Note: The job is a remote job and is open to candidates in USA. CMG Financial is seeking an experienced Network Engineer to take meaningful ownership of their enterprise network infrastructure across on-premises, hybrid, and Microsoft Azure environments. This hands-on engineering role involves solving complex network challenges, improving reliability and security, and directly impacting the design and operation of enterprise infrastructure.
Responsibilities
- Design, implement, troubleshoot, and optimize enterprise network infrastructure across on-premises and Azure environments
- Manage Palo Alto NGFW security policies, NAT, App-ID, User-ID, Content-ID, and VPN connectivity
- Monitor and respond to threat prevention, URL filtering, and WildFire events
- Manage site-to-site and remote-access VPNs and troubleshoot connectivity, routing, and performance issues
- Use Panorama and Strata Cloud Manager to manage policies, visibility, logging, and firewall operations at scale
- Support and evolve Prisma Access and SASE capabilities, including remote-user connectivity and identity integration
- Support Azure VNets, subnets, NSGs, private endpoints, Private Link, peering, and Private DNS
- Maintain and troubleshoot hub-and-spoke network architectures
- Monitor network health using Azure Network Watcher, Connection Monitor, flow logs, and packet capture
- Support hybrid connectivity using VPNs and ExpressRoute with BGP
- Work with Azure Firewall, Load Balancer, Application Gateway, and related networking services
- Lead troubleshooting across Layers 1–7 for connectivity, latency, routing, application access, and performance issues
- Investigate complex incidents and perform root cause analysis on recurring problems
- Use tools such as SolarWinds and Wireshark to isolate and resolve network issues
- Partner with application, security, cloud, and service desk teams to drive issues through resolution
- Provide clear diagnostic context when escalating issues to vendors or other engineering teams
- Implement approved network changes involving firewall policies, VLANs, routing, segmentation, and connectivity
- Automate operational tasks using Python, PowerShell, or Bash
- Maintain and enhance infrastructure-as-code using Terraform and related technologies
- Validate infrastructure changes through appropriate planning, testing, and change-management processes
- Maintain network diagrams, runbooks, IP addressing documentation, standards, and operational procedures
- Identify opportunities to improve network reliability, security, performance, and operational efficiency
Skills
- 3–7+ years of network engineering experience in enterprise, multi-site, or hybrid cloud environments
- Strong knowledge of TCP/IP, subnetting, routing, switching, VLANs, DNS, and DHCP
- Experience with Cisco Catalyst, Nexus, and/or Meraki networking
- Hands-on experience with BGP in enterprise or hybrid-cloud environments
- Strong firewall experience, including security policies, NAT, VPNs, and network segmentation
- Hands-on experience with Palo Alto Networks NGFW technologies
- Strong Layer 1–7 troubleshooting and root cause analysis skills
- Understanding of Zero Trust, IDS/IPS, DDoS mitigation, and secure network segmentation
- Experience working in environments where availability, security, and operational discipline matter
- Strong communication skills and the ability to collaborate across technical and non-technical teams
- Ability to participate in an on-call rotation as needed
- A bachelor's degree in Computer Science, Information Technology, or a related field is preferred; equivalent hands-on professional experience is also valued
- Microsoft Azure Network Engineer Associate
- Palo Alto Networks PCNSE
- Cisco CCNA / CCNP
Company Overview
Company H1B Sponsorship