Senior Network Engineer

Interview: Virtual/ can be f2f
Hybrid: Jersey City, NJ (must be local)
Visa: USC/GC

JD:
Job Description/Daily Tasks -

• Senior Network Engineer who will be working on migrating our core, wan and server-farm distribution switches globally from Cisco to Arista

• This includes implementing vxlan/evpn, bgp end to end using 4-byte ASN, using automation for configuration templating and open-telemetry for observability and real-time monitoring in Elasticsearch

The candidate that is ideal for this position will have either done or been exposed to the following :

Designing and or implementing vxlan/evpn on Arista (without Cloud Vision Portal)

• EVPN route-types

• VTEP peering's and head-end-replication

• Migrating from Cisco ACI to Arista vxlan/evpn

• L2-Stretch between three datacenters for VM hosts that are SRM protected

Understanding of BGP protocol

• Doing end to end BGP with 4-byte ASN

• Migrating from EIGRP to BGP

• BGP route-tagging and path preferences

Multicast routing which includes PTP

• Segmenting multicast L3 routing from evpn (non stretched vlan)

• Symmetric routing for PTP multicast between vlan's within a vxlan/evpn fabric

Automation and Observability

• Developing config templates for all designs and deployments using inhouse automation tools along with Itential

• Understanding of Python, JinJa, JSON, Ansible

• Understanding of open-telemetry, gnmi, grpc, logstash, Elasticsearch

• Basic understanding of using AI for network automation and observability (not mandatory as we will be implementing this for the first time)

Technical Qualifications:

• 10+ years of technical experience in networking and network security.

• Working understanding of open-standard networking protocols and the ability to identify and implement these protocols at an enterprise level.

• Ability to conduct Network Operational analysis to solve issues using network flow analysis, packet captures and event correlation tools.

• Experience building out multi sized datacenters, campuses and branch sites using enterprise architecture principles, industry standards and best practices.

• Network Security experience designing and implementing firewalls, VPNs, load-balancers and NAC solutions for data and endpoint protection.

• Experience in multiple technical domains such as server, storage, desktop, security, and network infrastructure.

• Working knowledge implementing Cloud networking solutions with AWS and Azure

• Deep understanding of networking and firewall hardware platforms for Cisco, Arista, Palo Alto, F5 and Aruba Silver-Peak

• Experience designing and implementing cloud hosted SaaS solutions for end user remote and branch secure connection.

• Working knowledge on building and implementing a network automation design that automates networking tasks across multiple vendors and platforms.

• Experience designing, implementing, and supporting networks that host trading applications collocated.

Current Environment: Vendors and Protocols:

• Networking: Cisco, Arista, Aruba Silver-Peak (SD-WAN)

• Firewall and SaaS: Palo Alto, Prisma Access

• Load-Balancers and WAFs: F5 Big-IP, Cloud-Flare, A10 Networks (optional)

• DDOS: Cloud-Flare and Radware

• Network Observability: cPacket, Viavi, Wireshark, Thousand-Eyes, Grafana, Elasticsearch, Telegraf, Logstash

• Clouds: AWS, Azure

• Wireless: Cisco and Juniper MIST

• Networking Protocols: BGP, MP-BGP, OSPF, Multicast, MLAG, VPC, MSTP, Rapid-PVST+, LACP, mutual route redistribution, VXLAN, eVPN

• Programming and Automation: Python, JSON, Jinja, Ansible, YAML, Itential workflow automation

• Micro-Segmentation: Illumio