Senior Network Engineer

IPSecure•San Antonio, TX

16d

About The Position

IPSecure is seeking an experienced Senior Network Engineer to support the design, integration, configuration, testing, and security of advanced network infrastructure in a lab-based engineering environment. The role combines traditional network engineering, cybersecurity, and software-defined networking expertise, with a focus on Cisco Application Centric Infrastructure (ACI), SDN, Cisco routing and switching, enterprise firewalls, IP addressing and subnetting, network segmentation, and virtualization technologies. The engineer will work with engineering, cybersecurity, systems administration, and test teams to build, configure, secure, troubleshoot, and validate network architectures before deployment into operational environments. The position supports lab and test environments used for integration, troubleshooting, cybersecurity validation, and engineering development, and includes technical documentation, configuration testing, and coordination across infrastructure teams.

Requirements

Active TS/SCI clearance.
Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline; equivalent experience may be substituted.
Security+ and CCNA certifications.
10+ years of experience in network engineering, cybersecurity engineering, network security, or a related technical field.
Hands-on experience configuring and troubleshooting enterprise routers, switches, and firewalls.
Experience with Cisco ACI and SDN.
Strong understanding of IP networking, routing, switching, subnetting, VLANs, and network segmentation.
Experience supporting complex lab, integration, test, development, or production network environments.
Experience working with virtualized infrastructure.
Strong troubleshooting and root-cause analysis skills.
Ability to develop and maintain detailed technical and network documentation.
Hands-on knowledge of Cisco APIC administration and configuration; ACI leaf/spine architecture; tenants and VRFs; bridge domains; endpoint groups; application profiles; contracts and filters; physical and virtual domains; VLAN pools; external Layer 2/Layer 3 connectivity; L3Out configuration; routing integration; network segmentation and micro-segmentation; ACI troubleshooting and fault analysis; SDN policy-based networking; and network automation and programmable infrastructure concepts.

Nice To Haves

Experience integrating ACI with virtualized environments, firewalls, external routing infrastructure, and traditional Cisco networks.
Cisco CCNP Enterprise certification.
Cisco CCNP Data Center certification.
Cisco Certified DevNet Professional certification.
Cisco ACI-focused training or certification.

Responsibilities

Design, configure, integrate, secure, and troubleshoot enterprise network infrastructure in lab and test environments.
Engineer and support Cisco ACI architectures, including APIC controllers, leaf/spine architectures, tenants, VRFs, bridge domains, endpoint groups, contracts, and external connectivity.
Support SDN technologies and network automation concepts for centrally managing and securing infrastructure.
Configure and troubleshoot Cisco routers and switches, including Layer 2 and Layer 3 networking.
Develop and maintain IP addressing and subnetting schemes, VLANs, VRFs, routing domains, and network segmentation strategies.
Configure and troubleshoot BGP, OSPF, and static routing.
Engineer and support enterprise firewall and network security solutions, including security policies, access control rules, NAT, VPN connectivity, segmentation, and traffic inspection.
Analyze network traffic and connectivity using packet captures, logs, monitoring platforms, and diagnostic tools.
Harden network infrastructure in accordance with applicable security requirements and organizational standards.
Identify vulnerabilities, configuration weaknesses, unnecessary services, and segmentation issues; recommend remediation.
Support Zero Trust and defense-in-depth architectures, including segmentation and least-privilege communications between systems and security zones.
Build and maintain representative network environments for integration, testing, troubleshooting, cybersecurity validation, and engineering development.
Develop network diagrams, interface documentation, IP address plans, configuration documentation, test procedures, and other engineering artifacts.
Conduct configuration testing and validation before implementation in production or mission environments.
Troubleshoot complex connectivity issues across routers, switches, firewalls, virtual networks, servers, and applications.
Coordinate with cybersecurity, systems, virtualization, application, and engineering teams to resolve cross-domain infrastructure issues.
Support change management, configuration management, technical documentation, and engineering review processes.