Senior WAN Engineer

Position Overview:

Our client is seeking a Senior WAN Engineer who brings deep production experience with BGP, internet edge routing, SD-WAN/SASE, carrier circuits, and cloud interconnects. This role works closely with network architecture, cybersecurity, telecom services, carriers, and technology leadership to deliver secure, resilient, and high-performing connectivity.

Key Responsibilities:

• Configure, maintain, and troubleshoot eBGP and iBGP across internet-edge and carrier interconnect environments.
• Manage route policies, prefix filtering, BGP communities, peering relationships, capacity changes, and failover testing.
• Deploy and support enterprise SD-WAN/SASE sites, including appliances, site configuration, security policies, performance optimization, and user-impact troubleshooting.
• Engineer and operate cloud connectivity through platforms such as Equinix Fabric, AWS Direct Connect, and comparable cloud on-ramps.
• Lead carrier circuit turn-up, acceptance testing, cutovers, outage response, maintenance coordination, and SLA escalation for optical, Ethernet, DIA, and MPLS services.
• Build and support LAN and WAN connectivity for operational sites, data centers, and industrial or operational-technology devices.
• Maintain network monitoring, flow analytics, alerting, dashboards, performance telemetry, and capacity reporting.
• Create and maintain accurate network diagrams, as-built documentation, circuit inventories, IP and BGP records, and operational runbooks.
• Execute production changes through established change-management and audit processes.
• Partner with cybersecurity, telecom services, carriers, and technical leadership on network design reviews, implementations, and incident resolution.

• U.S. Person status as defined under ITAR/EAR due to access to export-controlled technical data.
• Active CCNP in Enterprise, Service Provider, or Data Center, or an equivalent professional-level routing and switching certification.
• Seven or more years of hands-on network engineering experience, including at least three years focused on WAN, internet edge, or service-provider connectivity in a production environment.
• Strong production BGP experience, including carrier or internet-exchange peering, route policy, prefix lists, communities, and failover behavior.
• Hands-on experience deploying and operating SD-WAN platforms. Cato Networks experience is strongly preferred; VeloCloud, Cisco Viptela, Palo Alto Prisma, or Fortinet experience will also be considered.
• Experience turning up and troubleshooting carrier circuits and working directly with carrier network operations centers.
• Working knowledge of cloud interconnect services such as Equinix Fabric, AWS Direct Connect, or equivalent technologies.
• Strong documentation, incident-management, and change-control practices in an audited production environment.
• Ability to work on-site in Covington as scheduled, travel to operational and data-center sites, and participate in an on-call rotation.

• CCIE certification or CCNP Service Provider certification.
• Experience supporting satellite communications, telecom, carrier, ISP, or similarly complex infrastructure.
• Hands-on experience with EVPN/VXLAN, Kentik or comparable flow analytics, and Check Point firewalls.
• Python or Ansible experience for network configuration, validation, or automation.
• Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent professional experience. What Success Looks Like
• Quickly develops ownership of network monitoring, circuit inventory, documentation, and incident response.
• Independently leads site turn-ups, circuit activations, and production changes.
• Maintains accurate BGP, IP, carrier, and as-built records.
• Delivers reliable implementations with strong change-control discipline and minimal operational disruption.