Position: Senior Network Engineer
Location: Bay Area, CA (Hybrid)
Duration: 24 Months
 
Job Description:
Client’s IT Network Engineering team designs, builds, and operates the enterprise network across offices, data centers, and AWS. As a Sr. Network Engineer, you’ll lead core network design/upgrades, deliver reliable AWS connectivity, automate with infrastructure as code, and mentor teammates. You’ll be accountable for availability, performance, and security across a multi-vendor stack. On call is required.
 
Responsibilities:

• Design and implement network changes across Bay Area sites and global locations (campus, data center, WAN/SD WAN, remote access, cloud interconnects).
• Architect and operate AWS networking: multi account VPCs, Transit Gateway, Direct Connect, VPN, endpoints/PrivateLink, Route 53, ALB/NLB, security groups/NACLs, segmentation guardrails.
• Build infrastructure as code (Terraform): reusable modules, CI/CD pipelines, automated pre/post change validation, drift detection.
• Lead advanced L2–L7 troubleshooting; drive incidents to resolution and root cause across on prem and AWS.
• Apply SRE practices: define SLIs/SLOs/alerts, participate in and lead on call, run incident response and postmortems, maintain runbooks and dashboards.
• Partner with Security, SRE/Infra, Workplace, and other IT teams; lead design reviews and cross functional projects.
• Document architectures and operational procedures; mentor junior engineers.

Primary Platforms:

• AWS
• Palo Alto Networks (PAN OS, Panorama, GlobalProtect, URL/Threat, DNS Security)
• Juniper Networks (EX/QFX, EVPN/VXLAN, Junos)
• Cisco Meraki (MX/MS/MR, SD WAN)
• Cisco Wi Fi (Catalyst/9800, RF design), 802.1X
• Infoblox (DNS/DHCP/IPAM, API automation)
• Tooling: Terraform, Git/GitHub, Ansible/Nornir, Python/Go, CloudWatch, Datadog (or similar)

Required:

• 5+ years designing and operating large scale enterprise networks across hybrid environments (offices, data centers, AWS).
• Deep L2/L3: BGP, OSPF/IS IS, EVPN/VXLAN, routing policy, HA, QoS, NAT; strong packet level troubleshooting.
• Hands on AWS networking (VPC, TGW, DX, VPN, Route 53, ALB/NLB, endpoints/PrivateLink, Flow Logs) and security guardrails.
• Palo Alto Networks firewalls and Panorama: policy design, segmentation, GlobalProtect, threat services.
• Juniper campus/data center and Cisco Meraki at scale; strong Cisco Wi Fi design/operations.
• IaC and automation: Terraform modules, code reviews, CI/CD; Python or Go; Ansible/Nornir; device/cloud APIs.
• Observability and SRE fundamentals: SLIs/SLOs, alerting, incident response/on call, postmortems, runbooks.
• Clear communicator; strong ownership and accountability.

Preferred:

• Certifications: AWS Advanced Networking, PCNSE, JNCIP/JNCIE, CCNP/CCIE.

How you’ll measure success:

• Reliability: higher availability and lower MTTR for campus/core/AWS connectivity via defined SLIs/SLOs.
• Safe velocity: automated, tested IaC pipelines; fewer change related incidents and less toil.
• Delivery: on time multi site upgrades and AWS networking projects that move team OKRs.
• Enablement: durable docs/runbooks and mentorship that uplevel the team.

 
 
At SPECTRAFORCE, we are committed to maintaining a workplace that ensures fair compensation and wage transparency in adherence with all applicable state and local laws. This position’s starting pay is: $ 80.00/hr.