Cloudrho
Network Engineer
About This Role
Job Summary
We are seeking a highly skilled Network Engineer to design, implement, maintain, and troubleshoot our core enterprise and data center network infrastructure. In this role, you will be directly responsible for managing high-performance networks utilizing VXLAN with BGP EVPN, securing environments using Palo Alto Firewalls, and maintaining reliable site-to-site connectivity. The ideal candidate is a hands-on technical expert with deep routing, switching, data center virtualization, and network security expertise.
Key Responsibilities
Data Center Architecture: Design, deploy, and maintain spine-leaf topologies using VXLAN overlay networks with BGP EVPN control planes for scalable, multi-tenant data center environments. Network Configuration & Switching: Configure and maintain enterprise networks, explicitly managing VLAN segmentation, trunking, inter-VLAN routing, and link aggregation across core and access switches.
Advanced Routing: Implement and optimize dynamic routing protocols, with a heavy focus on BGP (Border Gateway Protocol) configuration, path manipulation, policy routing, and OSPF. Firewall Management & Security: Deploy, configure, and manage Palo Alto Networks Next-Generation Firewalls (NGFW), including security policies, NAT rules, threat prevention, and URL filtering. VPN & Secure Access: Establish, maintain, and monitor secure site-to-site IPsec VPN tunnelsconnecting remote offices, data centers, and cloud environments, alongside deploying and maintaining Zscaler App Connectors for secure private application access (ZPA). Troubleshooting & Support: Act as the Tier 3 escalation point to diagnose and resolve complex network connectivity issues, routing loops, asymmetric routing, packet loss, and performance bottlenecks.
Documentation: Author and maintain highly detailed topology diagrams (Logical/Physical), configuration baselines, IP address management (IPAM), and standard operating procedures.
Qualifications
&
Requirements
Experience: Minimum of 4–6 years of dedicated experience in network engineering, network security, or data center infrastructure administration. Data Center & Routing Skills: Hands-on experience building and supporting VXLAN tunnels and configuring advanced multi-protocol BGP environments.
Firewall Expertise: Deep technical knowledge of administering Palo Alto Firewalls (PAN-OS); experience managing devices via Panorama is highly desirable. SSE/SASE (Optional/Plus): Familiarity or experience with Zero Trust Network Access (ZTNA) solutions, specifically configuring and managing Zscaler App Connectors, is a strong plus.
Hardware Familiarity: Proven experience with data center switches supporting EVPN-VXLAN (e.g., Cisco Nexus/NX-OS, Arista EOS, or Juniper Junos).
Certifications
(Preferred): Cisco Certified Network Professional (CCNP Data Center / Enterprise). Palo Alto Networks Certified Network Security Engineer (PCNSE). Zscaler Certified Cloud Specialist (ZCCS) or Professional (ZCCP).
Education
Bachelor’s degree in Computer Science, Information Technology, or equivalent practical field experience.