Senior Network Engineer

Orion Innovation • New York, NY

9d

About The Position

Orion Innovation is seeking senior data center network engineers for a project with a Tier-1 global bank. The engineers will design, implement, automate, and operate the bank’s data center and DMZ networks. The role combines spine-leaf fabric engineering on Cisco and Arista platforms, F5 BIG-IP application delivery, network automation, production support, and adherence to the bank’s change management and design authority processes. The project overview describes a target profile of roughly 15 years of experience, while the required skills specify 10 or more years of hands-on data center networking experience.

The engineers will turn approved designs into implementation plans, conduct quality assurance and validation, assess production risk, and support audits and regulatory reviews. They will document designs, hand services over to Operations, coach junior engineers on automation practices, and report progress to the engagement lead and client engineering managers.

Requirements

• 10 or more years of hands-on data center networking experience across design, implementation, and operations.
• Experience with spine-leaf architecture, VXLAN/EVPN, and data center SDN, including Cisco ACI and Nexus, and Arista EOS and CloudVision.
• F5 BIG-IP experience with LTM, GTM/DNS, iRules, SSL/TLS offload, high availability, and troubleshooting in a DMZ or multi-tier data center.
• Experience with routing and switching technologies and protocols including BGP, OSPF, IS-IS, multicast, MPLS, QoS, and VPN/tunneling such as IPsec, GRE, and MACsec.
• Knowledge of network security fundamentals, including segmentation, firewall and DMZ design, and ACLs.
• Automation skills using Python, Ansible, YAML, REST APIs, JSON/XML, and Git-based change control.
• Experience with troubleshooting and monitoring tools such as Wireshark, NetScout, SolarWinds, and similar packet and flow analysis tools.
• Knowledge of ITIL processes, including change, incident, problem, and request management.
• Clear written and verbal communication skills, including the ability to produce executive summaries and Visio-level design diagrams.

Nice To Haves

• Experience with F5 AS3/Declarative Onboarding and BIG-IQ.
• At least one professional-level certification preferred: CCNP or CCIE (Data Center), Arista ACE, F5 Certified (F5-CA or higher), or CISSP.
• Prior experience at a large bank.

Responsibilities

• Design, build, and operate spine-leaf (VXLAN/EVPN) data center fabrics on Cisco and Arista platforms.
• Engineer and support F5 BIG-IP application delivery for data center and DMZ environments, including load balancing, SSL/TLS offload, global traffic management, and web application firewall policies.
• Build and maintain network automation for provisioning, configuration compliance, validation, and drift detection using Python, Ansible, and an orchestration platform such as Itential.
• Translate approved designs into implementation plans that include test and acceptance criteria, back-out plans, and validation procedures.
• Conduct quality assurance reviews before implementations and follow the bank’s change management and design authority processes.
• Provide Level 3 escalation for production network incidents and drive root cause analysis.
• Assess production risk and protect service resiliency during every change.
• Support audits, compliance reviews, and regulatory exams with accurate documentation.
• Document designs and hand services over to Operations.
• Coach junior engineers on automation practices.
• Report milestone progress to the engagement lead and the client’s engineering managers.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed