Network Engineer

XIFIN • San Diego, CA

3h • $99,000 - $145,000 • Onsite

About The Position

A Network Engineer will contribute to daily operations, ticket resolution, network planning, and documentation, while also supporting ongoing network infrastructure projects. Our environment spans on-premises datacenters and public cloud networks in Azure and AWS. This role operates in a highly secure, confidential, and regulated setting, requiring a strong security-by-design mindset and comfort working within rigorous cybersecurity and audit expectations. The position will require occasional travel to remote datacenters and offices across the U.S. The role includes participation in on-call and will require evening and weekend work to support maintenance windows and operational needs.

You may be hired as a Network Engineer or Sr. Network Engineer based on your depth of skill and breadth of experience. This position will be located at our office in our San Diego, California.

Requirements

• 3-5 years of hands-on experience in enterprise network engineering, including network design, implementation, and troubleshooting
• Strong proficiency with routing and switching concepts and protocols, including BGP, OSPF, MPLS, and VLANs
• Solid foundation in network security principles, with hands-on experience implementing secure network designs
• Experience working with enterprise networking and security technologies, including: Palo Alto Networks platforms Cisco technologies (including Meraki) F5 load balancing solutions Azure and AWS networking services
• Demonstrated experience implementing security best practices and security-by-design methodologies
• Experience applying CIS Benchmark hardening or equivalent standards-based security hardening
• Experience supporting environments subject to audit and compliance requirements, including SOC 1 / SOC 2, HITRUST, and PCI
• Proven ability to troubleshoot complex network and security issues in highly available, regulated environments

Nice To Haves

• Curiosity-driven problem solver who proactively seeks out new technologies, architectures, and best practices to continuously improve network reliability, security, and performance.
• Collaborative partner and trusted advisor who thrives in cross-functional environments, actively listening to business needs and translating them into scalable, secure network solutions.
• Ownership mindset with high accountability, taking pride in building resilient systems, anticipating risks, and following through to ensure exceptional outcomes for customers and internal teams.
• Adaptable learner with a growth mindset, embracing change in cloud, security, and networking technologies while mentoring others and elevating the team’s collective expertise.
• Detail-oriented yet strategic thinker, balancing hands-on execution with long-term vision to design networks that scale with the business and support future innovation.

Responsibilities

• Design, implement, support, and maintain enterprise network infrastructure across datacenter and cloud environments.
• Maintain network security controls including segmentation, firewall policy governance, and secure remote access.
• Security by design incorporating security best practices into planning, engineering decisions, changes, tasks, and project execution.
• Support and administer Palo Alto platforms (on-prem firewalls, Panorama, GlobalProtect) and cloud security capabilities such as Prisma SASE, ADEM, Prisma Access and Strata Cloud Manager
• Support security and access technologies such as TACACS, Cisco ISE, XDR, and Cisco Umbrella.
• Support Cisco routers, Cisco Nexus switching, and Cisco Meraki environments, including modern segmentation/security approaches including Hypershield and employing routing and switching technologies (e.g., BGP, OSPF, MPLS, VLANs).
• Apply and validate CIS Benchmark hardening and aligned security controls.
• Support cloud networking services and connectivity patterns, including Azure Firewall, Application Gateway, Azure WAF, VPN Gateway, ExpressRoute
• Implement and support Azure hub-and-spoke architecture and AWS VPC design routing, segmentation, and security controls
• Configure and support network logging/telemetry using various toolsets; Splunk, Azure Event Hub, Log Analytics, CloudWatch and use logs to accelerate troubleshooting and root cause analysis.
• Participate in incident response for complex network/security issues; perform root cause analysis and drive permanent corrective actions.
• Maintain accurate network documentation including diagrams, standards, runbooks, and change records.
• Use automation tools such as Ansible and Terraform to enable network automation and infrastructure-as-code for standardized builds, configuration, and deployments.
• Participate in on-call responsibilities and maintenance windows for critical infrastructure support.

Benefits

• Comprehensive health benefits including medical, dental, vision, and telehealth
• 401(k) with company match and personalized financial coaching to support your financial future
• Health Savings Account (HSA) with company contributions
• Wellness incentives that reward your preventative healthcare activities
• Tuition assistance to support your education and growth
• Flexible time off and company-paid holidays
• Social and fun events to build community at our locations!

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level