Network Security Engineer- Data Center

Role Summary
This position is a senior-level Network and Security Engineer responsible for designing, deploying, and maintaining advanced networking and security solutions across complex environments. The role encompasses the assessment of new technologies, troubleshooting, and automating network and security functions to support organizational and client needs. The individual will be integral to transformative initiatives that drive automation, self-service capabilities, and optimized network architecture.

Responsibilities

• Design, implement, and maintain large-scale data center network architectures, including Layer 2 and Layer 3 solutions such as MPLS, VxLAN, and EVPN.
• Troubleshoot and diagnose complex networking and security issues across OSI layers, utilizing industry best practices for resolution.
• Develop and execute network automation scripts and solutions using languages and tools such as Python, Ansible, Netmiko, and APIs.
• Configure and maintain protocols including BGP, OSPF, EIGRP, IPSEC, DMVPN, VLANs, MPLS, and related security protocols like SSL and TLS.
• Lead deployment of data center fabrics and multi-tenant network solutions, ensuring high availability and security compliance.
• Collaborate with management and business partners to translate technical designs into clear documentation and reports.
• Manage internet peering points, public IP addresses, and DDOS mitigation strategies for optimal network security and performance.
• Support the integration of Software Defined Networking (SDWAN, NFV) solutions and cloud provider peering for scalable connectivity.
• Maintain detailed task management records, ensuring meticulous documentation of network configurations, upgrades, and troubleshooting efforts.
• Stay current with industry standards and emerging technologies to recommend and implement innovative solutions within the network infrastructure.

Qualifications

• Extensive experience in designing, deploying, and managing large-scale data center networks with Layer 2 and Layer 3 technologies, including MPLS, VxLAN, and EVPN.
• Proven expertise with Cisco IOS, NXOS, and Arista EOS network equipment, including fabric deployments and multi-data-center interconnections.
• Strong understanding of routing protocols such as BGP, OSPF, and complex routing policies.
• Hands-on experience with SDWAN, NFV, and cloud peering solutions.
• Proficiency in coding and automation scripting with Python, Ansible, Netmiko, YAML, JSON, and vendor APIs.
• Ability to clearly communicate technical concepts to management and non-technical stakeholders.
• Knowledge of security protocols including IPSEC, SSL/TLS, RPKI, and PCI/DSS compliance standards.
• Experience supporting virtualization platforms such as VMWare with network integration (VMotion, HCX, etc.).
• This position requires eligibility for a U.S. Government security clearance. In accordance with federal law, U.S. citizenship is required,
• Eligibility for government security clearances, including 6C or C2 clearances.
• Availability to work on-site in a fast-paced, dynamic environment and manage multiple priorities effectively.

Publishing Pay Range: $48.91 – $51.12 Hourly

This position is based in office and requires employee to work on-site.