Sr. Network Engineer with Palo Alto & Cisco Nexus || Remote role

DMS Vision•Frisco, TX

2d•Remote

About The Position

The Senior Network Engineer will oversee and manage Beachbody’s network infrastructure, including corporate LAN, WLAN, and WAN; data center networking and storage area networking; enterprise network security; public cloud networking in AWS; and third-party connectivity such as VPNs. The role provides third-level technical support for LAN/WAN, wireless, and security technologies and involves network engineering in a large server environment, cloud networking and security, and a wide range of infrastructure work. This is a 95% remote role, but the candidate must be located within approximately two hours of El Segundo, California, and may need to visit the data center for configuration work. The position is listed as a contract of six or more months. The engineer is expected to plan complex changes carefully, follow strict change-management procedures, document work professionally, communicate effectively, and contribute to improvements while maintaining a positive, detail-oriented, and current approach to networking technologies.

Requirements

Experience with routing and switching using Cisco Nexus; experience with Cisco Catalyst, ASR, and ISR equipment is also specified.
Knowledge and experience with Layer 3 technologies such as OSPF, BGP, and HSRP.
Knowledge and experience with Layer 2 technologies such as spanning tree and VPCs.
In-depth Palo Alto firewall and Panorama configuration experience, including security policies, application filters, security profiles, URL filtering, SSL decryption, site-to-site VPN, GlobalProtect VPN, device groups, and templates.
Advanced F5 BIG-IP administration, including networking, LTM virtual servers, web redirects, SSL certificate management, iRules, load balancing, health monitors, AFM security, and vCMP.
Ability to troubleshoot application flows with developers and use TCPDUMP and Wireshark to investigate suspected network issues.
Experience coordinating, deploying, and rotating public and private SSL certificates.
Experience with Cisco Unified Computing and UCS Manager (UCSM).
Good understanding of VMware networking and experience troubleshooting network and storage connectivity with Fabric Interconnects.
Experience managing internal and external DNS records, including A, CNAME, MX, and SPF records.
AWS networking and security experience, including VPCs, NACLs, security groups, route tables, elastic load balancers, Direct Connect, Transit Gateway, and Route 53.
Network engineering experience in a large server environment.
Experience with cloud-computing concepts, particularly networking and security.
Strong planning, communication, documentation, attention-to-detail, and change-management skills; ability to work flexibly and take initiative.

Nice To Haves

Experience with Cisco ACI, including APIC, L3outs, contracts, bridge domains, EPGs, VMM integration, and switch profiles.
Experience managing and maintaining Cisco Unified Communications environments, including CUCM, Unity, voice gateways, Cube, SIP circuits, POTS lines, and DIDs.
Experience with network tools such as Live Action and NetBrain.
Knowledge and experience with Cisco ISE for device administration, including AAA and TACACS+.
Experience with Cisco MDS administration, particularly zoning.
Experience with Cisco Meraki switches and wireless access points.
Knowledge and experience with Palo Alto Prisma Access.
F5 BIG-IP experience is described as a plus, with training available.

Responsibilities

Oversee and manage corporate LAN, WLAN, and WAN; data center networking and storage area networking; enterprise network security; AWS public cloud networking; and third-party connectivity such as VPNs.
Provide third-level technical support for LAN/WAN, wireless, and security technologies.
Plan complex changes carefully, particularly changes that could cause an outage, and follow strict change-management procedures.
Configure and administer Palo Alto firewalls and Panorama, including security policies, application filters, security profiles, URL filtering, SSL decryption, site-to-site VPNs, GlobalProtect VPNs, device groups, and templates.
Administer F5 BIG-IP networking and load-balancing capabilities, including virtual servers, web redirects, SSL certificates, iRules, health monitors, AFM security, and vCMP.
Troubleshoot application flows in coordination with application developers, using tools such as TCPDUMP and Wireshark.
Coordinate, deploy, and rotate public and private SSL certificates for infrastructure and public-facing resources.
Manage Cisco Unified Computing and UCS Manager, and troubleshoot network and storage connectivity involving VMware networking and Fabric Interconnects.
Manage and maintain internal and external DNS, including A records, CNAMEs, MX records, and SPF records.
Configure and support AWS networking and security, including VPCs, NACLs, security groups, route tables, elastic load balancers, Direct Connect, Transit Gateway, and Route 53.
Document work professionally, communicate effectively, and identify opportunities for improvement.