j

Senior Network Engineer

jobs
On-site
Menlo Park, CA

Overview

We are seeking an experienced and highly skilled Senior Network Engineer to join our

Technical Services team. This role is ideal for a seasoned professional who thrives in a

hands-on environment, implementing, maintaining, and optimizing modern network

infrastructure.


You will be responsible for designing and supporting enterprise-grade network and security

systems, including next-generation firewalls, campus switching, and enterprise wireless. Your

expertise will help drive reliability, performance, and security through robust design,

automation, and disciplined change management.


This senior-level position requires deep technical knowledge of networking and network

security, particularly in Palo Alto Networks firewalls and Cisco/Meraki wired and wireless

environments.

\n


Core Tools & Technologies
  • Vendors/OS: Palo Alto Networks (PAN-OS & Panorama), Cisco (IOS), Meraki, SonicWall (SonicOS, NSM), Ruckus

  • Protocols: BGP, STP, LACP, 802.1X (EAP), IPsec/SSL VPN, QoS, DNS/DHCP, NAT, IPv6, LACP/EtherChannel, MC-LAGG/vPC

  • Security Features: Malware Prevention, Anti-Spyware, Antivirus, Vulnerability Protection, File Blocking, Data Filtering, DNS Security, DoS/DDoS Protection, Zone Protection, Micro-Segmentation/ACLs, Zero-Trust Networking (ZTNA)


Key Responsibilities
  • Network Implementation: Configure and deploy LANs, WANs, and wireless networks,
  • including switches, firewalls, access points, and supporting hardware/software.

  • Wireless & Wired Network Management: Oversee the lifecycle of Cisco switching and Meraki wireless infrastructure, including deployment, configuration, tuning, and capacity planning.

  • Troubleshooting & Performance: Serve as a senior escalation point for all network-related issues. Perform advanced troubleshooting and root cause analysis (RCA) to ensure availability and performance.

  • Firewall & Network Security: Manage and maintain Palo Alto Networks NGFWs and Panorama. Develop and implement robust security policies, NAT rules, and threat prevention strategies.

  • Documentation & Collaboration: Maintain comprehensive network documentation and collaborate cross-functionally to deliver projects and resolve issues effectively.


Mandatory Qualifications (in order of importance)
  • Cisco / Meraki Expertise
  • Extensive hands-on experience with Cisco IOS and Meraki switches and access points.
  • Deep experience designing, deploying, and operating Meraki MR wireless solutions, including Dashboard administration, RF optimization, and 802.1X authentication.
  • Mastery of core network concepts: VLANs, trunking, STP, inter-VLAN routing, LACP/EtherChannel, MC-LAGG/vPC, DHCP Snooping, BPDU Guard.
  • 7–10+ years of experience configuring and troubleshooting enterprise wired and wireless networks.

  • Advanced Troubleshooting Skills
  • Proven ability to diagnose complex network issues using tools such as Wireshark/TCPDump, ping, and traceroute.
  • Strong preference for candidates with CCNP- or CCIE-level wireless troubleshooting expertise.
  • Demonstrated ability to troubleshoot NGFW policy and feature set issues (e.g., URL Filtering, DNS Security, Threat Prevention, Data Filtering, App-ID, User-ID).

  • Communication Skills
  • Exceptional written and verbal communication skills.
  • Ability to clearly articulate complex technical concepts to both technical stakeholders (architects, SMEs) and non-technical audiences (executives, directors).

  • Palo Alto Networks Expertise
  • Proven experience managing, configuring, and troubleshooting Palo Alto NGFWs and Panorama.
  • Strong knowledge of HA, templates, device groups, and best-practice implementation of full NGFW feature sets.
  • 3–5+ years of experience configuring and operating Palo Alto Networks NGFWs.


Desired Qualifications
  • Certifications
  • Cisco Certified Network Professional (CCNP)
  • Palo Alto Networks Certified Network Security Engineer (PCNSE)

  • Additional Technical Experience
  • Familiarity with SonicWall firewalls and/or Ruckus wireless systems.
  • Strong understanding of BGP, route maps, and redistribution profiles.
  • Experience with Palo Alto’s Advanced Routing Engine (ARE) and multi–virtual router topologies.
  • Hands-on experience with 802.1X, RADIUS, PKI, DNS, and related technologies.
  • Experience with network automation tools such as Ansible, Terraform, Jinja2, and PAN XAPI.


Why Join Us
  • You’ll be part of a small, high-impact team responsible for mission-critical infrastructure across multiple sites. This role offers the opportunity to work with cutting-edge technologies, shape architectural standards, and contribute to a high-performance, security-focused network environment.


\n
$200,000 - $235,000 a year
\n

This is an exempt role.