Senior Network Engineer

Job description

Accountabilities Design, deploy, maintain, and optimize enterprise and service-provider network infrastructure across on-premises, colocation, and cloud environments. Configure and operate BGP, OSPF, and other dynamic routing protocols, including route policies, redistribution, filtering, and traffic engineering. Manage upstream transit, internet peering, internet exchange, and routing relationships. Plan and manage IPv4/IPv6 addressing, subnetting, dual-stack deployments, ARIN/RIR resources, IRR, and RPKI. Implement and maintain network security controls including segmentation, firewalls, ACLs, VPNs, tunneling, access controls, and DDoS mitigation. Deploy and operate network monitoring, alerting, flow analysis, and observability platforms to maintain infrastructure health and performance. Automate network configuration, validation, provisioning, and deployment using Python, Bash, Go, Ansible, Terraform, or similar technologies. Lead troubleshooting and incident response for complex network issues, including packet-level analysis, root-cause investigations, and remediation. Perform capacity planning, infrastructure lifecycle management, maintenance windows, and network cutovers while minimizing customer impact. Maintain accurate network diagrams, IP and asset records, configurations, runbooks, and change documentation. Support compliance and audit activities by providing configuration evidence, addressing findings, and enforcing security baselines. Act as a senior technical escalation point for complex networking issues and provide mentorship to junior engineers. Work directly with customer technical contacts to understand requirements, communicate technical issues, and deliver effective solutions. Requirements 6+ years of professional network engineering experience in production environments, with exceptional candidates potentially qualifying through demonstrated technical ownership and relevant technical work. Expert knowledge of TCP/IP and hands-on production experience with BGP and at least one IGP such as OSPF, IS-IS, or EIGRP. Strong routing and switching fundamentals, including VLANs, trunking, spanning tree, link aggregation, QoS, MTU, and fragmentation. Hands-on experience with enterprise or carrier-grade platforms such as Cisco IOS/NX-OS, Juniper Junos, Arista EOS, MikroTik RouterOS, or equivalent technologies. Practical experience implementing and troubleshooting firewalls, IPsec, WireGuard, SSL VPNs, tunneling, and network access controls. Working knowledge of DNS, DHCP, NTP, TLS/PKI, and load-balancing technologies. Strong IPv4/IPv6 addressing, subnetting, and dual-stack networking experience. Strong Linux administration and command-line skills. Proven ability to troubleshoot complex network problems using tcpdump, Wireshark, packet captures, and flow data. Experience developing network automation and scripts using Python, Bash, Go, or similar languages. Experience with Git and configuration-as-code practices. Ability to work independently, manage competing priorities, and communicate clearly in a remote environment. Legally authorized to work in the United States without sponsorship and able to pass a background investigation. Willingness to participate in an on-call rotation and scheduled after-hours maintenance. A bachelor’s degree in Computer Science, Information Technology, Network Engineering, or a related field is preferred; equivalent professional experience, military experience, certifications, or demonstrated technical expertise may substitute. Preferred experience includes federal government or contracting environments, particularly DHS, DoD, or civilian agencies. Active, prior, or eligible U.S. security clearance is a plus. Relevant certifications such as CCNP/CCIE, JNCIP/JNCIE, Arista ACE, Network+, or Security+ are preferred. Service-provider or ISP experience involving internet peering, transit, IXP operations, or RIR resource management is advantageous. Experience with RPKI, IRR, BGP origin validation, and route-security practices is a plus. Cloud networking experience with AWS, Azure, or GCP, including VPC/VNet design, transit gateways, ExpressRoute/Direct Connect, and hybrid connectivity, is preferred. Experience with Ansible, NAPALM, Nornir, Terraform, CI/CD, or other network automation frameworks is advantageous. Familiarity with NetFlow, sFlow, IPFIX, Prometheus, Grafana, LibreNMS, ELK, or SIEM integrations is a plus. Advanced security experience involving DDoS mitigation, IDS/IPS, threat modeling, deception, or traffic analysis is beneficial. Familiarity with SD-WAN, MPLS, VXLAN, or overlay networking technologies is preferred. Knowledge of NIST 800-53, FISMA, FedRAMP, CMMC, or similar compliance frameworks is advantageous. Open-source contributions, a public networking or systems portfolio, mentoring experience, or experience leading small technical teams are valued. Benefits Annual compensation of $130,000–$150,000. Medical, dental, and vision insurance. 401(k) plan with company contribution. Paid time off and federal holidays. Professional development, certification, and training support. Remote-first work environment for candidates authorized to work in the United States. Opportunity to work on complex networking infrastructure across government and commercial environments. Occasional travel to customer facilities, data centers, or company meetings. Participation in an on-call rotation with scheduled after-hours maintenance and incident response. How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1 This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Network Engineer based in the United States. This role is an opportunity to take ownership of highly available, secure, and resilient network infrastructure supporting government and commercial environments. You will operate as a senior technical individual contributor across enterprise, service-provider, colocation, and cloud networks. The position combines deep routing and switching expertise with network security, automation, observability, and incident response. You will work on complex infrastructure challenges involving BGP, IPv4/IPv6, carrier relationships, hybrid connectivity, and network modernization. You will also help strengthen operational practices through automation, documentation, monitoring, and capacity planning. Success in this role requires strong technical judgment, independence, and the ability to communicate effectively with both customers and engineering teams.