Responsible for the design, architecture, engineering, implementation, and support of the Enterprise and multi datacenter network environment, spanning routing, switching, campus fabric, and network security. Acts as a senior technical resource for troubleshooting and architecting complex network solutions and may serve as a project lead or mentor for other engineers on the team.
Location: Remote - Work from Home. Pacific Northwest-based preferred but not required. Periodic travel to the Seattle, WA metropolitan area required, up to 10%.
Key Responsibilities- Designs and architects scalable, resilient network solutions across routing, switching, fabric, and security domains
- Leads complex troubleshooting efforts, including routing protocol issues, fabric/switching connectivity, and firewall policy conflicts
- Architects and maintains Cisco ACI fabric environments, including tenant design, endpoint groups, contracts, and fabric integration
- Architects and maintains Cisco SD-Access (SDA) fabric environments, including underlay/overlay design, fabric edge/border/control-plane nodes, and DNA Center-based policy and segmentation
- Designs, configures, and troubleshoots BGP and OSPF routing environments, including route redistribution, policy control, and multi-site architectures
- Architects highly available switching infrastructure across Nexus, ACI, and SD-Access fabric environments, including VXLAN/EVPN-based segmentation and fabric-based redundancy to eliminate single points of failure
- Configures, maintains, and troubleshoots Palo Alto Networks firewalls, including security policy design, NAT, VPN, and threat prevention
- Designs and manages network access control (NAC) policies and device compliance using Forescout or Aruba Clearpass.
- Serves as an escalation point for high-level, service-impacting network issues
- Identifies, reviews, and recommends security postures to peers and appropriate security teams
- Researches, evaluates, and recommends hardware, software, and vendor solutions based on cost, performance, and business need
- Leads implementation planning prior to installation of network hardware such as routers, firewalls, wireless controllers, and switches
- Develops project plans and task lists for network initiatives, and participates in peer design reviews
- Partners with vendors and third-party providers to evaluate and integrate new equipment and services
- Creates and maintains technical documentation, network diagrams, and standard operating procedures
- Mentors and provides technical guidance to less experienced engineers
- Participates in on-call support rotation per team design
- Architects and implements automation and infrastructure-as-code pipelines (Python, Ansible) to drive configuration consistency, enforce compliance, and accelerate policy deployment across the enterprise network and security fabric
Knowledge- Advanced knowledge of the design, configuration, installation, maintenance, and upgrade of enterprise network environments
- Advanced knowledge of TCP/IP, OSI model, and switching technologies
- Advanced knowledge of BGP and OSPF design, troubleshooting, and optimization
- Advanced knowledge of Cisco ACI architecture and data center fabric design
- Advanced knowledge of Cisco SD-Access architecture and campus fabric design
- Strong knowledge of network security architecture, including Palo Alto Networks firewall policy design and segmentation strategies
- Strong knowledge of network access control (NAC) concepts and enforcement using Forescout
- Working knowledge of equipment from multiple vendors, such as Cisco, Juniper, Palo Alto Networks, and Brocade
Skills- Network Architecture & Design
- Network Automation & Infrastructure-as-Code (Python, Ansible)
- Complex Troubleshooting & Root Cause Analysis
- Network Rack & Patch-Panel Design
- Network Service Monitoring Systems
- Technical Documentation & Network Diagramming
- Process Improvement
- Client/Customer Service
- Coaching & Mentoring
Education• High School Diploma or regional equivalent required
• Bachelor's Degree required, preferably in a field related to the role. At the manager's discretion, additional relevant experience may substitute for the degree requirement
Certifications- CCNA or higher required (Routing and Switching, Enterprise, or Data Center track); CCNP or CCIE preferred
- Wireless certifications a plus
Experience8 - 11 years of experience in the field of the role required
#LI-Remote
#LI-AW1
Our compensation reflects the cost of labor across several geographic markets. The compensation range for this position ranges from $108,253.00/year in our lowest geographic market up to 158,733.30 USD/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Your recruiter can share more about the specific salary range for your preferred location during the hiring process. The compensation package may also include incentive compensation opportunities in the form of annual bonus or incentives, equity awards and an Employee Stock Purchase Plan (ESPP). Learn more about benefits at Rackspace.
