Senior Network Engineer – TS/SCI Clearance Required – Port San Antonio – San Antonio, TX Job Description We are seeking a highly skilled Senior Network Engineer to support the design, implementation, administration, modernization, and sustainment of complex enterprise and data center network environments. The ideal candidate will possess extensive hands-on experience with Cisco networking technologies, including Cisco IOS, IOS XE, NX-OS, Application Centric Infrastructure (ACI), Catalyst and Nexus switching platforms, spine-leaf architectures, and Cisco Identity Services Engine (ISE). The candidate must also demonstrate strong technical proficiency with Palo Alto Networks next-generation firewalls, Panorama centralized management, Dell SmartFabric OS10 switching platforms, and legacy Dell networking infrastructure. This position requires an engineer capable of independently troubleshooting complex Layer 2 through Layer 7 connectivity issues, developing scalable network solutions, maintaining secure and resilient infrastructure, and integrating network technologies across multiple vendor platforms. Job Responsibilities Enterprise and Data Center Networking - Design, configure, deploy, maintain, and troubleshoot enterprise and data center network infrastructure.
- Configure, administer, upgrade, and troubleshoot Cisco networking devices running IOS, IOS XE, and NX-OS.
- Support Cisco Catalyst and Nexus switching platforms, including spine-leaf network architectures.
- Design, deploy, administer, and troubleshoot Cisco ACI fabrics, including APIC controllers, endpoint groups (EPGs), bridge domains, tenants, contracts, and fabric policies.
- Configure and maintain routing and switching technologies, including BGP, OSPF, VLANs, VRFs, VXLAN/EVPN, virtual port channels (vPC), and link aggregation.
- Support high-availability and redundant network architectures.
- Diagnose and resolve complex Cisco routing, switching, fabric, and interoperability issues across traditional and software-defined networking environments.
- Manage Cisco operating system upgrades, configuration backups, security updates, and network migrations.
- Perform infrastructure upgrades, equipment replacements, and technology refresh activities.
Network Security and Access Control - Configure, administer, maintain, and troubleshoot Palo Alto Networks next-generation firewalls running PAN-OS 10.x and newer.
- Manage Palo Alto firewall infrastructure through Panorama, including templates, device groups, centralized policies, and software updates.
- Configure and troubleshoot security policies, NAT, IPSec VPNs, GlobalProtect, and high-availability firewall configurations.
- Implement network segmentation and enforce security policies across enterprise and data center environments.
- Deploy, configure, administer, and troubleshoot Cisco ISE for network access control, including 802.1X authentication, RADIUS, TACACS+, certificate-based authentication, and endpoint authorization.
- Troubleshoot authentication, authorization, and network access issues across wired network infrastructure.
Dell Networking Infrastructure - Configure, administer, and troubleshoot Dell enterprise and data center switches running SmartFabric OS10.
- Support existing Dell legacy switching platforms and operating systems.
- Maintain interoperability between Dell and Cisco networking environments.
- Plan and execute migration strategies from legacy switching infrastructure to modern network architecture.
- Troubleshoot Layer 2 and Layer 3 connectivity, spanning-tree, routing, VLAN, and interoperability issues.
Systems Integration and Operational Support - Support network connectivity and integration with VMware vSphere, ESXi, distributed virtual switches, and virtualized infrastructure.
- Collaborate with systems, cybersecurity, infrastructure, and engineering teams to implement integrated technical solutions.
- Conduct root-cause analysis and resolve complex network performance, connectivity, and availability issues.
- Utilize network analysis and troubleshooting tools, including Wireshark, packet captures, logging, and network monitoring systems.
- Develop and maintain network diagrams, configuration baselines, standard operating procedures, and engineering documentation.
- Participate in technical design reviews, change management activities, implementation planning, and infrastructure validation testing.
Basic Qualifications Cisco Networking and Operating Systems - Advanced hands-on experience configuring, administering, upgrading, and troubleshooting Cisco IOS, IOS XE, and NX-OS.
- Extensive experience with Cisco Catalyst and Nexus switching platforms.
- Experience designing, deploying, and maintaining Cisco ACI fabrics using APIC controllers.
- Strong understanding of spine-leaf architectures, VXLAN/EVPN, BGP, OSPF, VRFs, VLANs, vPC, and Layer 2/Layer 3 networking.
- Experience with Cisco ISE, including 802.1X, RADIUS, TACACS+, and certificate-based authentication.
- Ability to troubleshoot complex Cisco routing, switching, fabric, and interoperability issues across traditional and software-defined networking environments.
- Experience managing Cisco operating system upgrades, configuration backups, security updates, and network migrations.
Network Security and Firewall Administration - Advanced hands-on experience configuring, administering, and troubleshooting Palo Alto Networks next-generation firewalls.
- Experience with Palo Alto PAN-OS 10.x or newer.
- Experience managing Palo Alto firewalls using Panorama centralized management.
- Strong understanding of security policies, NAT, IPSec VPNs, and network segmentation.
- Knowledge of network security principles, access control, PKI, and certificate-based authentication.
Dell Networking Technologies - Hands-on experience with Dell SmartFabric OS10 switching platforms.
- Experience administering and troubleshooting legacy Dell switching infrastructure.
- Understanding of multivendor network interoperability and migration strategies.
General Networking and Engineering Competencies - Extensive professional experience in enterprise network engineering, administration, implementation, and troubleshooting.
- Advanced understanding of TCP/IP, Layer 2/Layer 3 networking, routing, switching, and network segmentation.
- Experience with BGP, OSPF, VRFs, VLANs, VXLAN, spanning-tree protocols (STP), and link aggregation.
- Demonstrated ability to diagnose and resolve complex multivendor networking issues.
- Ability to work independently, evaluate technical requirements, and develop engineering solutions.
- Proven technical documentation and communication skills.
Preferred Qualifications - Cisco CCNP Enterprise or CCNP Data Center certification.
- Palo Alto Networks PCNSE certification or equivalent practical expertise.
- Cisco CCIE certification.
- Experience with VMware NSX and software-defined networking.
- Experience supporting VMware vSphere and virtualized data center environments.
- Experience with infrastructure automation using Python, Ansible, APIs, or similar technologies.
- Experience supporting network modernization, technology refresh, and migration projects.
- Experience working within secure enterprise, government, or systems integration laboratory environments.
- Familiarity with enterprise network monitoring, configuration management, and security compliance requirements.
Ideal Candidate The successful candidate will be a technically experienced, hands-on network engineer with a strong understanding of both traditional enterprise networking and modern software-defined data center architectures. The candidate must be comfortable working across multiple vendor platforms, independently diagnosing complex technical issues, evaluating existing network designs, and implementing secure, reliable, and scalable networking solutions. This position requires practical engineering expertise rather than experience limited to network monitoring, basic switch administration, or routine operational support. Benefits Medical, Dental, Vision, Flexible Time Off, Sick Leave, Paid Federal Holidays, Education and Certification Reimbursement Program, 401(k) retirement plan with safe harbor employer match after 3 months, Prepaid Legal Plan and Identity Protection Plan available, Accident Insurance, Critical Illness Insurance, and Hospital Indemnity Insurance available. EEOC Statement IPSecure does not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
|