Lead Network Engineer

BETSOL is looking for a Network Lead Engineer to own how that network is designed secured and evolved. This is a design and build role. You will set the network architecture and standards lead projects from requirements through cutover and make the technical calls on routing segmentation security and cloud connectivity. Day-to-day monitoring ticket handling and first- and second-line troubleshooting with our IT and NOC teams; you are the engineering authority they escalate complex design problems to and the person who removes the root causes so those problems stop recurring. 

Key responsibilities 

Architecture and design 

• Own the end-to-end network architecture across BETSOL offices data center and colocation sites and cloud environments including target-state designs and a multi-year roadmap. 
• Design LAN WAN and SD-WAN topologies routing (BGP OSPF) segmentation and high-availability patterns and document them as reference architectures and high- and low-level designs. 
• Design hybrid and multi-cloud connectivity for Azure and AWS: VNet/VPC architecture hub-and-spoke and transit designs ExpressRoute or Direct Connect site-to-site VPN and private endpoints. 
• Define network standards: addressing and IP management naming configuration baselines hardware and software lifecycle and capacity planning. 

Network security and zero trust 

• Design and own next-generation firewall policy architecture micro-segmentation and secure remote access. 
• Lead the move toward a zero trust and SASE model including secure web gateway and private access services in partnership with the security team. 
• Build network controls and evidence that satisfy ISO/IEC 27001 audits and customer security reviews and remediate network findings from vulnerability scans and penetration tests. 
• Design DNS DDoS protection web application firewall and load-balancing patterns for internet-facing services. 

Project leadership and delivery 

• Lead network projects such as office build-outs data center migrations SD-WAN rollouts firewall refreshes and cloud landing zones from requirements and design through implementation and cutover. 
• Write implementation and rollback plans lead change reviews and execute or supervise high-risk changes during planned windows. 
• Evaluate vendors and technologies run proofs of concept and produce build-versus-buy recommendations with cost estimates. 
• Work with cloud DevOps security and application teams so network design is part of solution design from the start not an afterthought. 

Automation and engineering excellence 

• Automate configuration compliance checks and provisioning using Python Ansible and Terraform and manage network configuration as code with version control. 
• Define observability for the network (telemetry flow data synthetic checks and meaningful alerts) so operations teams detect issues before users do. 
• Act as the final technical escalation point for complex design-level problems lead root cause analysis and drive permanent architectural fixes. 
• Mentor network engineers review their designs and changes and build runbooks and knowledge so the operations team can run the network independently. 

Qualifications :

Required qualifications 

• 8 years of network engineering experience including at least 2 years in a lead or architect capacity owning designs and projects end to end. 
• Deep expertise in routing and switching (BGP OSPF VLANs VRFs QoS) and enterprise WAN or SD-WAN design. 
• Hands-on design experience with next-generation firewalls such as Palo Alto Fortinet or Cisco including policy architecture and segmentation. 
• Practical cloud networking experience in Azure and/or AWS including hybrid connectivity. 
• Network automation skills with Python and Ansible or Terraform. 
• CCNP Enterprise or CCNP Security or an equivalent professional-level certification. 
• Strong written design documentation and the ability to explain trade-offs cost and risk to technical and non-technical leaders. 
• Network Certifications such as CCNP CCIE CCDE or equivalent (Azure Network Engineer Associate AWS Advanced Networking etc.).

Preferred qualifications 

• Experience with zero trust and SASE platforms such as Zscaler Prisma Access or Netskope. 
• Experience with Kubernetes networking service mesh or cloud load balancers. 
• Familiarity with ISO/IEC 27001 SOC 2 network controls and audit evidence. 
• Experience in an IT services or managed services company supporting multiple customer environments. 

Remote Work :

No

Employment Type :

Full-time