD-WAN. 1. Firewall & Security Infrastructure Perform physical rack, cable, and power installation of new PA-1420 units. Execute complex configuration migrations involving security zones, NAT, VPNs, and granular policies. Enable dynamic routing and validate overall system health post-migration. 2. LAN & SVI Gateway Migration Configure VLANs and SVIs on IT/OT core switches to handle routing locally. Update routing tables across the firewall and SD-WAN environment. Test and validate inter-VLAN routing and critical application connectivity. 3. SD-WAN Deployment (VeloCloud to Prisma) Rack and provision Prisma ION devices. Migrate active WAN circuits while validating tunnels, security policies, and failover redundancy. Decommission and inventory legacy VeloCloud equipment. 4. Deployment & Validation Conduct site readiness checks and device staging. Lead cutover execution during designated maintenance windows to minimize business impact. Perform exhaustive testing, including failover validation, IT/OT segmentation checks, and user connectivity verification.
Requirements
- Extensive experience with Palo Alto Firewalls (PA-1420 preferred) and Prisma SD-WAN.
- Advanced proficiency in L2/L3 switching, SVI configuration, and dynamic routing protocols.
- Experience working in manufacturing environments with specific IT/OT segmentation needs.
- Ability to work with standardized templates, checklists, and repeatable build-test-cutover processes.
Responsibilities
- Perform physical rack, cable, and power installation of new PA-1420 units.
- Execute complex configuration migrations involving security zones, NAT, VPNs, and granular policies.
- Enable dynamic routing and validate overall system health post-migration.
- Configure VLANs and SVIs on IT/OT core switches to handle routing locally.
- Update routing tables across the firewall and SD-WAN environment.
- Test and validate inter-VLAN routing and critical application connectivity.
- Rack and provision Prisma ION devices.
- Migrate active WAN circuits while validating tunnels, security policies, and failover redundancy.
- Decommission and inventory legacy VeloCloud equipment.
- Conduct site readiness checks and device staging.
- Lead cutover execution during designated maintenance windows to minimize business impact.
- Perform exhaustive testing, including failover validation, IT/OT segmentation checks, and user connectivity verification.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Career Level
Mid Level
Education Level
No Education Listed
