Senior L3 Network Engineer

About This Opportunity

CTI Staffing is partnering with a leading consumer goods manufacturer to find a Senior L3 Network Engineer for their network security team based in Pleasanton, CA. This team is leading a plant-wide network remediation and OT security initiative, converging IT and industrial network environments while modernizing core routing infrastructure. This is a high-visibility role for someone who wants to own both the network backbone and the industrial security layer protecting it.

What You'll Do

• Serve as the subject matter expert for BGP routing across data center, WAN, and cloud environments
  
• Design and enforce Zero Trust microsegmentation across industrial control system environments
  
• Architect and deploy industrial-grade WiFi networks engineered for high-interference manufacturing environments
  
• Administer next-generation firewall infrastructure and Zero Trust security policies
  
• Design and support SD-WAN solutions across hybrid WAN and direct cloud connectivity
  
• Implement and maintain multi-cloud network architecture across major cloud providers
  
• Build network automation using infrastructure-as-code tooling
  
• Lead root cause analysis and resolution for major network incidents
  

Requirements

What You Bring

Must-Have:

• 10+ years of enterprise network engineering experience across data center, cloud, and manufacturing/OT environments
  
• SME-level expertise in BGP routing, including traffic engineering and route redistribution at enterprise scale
  
• Demonstrated hands-on experience designing and deploying industrial/OT WiFi networks in factory floor settings
  
• Experience with OT/ICS microsegmentation technologies protecting SCADA/PLC/MES systems
  
• Deep experience with enterprise-grade routing and switching platforms
  
• Strong background administering next-generation firewalls and Zero Trust security policies
  
• Experience designing and deploying SD-WAN solutions
  
• Native multi-cloud networking experience across major cloud platforms
  

Nice-to-Have:

• Infrastructure-as-code experience (Terraform, Ansible, Python)
  
• Experience with enterprise network monitoring platforms
  
• CCNP Enterprise / CCIE (Routing & Switching, Enterprise, or Wireless)
  
• PCNSE certification
  
• CWNA or ISA/IEC 62443 Cybersecurity Specialist certification
  

Technical Environment:

• Cisco Catalyst, Nexus, ISR/ASR routing and switching
  
• Palo Alto Strata, Panorama, GlobalProtect
  
• Cisco Viptela and Palo Alto Prisma SD-WAN
  
• Azure, AWS, GCP
  
• Terraform, Ansible, Python
  
• Wireshark, SolarWinds, ThousandEyes, Splunk
  

What Success Looks Like:

• OT network segmentation implemented and validated within the first 3-6 months
  
• Industrial WiFi deployment completed with documented RF site survey results
  
• Stable, well-documented BGP routing posture across WAN and cloud connectivity