insight - NC - Senior Level 3 Network Engineer

Senior L3 Network Engineer - Durham, NC 

Cisco | Palo Alto | SD-WAN | Cloud Networking | OT/Manufacturing

• One year assignment with potential to extend.
• Hybrid – 3 days onsite
• Experience Required: 10+ years of enterprise network engineering experience
• Work Authorization - US Citizen 

Ideal Candidate

• The successful candidate will be a senior-level network engineer who can operate independently in complex enterprise environments and has demonstrated expertise across Cisco, Palo Alto, SD-WAN, multi-cloud networking, automation, and manufacturing/OT networks.
• This position requires a candidate who can combine deep hands-on troubleshooting capabilities with network design, automation, security, and modernization experience.
• Important: This role requires candidates to meet the full technical profile. In particular, hands-on Ansible and Terraform experience is required and should not be considered optional.

Position Overview

We are seeking a highly experienced Senior L3 Network Engineer with deep expertise across Cisco networking, Palo Alto security, SD-WAN, cloud networking, network automation, and Operational Technology (OT)/manufacturing environments.

This is a senior-level, hands-on engineering role responsible for supporting complex enterprise, data center, cloud, WAN, and manufacturing networks. The ideal candidate must have strong troubleshooting and architecture experience and be comfortable supporting critical environments, leading modernization initiatives, resolving major incidents, and collaborating across security, cloud, compute, and infrastructure teams.

Candidates must meet all of the core technical requirements listed below, including hands-on experience with both Ansible and Terraform.

Key Responsibilities

• Provide Level 3 (L3) network support for enterprise, data center, cloud, and manufacturing network environments.
• Design, deploy, configure, maintain, and troubleshoot Cisco routing and switching infrastructure.
• Manage advanced routing technologies and protocols, including:
  • BGP
  • OSPF
  • EIGRP
  • MPLS
  • Route redistribution

• Configure and support Layer 2 and Layer 3 networking technologies, including:

  • VLANs
  • Spanning Tree Protocol (STP)
  • EtherChannel
  • HSRP
  • Quality of Service (QoS)

• Administer and support Palo Alto Strata Next-Generation Firewalls, including:

  • Panorama
  • GlobalProtect
  • NAT
  • Security policies
• Implement and support Zero Trust architectures, network segmentation, and IT/OT security controls.
• Design, deploy, and support enterpriseSD-WAN solutions, including:
  • Cisco SD-WAN / Viptela
  • Palo Alto Prisma SD-WAN
• Support projects within the Compute area, including the VMware vSAN project in the U.S. domestic region.
• Manage WAN connectivity across:
  • MPLS
  • Internet
  • Dedicated Internet Access (DIA)
  • VPN
  • Hybrid network environments
• Design, deploy, and support cloud networking across:
  • Microsoft Azure
  • Amazon Web Services (AWS)
  • Google Cloud Platform (GCP)
• Implement and maintain cloud connectivity and networking solutions, including:
  • Azure ExpressRoute
  • AWS Direct Connect
  • Cloud VPN
  • AWS Transit Gateway
  • Azure Virtual WAN

• Support Operational Technology (OT) and industrial network environments, including:

  • Manufacturing networks
  • SCADA
  • PLC systems
  • MES environments
  • Other industrial systems
• Perform root cause analysis, problem management, and major incident resolution for complex network outages and performance issues.
• Develop and maintain network automation and Infrastructure-as-Code (IaC) solutions using:
  • Terraform
  • Ansible
  • Python
• Monitor network performance, availability, and security using enterprise monitoring and security platforms.
• Create and maintain detailed technical documentation, network standards, diagrams, procedures, and operational documentation.
• Lead and contribute to network modernization initiatives and strategic infrastructure projects.
• Collaborate closely with security, cloud, compute, infrastructure, and application teams to deliver enterprise technology initiatives.

Required Skills & Experience

Candidates must have strong, hands-on experience with the following:

• 10+ years of enterprise network engineering experience
• Cisco Routing & Switching, including:
  • Catalyst
  • Nexus
  • ISR
  • ASR
• Palo Alto technologies, including:
  • Strata
  • Panorama
  • GlobalProtect
• SD-WAN technologies:
  • Cisco Viptela
  • Palo Alto Prisma SD-WAN
• Cloud networking across:
  • Azure
  • AWS
  • GCP
• Advanced routing protocols:
  • BGP
  • OSPF
  • EIGRP
  • MPLS
• Network Security and Zero Trust architecture
• OT / Industrial Networking, including:
  • SCADA
  • PLC
  • MES
  • Manufacturing network environments
• Terraform – required
• Ansible – required
• Network automation and Infrastructure-as-Code practices
• Python for network automation
• Network troubleshooting, monitoring, and security tools, including:
  • Wireshark
  • SolarWinds
  • ThousandEyes
  • Splunk
• Strong experience supporting enterprise WAN, data center, cloud, and hybrid networking environments.
• Strong troubleshooting skills with demonstrated experience handling major incidents,root cause analysis, and complex L3 escalations.

Preferred Certifications

• CCNP – preferred
• PCNSE – preferred

Additional Information

• All candidates are encouraged to apply, but many positions require a strict drug and background check by our customers.
• F2OnSite supports and adheres to all state laws regarding background checks.