Job Description

Job Title: Senior Network Engineer (Infrastructure Modernization)

Location: Irvine, CA (Hybrid)
Position: Contract / Level III
Duration: 6+ Months

Project Summary

We are launching a comprehensive initiative to modernize network architecture across corporate offices, branch locations, and manufacturing plants. This project focuses on standardizing LAN and edge designs, upgrading firewall security platforms, and simplifying IT/OT segmentation through a migration to Prisma SD-WAN.

Architecture & Objectives

The Senior Network Engineer will execute a standardized Core/Distribution/Access model to improve scalability and performance. Key objectives include:

Gateway Migration: Moving select VLAN gateways from firewalls to Core Switch SVIs to optimize traffic flow.
Security Refresh: Replacing legacy PA-440 firewalls with PA-1420 platforms.
Segmentation: Optimizing OT network environments with dedicated IT/OT core switching and reduced firewall zone complexity.
SD-WAN Standardization: Transitioning edge infrastructure from VeloCloud to Prisma SD-WAN.

Detailed Scope of Work

1. Firewall & Security Infrastructure

Perform physical rack, cable, and power installation of new PA-1420 units.
Execute complex configuration migrations involving security zones, NAT, VPNs, and granular policies.
Enable dynamic routing and validate overall system health post-migration.

2. LAN & SVI Gateway Migration

Configure VLANs and SVIs on IT/OT core switches to handle routing locally.
Update routing tables across the firewall and SD-WAN environment.
Test and validate inter-VLAN routing and critical application connectivity.

3. SD-WAN Deployment (VeloCloud to Prisma)

Rack and provision Prisma ION devices.
Migrate active WAN circuits while validating tunnels, security policies, and failover redundancy.
Decommission and inventory legacy VeloCloud equipment.

4. Deployment & Validation

Conduct site readiness checks and device staging.
Lead cutover execution during designated maintenance windows to minimize business impact.
Perform exhaustive testing, including failover validation, IT/OT segmentation checks, and user connectivity verification.

Qualifications

Technical Qualifications

Expertise: Extensive experience with Palo Alto Firewalls (PA-1420 preferred) and Prisma SD-WAN.
Routing & Switching: Advanced proficiency in L2/L3 switching, SVI configuration, and dynamic routing protocols.
IT/OT Knowledge: Experience working in manufacturing environments with specific IT/OT segmentation needs.
Tools: Ability to work with standardized templates, checklists, and repeatable build-test-cutover processes.

Additional Information

All your information will be kept confidential according to EEO guidelines.

Learn more about this Employer on their Career Site