Network Engineer

Role: Network Engineer
Contract: Full-time Remote Contractor (160 hours monthly)
Business Hours: Monday to Friday from 2 PM EST to 11 PM EST. On-Call shifts once every 3-4 weeks.
Rate: $1,200 - $1,500 USD monthly / $14,400 - $18,000 USD annually (Salary is negotiable based on experience)
Availability to Start: June 10, 2024
Additional Info: Additional perks are included in the compensation structure.


Company Profile

This Canada-based company is a leading Enterprise Infrastructure, Security, and Cloud and managed Services provider. Working with enterprises in the US and Canada, it has been developing, designing and deploying infrastructure solutions for over 25 years and has become synonymous with infrastructure expertise and excellence in project delivery.

What you'll do

As a Network Engineer, your role will be pivotal in configuring and implementing network and security solutions for their clients, ensuring robust and efficient infrastructure. You will collaborate with key support and technology vendors to define and maintain enterprise hardware and software standards for LAN/WAN technologies, firewalls, web content filters, IPS, and VPNs. Your responsibilities include performing technical assessments, providing guidance for client-driven strategies, and managing firewalls such as Palo Alto and Cisco Firepower. Additionally, you will maintain security solutions, troubleshoot IPSEC tunnels, and manage intrusion prevention systems. You will create standardized operating procedures, document network configurations, and support post-implementation processes. This role involves providing technical support, participating in on-call rotations, and executing after-hours changes for new initiatives and iUpgrade to see actual info management.


Responsibilities include but are not limited to:
- Configure and implement network & security solutions for the company’s clients.
- Working with key Support and technology vendors, define Enterprise Hardware & Software standards for LAN / WAN infrastructure technologies and Firewalls, Web Content Filters, IPS, VPN, etc.
- Perform infrastructure configuration and implement network & security solutions for the company’s clients.
- Working with maintenance and upgrades to client environments.
- Provide technical guidance and recommendations for client-driven initiatives and strategies.
- Perform technical assessments using industry-standard toolsets for network and security architectures.
- Creating standardized operating procedures and assisting with post-implementation support after successfully delivering the new solution.
- Documenting and maintaining network diagrams and configuration changes.
- Install, configure, and manage firewalls (Palo Alto, Cisco Firepower).
- Maintain security solutions, including firewall policies and VPN configurations, performing user and remote access security administration functions.
- Establish and troubleshoot IPSEC tunnels with customers.
- Manage and monitor the intrusion prevention system.
- Perform problem determination and root cause analysis, effectively working with vendors and carriers as required.
- Provide technical support to internal and external clients, including problem determination, resolution, and escalation as needed.
- Participate in the on-call rotation and be able to respond to critical or high-severity alerts after hours and follow documented steps to address such issues.
- Participate in on-demand after-hours change implementation for new initiatives and/or iUpgrade to see actual info management support.

What you should have

- A bachelor's degree in Computer Networking, Computer Science, or a relevant field is preferred (extensive professional experience may be accepted in lieu of formal education)
- Must possess certifications: PCNSE, CCNP
- At least 5+ years of working in a network environment, with high-level experience in firewall environments, IDS/IPS, SD-WAN, VPN, and firewalls
- Experience with technologies such as Cisco, Fortinet, Palo Alto (including Palo Alto Threat Protection, Cisco Firepower Threat Defense, IPS/IDS, HSRP/VRRP, VRF, VPC, VC, LACP, Fabric Path)
- Extensive support of routing protocols/technologies such as BGP, OSPF, MPLS VPN, Multicast
- Ability to perform TCP/IP network traces/packet captures with solid experience interpreting results
- Ability to analyze packet captures using Wireshark and other related technologies
- Perform or participate in complex maintenance or deployment activities
- Develop and maintain a standard operating procedure manual and processes used by the team
- Experience with Palo Alto firewalls, App-ID, user-ID, content-ID, and Global Protect
- In-depth understanding of IPsec VPNs, Global Protect VPNs, security profiles, and firewall implementation
- Broad knowledge of security and network solutions, security monitoring, event analysis, threat hunting, and countermeasures
- Experience in BGP/OSPF and EIGRP routing protocol design, configuration, and troubleshooting
- Experience working in a multicultural, virtual team across multiple geographical regions
- Some travel may be required
- Nice to Haves:
-- Experience in IT and data center infrastructure strategies, solutions, and concepts
-- Knowledge of virtualization techniques (VMWare, Hyper-V)
-- Experience applying ITIL best practices
-- Experience in ITSM ticketing tools, such as ServiceNow


Who you are

- You are an excellent verbal and written communicator, capable of conveying complex technical information clearly to both technical and non-technical stakeholders.
- You are a strong team player who enjoys collaborating in a dynamic, fast-paced environment, contributing positively to team efforts and outcomes.
- You effectively manage priorities, commitments, and projects, demonstrating strong organizational skills and the ability to handle multiple tasks simultaneously.
- You are quick to grasp highly technical concepts and show a keen ability to learn new technologies and methodologies efficiently.
- You are passionate about cybersecurity concepts and technologies, constantly staying updated with industry trends and best practices to ensure robust security measures.