Senior L3 Network Engineer

CTI Consulting
  • Pleasanton, California
    18 days ago

    Job Description

    About This Opportunity

    CTI Staffing is partnering with a leading consumer goods manufacturer to find a Senior L3 Network Engineer for their network security team based in Pleasanton, CA. This team is leading a plant-wide network remediation and OT security initiative, converging IT and industrial network environments while modernizing core routing infrastructure. This is a high-visibility role for someone who wants to own both the network backbone and the industrial security layer protecting it.

    What You'll Do

    • Serve as the subject matter expert for BGP routing across data center, WAN, and cloud environments
    • Design and enforce Zero Trust microsegmentation across industrial control system environments
    • Architect and deploy industrial-grade WiFi networks engineered for high-interference manufacturing environments
    • Administer next-generation firewall infrastructure and Zero Trust security policies
    • Design and support SD-WAN solutions across hybrid WAN and direct cloud connectivity
    • Implement and maintain multi-cloud network architecture across major cloud providers
    • Build network automation using infrastructure-as-code tooling
    • Lead root cause analysis and resolution for major network incidents


    Requirements

    What You Bring

    Must-Have:

    • 10+ years of enterprise network engineering experience across data center, cloud, and manufacturing/OT environments
    • SME-level expertise in BGP routing, including traffic engineering and route redistribution at enterprise scale
    • Demonstrated hands-on experience designing and deploying industrial/OT WiFi networks in factory floor settings
    • Experience with OT/ICS microsegmentation technologies protecting SCADA/PLC/MES systems
    • Deep experience with enterprise-grade routing and switching platforms
    • Strong background administering next-generation firewalls and Zero Trust security policies
    • Experience designing and deploying SD-WAN solutions
    • Native multi-cloud networking experience across major cloud platforms

    Nice-to-Have:

    • Infrastructure-as-code experience (Terraform, Ansible, Python)
    • Experience with enterprise network monitoring platforms
    • CCNP Enterprise / CCIE (Routing & Switching, Enterprise, or Wireless)
    • PCNSE certification
    • CWNA or ISA/IEC 62443 Cybersecurity Specialist certification

    Technical Environment:

    • Cisco Catalyst, Nexus, ISR/ASR routing and switching
    • Palo Alto Strata, Panorama, GlobalProtect
    • Cisco Viptela and Palo Alto Prisma SD-WAN
    • Azure, AWS, GCP
    • Terraform, Ansible, Python
    • Wireshark, SolarWinds, ThousandEyes, Splunk

    What Success Looks Like:

    • OT network segmentation implemented and validated within the first 3-6 months
    • Industrial WiFi deployment completed with documented RF site survey results
    • Stable, well-documented BGP routing posture across WAN and cloud connectivity




    Numbers & Facts

    LocationPleasanton, California

    Skills

    • Amazon Web Services (AWS)unmatched
    • Ansibleunmatched
    • Automationunmatched
    • BGPunmatched
    • CCIE - Cisco Certified Internetwork Expertunmatched
    • CCNP - Cisco Certified Network Professionalunmatched
    • Cisco Catalyst Switchesunmatched
    • Cisco Network Systemsunmatched
    • Cisco Nexus Switchesunmatched
    • Cloud Architectureunmatched
    • Cloud Computingunmatched
    • Computer Telephony Integration (CTI)unmatched
    • Control Systemsunmatched
    • Engineeringunmatched
    • Firewallsunmatched
    • GCP (Good Clinical Practices)unmatched
    • ISA Standardsunmatched
    • Industrial Designunmatched
    • International Electro-Technical Commission (IEC)unmatched
    • Internet Securityunmatched
    • Layer 3 Protocolsunmatched
    • Machine Toolunmatched
    • Manufacturingunmatched
    • Manufacturing Execution Systems (MES)unmatched
    • Microsoft Windows Azureunmatched
    • Multiplatform/Cross-Platformunmatched
    • Network Architecture/Engineeringunmatched
    • Network Monitoringunmatched
    • Network Operations Centerunmatched
    • Network Routersunmatched
    • Network Routingunmatched
    • Network Securityunmatched
    • Network Switchingunmatched
    • Programmable Logic Controller (PLC)unmatched
    • Python Programming/Scripting Languageunmatched
    • Root Cause Analysisunmatched
    • Splunkunmatched
    • Supervisory Control and Data Acquisition (SCADA)unmatched
    • Wide Area Network (WAN)unmatched
    • Wireless Communicationsunmatched
    • Wireshark (Ethereal)unmatched

    Be found by employers

    5,500+ employers search our resume database daily. Add yours to get found by recruiters looking for candidates like you.

    Level up your application

    Professional resume templates

    Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

    Free resume templates

    Free resume builder

    Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

    Free resume builder