Full Job Description
Varian is seeking a Network Engineer position in support of our Managed Services global business. Our goal is to provide good operational practices and support for the operations, maintenance, and refinement of Varian's public and private Cloud environments and services. Providing support for new and legacy applications and services hosted in the cloud, and continuous improvement of Varian's Cloud infrastructure. The candidate will support Varian's cloud operations to enhance, optimize, and maintain computing capabilities across our entire global cloud solution. Including collaboration with Service, Operations, Product Management and Security. The Network Engineer must have expertise with Cloud Service Providers (CSPs) & Microsoft Azure. Additional responsibilities for delivering support to the infrastructure and deployment of Varian's applications as a Managed Service, and provide input in developing and maintaining policies, procedures, and standards. The position will receive direction from the Manager of Global Cloud Operations.
You are responsible for:
3 Providing network operations and support for Varian's FullScale Infinity Cloud (FSIC) solutions. Private, public and hybrid infrastructure, network and security.
3 Leading network onboarding for FSIC designed product adhering to FSIC configuration standards.
3 Maintaining a strong knowledge of Varian's suite of applications.
3 Configuring various cloud solutions including monitoring, application access, security, Citrix NetScaler, Citrix ADC, Palo Alto Networks, etc.
3 Configuring and supporting backbone connections over ExpressRoute (Azure), and direct connection and VPN architecture.
3 Maintaining allocation of IP CIDR block, perform maintenance involving modification of network, subnets, vlans, routes etc.
3 Verifying and action on events aggregated from network monitoring tools and Web Application Firewall using Varian approved tools.
3 Troubleshooting and determining root cause of issues.
3 Collaborating to quickly resolve any network related outages and resolve customer impacting issues quickly.
3 Contributing to the successful execution of projects.
3 Creating, updating, and completing documentation.
3 Investigate root cause analysis of incidents with follow up reporting and final content generation.
3 Collaborating with network engineers on procedures, techniques, tips & knowledge to improve operations, security and work performed.
3 Providing the highest level of customer service.
3 Advance understanding of vendor and telco/exchange/service providers support escalation paths and being able to escalate support requests to these vendors in a typically urgent and timely fashion.
3 Appling network system updates, patches, configuration changes.
3 Planning network layouts and configures systems to user environments.
3 Serving as a technical mentor to colleagues as necessary.
3 Staying up to date with assigned Learning Management System courses.
3 Eagerness to provide the highest level of customer service.
3 On call support as required.
3 Working schedule North American business hours.
Minimum Qualifications:
3 A Bachelor's or preferably Master's Degree in computer science is required plus three years' minimum relevant experience.
3 Varian FSIC, TPASS and CloudPlanner infrastructure product knowledge.
3 Strong knowledge of Varian's suite of applications.
3 Extensive experience supporting and managing networks in enterprise public, private, and hybrid cloud environments, preferably supporting large multi-subscription Microsoft Azure estates.
3 Advanced hands-on experience with Microsoft Azure networking, including VNets, subnets, VNet peering, user-defined routes (UDRs), network security groups (NSGs), network interfaces, NAT, DNS, and cross-subscription connectivity.
3 Strong knowledge of TCP/IP, UDP, ICMP, ARP, addressing, subnetting, CIDR, DNS, LDAP/LDAPS, Kerberos, RPC, routing, and return-path validation.
3 Strong routing and switching expertise, including BGP, OSPF, EIGRP, MPLS, VLANs, STP, Layer 2/3 concepts, route propagation, path selection, redundancy, convergence, and failover.
3 Hands-on experience designing, configuring, and troubleshooting Azure ExpressRoute connectivity, including BGP advertisements, learned routes, provider handoffs, scheduled maintenance, and customer/provider route exchange.
3 Hands-on experience designing and troubleshooting site-to-site IPsec VPNs, including IKE/IPsec, tunnel interfaces, proxy IDs, BGP or static routing, and hybrid connectivity patterns.
3 Advanced hands-on experience with Palo Alto Networks firewalls, including security policies, NAT and dynamic IP and port NAT, zones, interfaces, virtual routers, routing, VPN, URL filtering, logging, application connectivity, licensing, device certificates, and PAN-OS lifecycle management.
3 Experience using centralized next-hop routing through virtual firewalls to inspect ingress, egress, inter-VNet, and cross-subscription traffic.
3 Hands-on experience with Citrix NetScaler/ADC, including Gateway and load-balancing virtual servers, services and service groups, monitors, persistence, LDAP authentication, session, rewrite and responder policies, SSL profiles, certificates, and backend connectivity.
3 Experience validating end-to-end application delivery across client access, Citrix Gateway/ADC, firewalls, StoreFront or application services, and backend systems.
3 Strong network security knowledge, including firewall policy, IDS/IPS concepts, ACLs, PKI, SSL/TLS, certificate chains, cipher and protocol compatibility, URL filtering, vulnerability remediation, and security hardening.
3 Advanced network performance and root-cause analysis skills using packet captures and diagnostic tools such as Wireshark, firewall captures, tcpdump, iperf, or SolarWinds; ability to analyze retransmissions, duplicate ACKs, zero-window conditions, resets, packet loss, MTU/MSS, TLS negotiation, session aging, and application-response delays.
3 Experience troubleshooting business-critical and highly available applications, including cloud platform services, application integrations, SMB/application performance, syslog, telemetry, and monitoring paths.
3 Experience supporting network monitoring, observability, and SIEM integrations, including troubleshooting logging loops, missing telemetry, and connectivity to platforms such as Microsoft Sentinel.
3 Experience implementing and troubleshooting Active Directory integrations and one-way domain trusts, including DNS, LDAP/LDAPS, Kerberos, RPC, domain-controller reachability, routing, and firewall requirements.
3 Experience working directly with customer IT teams, telecommunications carriers, exchange/service providers, and technology vendors to review requirements, coordinate changes, and resolve urgent connectivity issues.
3 Ability to develop customer-specific connectivity and ACL documentation covering source and destination networks, ports, protocols, NAT, routing, certificates, identity, and application use cases.
3 Experience creating and maintaining cloud and network architecture documentation, Microsoft Visio or Lucidchart diagrams, as-built documents, operating procedures, implementation notes, configuration templates, troubleshooting guides, upgrade-validation procedures, and change-validation or rollback steps.
3 Experience reviewing vulnerability findings, assessing operational impact, defining remediation and rollout plans, and validating network software upgrades, patches, content updates, configuration changes, and policy updates.
3 Strong incident, problem, and change management experience, including ticket handling, root-cause analysis, follow-up reporting, production troubleshooting, and customer-impacting outage resolution.
3 Clear written and verbal communication skills, with the ability to explain technical concepts to customer, business, security, product, service, operations, and implementation stakeholders.
3 Demonstrated ability to serve as a senior technical escalation resource, mentor colleagues, define technical approaches for complex changes, and provide implementation guidance across teams.
3 Ability to provide on-call support as required and work North American business hours.
Desired Experience
3 Varian FSIC, TPASS and CloudPlanner onboarding and infrastructure support knowledge.
3 Strong knowledge of Varian's support and engineering processes.
3 Knowledge of the networking components of Varian applications, including ARIA and Eclipse.
3 Azure Network Engineer Associate certification.
3 Azure Administrator Associate certification.
3 Palo Alto Networks certification or equivalent advanced PAN-OS experience.
3 Citrix NetScaler/ADC and Citrix ADM/Insights experience, including repeatable deployment or job templates and upgrade validation.
3 Experience with Equinix, Megaport, Lumen, CenturyLink, Cox, Level 3, AT&T, or similar telecommunications and exchange providers.
3 Experience designing non-standard hybrid network solutions, including BGP-enabled VPN overlays over ExpressRoute and constrained-address NAT designs.
3 Experience with Microsoft Azure Service Bus, Azure App Service, and application connectivity across subscriptions.
3 Experience with Microsoft Sentinel, Qualys, SIEM, syslog, and security-tool integrations.
3 Experience supporting certificate lifecycle activities with enterprise certificate authorities such as DigiCert.
3 Experience with Citrix XenApp, StoreFront, Virtual Delivery Agents, Remote Desktop Protocol, and associated application-delivery dependencies.
3 Knowledge of DICOM and HL7 standards and healthcare application connectivity.
3 Advanced Active Directory, Windows Server, Hyper-V, VMware/vSphere, and systems-management concepts.
3 Advanced Azure IaaS administration and automation or scripting using PowerShell, JSON, ARM templates, APIs, or Python.
3 ITIL certification.
The base pay range for this position is:
$93,590 - $128,689
Factors which may affect starting pay within this range may include geography/market, skills, education, experience, and other qualifications of the successful candidate.
If this is a commission eligible position the commission eligibility will be in accordance with the terms of the Company's plan. Commissions are based on individual performance and/or company performance.
The Company offers the following benefits for this position, subject to applicable eligibility requirements: medical insurance, dental insurance, vision insurance, 401(k) retirement plan. life insurance, long-term and short-term disability insurance, paid parking/public transportation, paid time off, paid sick and safe time.
