Senior L3 Network Engineer

About This Opportunity

CTI Staffing is partnering with a leading consumer goods manufacturer to find a Senior L3 Network Engineer for their network security team based in Pleasanton, CA. This team is leading a plant-wide network remediation and OT security initiative, converging IT and industrial network environments while modernizing core routing infrastructure. This is a high-visibility role for someone who wants to own both the network backbone and the industrial security layer protecting it.

What You'll Do

• Serve as the subject matter expert for BGP routing across data center, WAN, and cloud environments
  
  


• Design and enforce Zero Trust microsegmentation across industrial control system environments
  
  


• Architect and deploy industrial-grade WiFi networks engineered for high-interference manufacturing environments
  
  


• Administer next-generation firewall infrastructure and Zero Trust security policies
  
  


• Design and support SD-WAN solutions across hybrid WAN and direct cloud connectivity
  
  


• Implement and maintain multi-cloud network architecture across major cloud providers
  
  


• Build network automation using infrastructure-as-code tooling
  
  


• Lead root cause analysis and resolution for major network incidents
  
  

Requirements

What You Bring

Must-Have:

• 10+ years of enterprise network engineering experience across data center, cloud, and manufacturing/OT environments
  
  


• SME-level expertise in BGP routing, including traffic engineering and route redistribution at enterprise scale
  
  


• Demonstrated hands-on experience designing and deploying industrial/OT WiFi networks in factory floor settings
  
  


• Experience with OT/ICS microsegmentation technologies protecting SCADA/PLC/MES systems
  
  


• Deep experience with enterprise-grade routing and switching platforms
  
  


• Strong background administering next-generation firewalls and Zero Trust security policies
  
  


• Experience designing and deploying SD-WAN solutions
  
  


• Native multi-cloud networking experience across major cloud platforms
  
  

Nice-to-Have:

• Infrastructure-as-code experience (Terraform, Ansible, Python)
  
  


• Experience with enterprise network monitoring platforms
  
  


• CCNP Enterprise / CCIE (Routing & Switching, Enterprise, or Wireless)
  
  


• PCNSE certification
  
  


• CWNA or ISA/IEC 62443 Cybersecurity Specialist certification
  
  

Technical Environment:

• Cisco Catalyst, Nexus, ISR/ASR routing and switching
  
  


• Palo Alto Strata, Panorama, GlobalProtect
  
  


• Cisco Viptela and Palo Alto Prisma SD-WAN
  
  


• Azure, AWS, GCP
  
  


• Terraform, Ansible, Python
  
  


• Wireshark, SolarWinds, ThousandEyes, Splunk
  
  

What Success Looks Like:

• OT network segmentation implemented and validated within the first 3-6 months
  
  


• Industrial WiFi deployment completed with documented RF site survey results
  
  


• Stable, well-documented BGP routing posture across WAN and cloud connectivity