Logo
ICE Consulting - Managed IT Services

Senior Network Engineer

ICE Consulting - Managed IT Services, Milpitas, California, United States, 95035


Description:Work with clients to provide advanced network support utilizing a deep understanding of routing and switching protocols, network security, good operational experience to isolate, analyze and resolve issues in a fast-paced environment with limited supervision to maintain SLAs and Service Agreements. Duties include:Serve as the Subject Matter Expert (SME) for network technologies that include switching, routing, routing protocols, cloud services (AWS, Azure, etc.)Provide network design, implementation and installation of firewalls, switches, Wi-Fi infrastructure at client officesProvide network security services related to implementing firewall security policies for BioTech labsDesign and implement cloud, hybrid, and Wi-Fi networks with security in mind.Serve as the primary network engineer for key clients including US Government Contractors, Global, and Hi-demand clients.Maximize network performance by monitoring performance; troubleshooting network problems and outages; scheduling upgrades; collaborating with network architect on network optimization projects.Automate the network manual process with proven toolsDesign and implement network architecture based on Industry and vendor best practices.Participates in IT security audits. Responds to existing audits and ensures required controls are implemented as required.Mentor other network engineers on various network technologies and industry developmentsDevelop network runbooks and automation to minimize routine manual work.Automate tasks and monitor their effectiveness.Serve as the escalation point for Security Operations Center issues.Serve as the Tier 2 escalation point for network operations support to include On-Premises, Hybrid Cloud, and Cloud Based NetworkingReport network operational status to clients by gathering, prioritizing information; writing reports and root cause analysis (RCA)Secure network system by establishing and enforcing policies; defining and monitoring access.Create, oversee, and test security measures (e.g., access authentication and disaster recovery)Maintain complete documentation.Suggest improvements to network performance, capacity, and scalability.RequirementsExcellent knowledge of routing, switching, network security, and associated hardware platformsMulti-Vendor Knowledge of Edge, Core, and Access Switches, Firewalls, and Wireless Networks.

Standard platform vendors include but not limited to: firewalls (Palo Alto Network, FortiGate, Meraki, etc.), switches (Cisco, Aruba, FortiNet, Arista, Meraki, etc.), Wi-Fi (Aruba, FortiAP, Meraki, etc.)Extensive knowledge of Next Generation Firewalls (NGFW), stateful packet inspection and ACLs Universal Threat Management (UTM) Features, Capabilities, and Firewall Objects, Rules, and PoliciesExtensive experience with Layer 3 Routing and Protocols, and SDWan knowledge.Experience with Layer 2 protocols and associated enhancements (LACP, 802.1x, etc.) required.Knowledge of the following areas is required: VPN (IPSec, and SSL VPNs,), Wireless (802.1b/g/n/ac/ax Wi-Fi 6 and 6E), and DNS/DHCPKnowledge/experience in the following areas is highly desired:Zero Trust NetworksNACSD-WANNetwork Monitoring using Nagios / CheckMKNetwork Virtualization (Virtual Firewalls, Network Analyzers, etc.)RadiusQOSVoIPKnowledge/experience in any of the following areas is a plus:ZTNA (zScaler ZPA, ZIA, and ZTA)PAM (BeyondTrust and CyberArk)SIEM (Azure Sentinel, Splunk)Bachelor’s Degree or equivalent work experience7 Years in a senior level network engineering/operations roleSkills:Excellent analytical skills and the ability to operate independently.Excellent verbal and written skillsExcellent time management and organizational skillsStrong interpersonal skills both with clients and within the organizationBachelor’s Degree in Computer Science or Computer Engineering a plus