Senior Network Engineer

Applied Technical Services LLC (ATS or the Company) is a leading provider of critical testing inspection certification and compliance services. The Company serves clients across a diverse set of large and stable end markets including manufacturing power generation aerospace medical and defense. ATS was founded in 1967 and is headquartered in Marietta GA. Today the Company employs nearly 2100 team members in over 95 locations across the United States.

Our purpose is to create a safe and reliable world and our mission is to deliver assurance through precise technical and professional services.

Position Title

Senior Network Engineer

Position Location

Atlanta GA

Position Description

Abel Solutions is a rapidly growing IT Consulting and Managed Services provider for more than 100 companies and counting. Our growing IT System Operations team (SysOps) is looking for a Senior Network Engineer who will report to the Manager of Engineering.

The SysOps team is a central pillar of our growth strategy and the Senior Network Engineer who will be responsible for managing configuring and troubleshooting network systems remotely and on-site for diverse environments. The ideal candidate will have deep expertise in network design configuration management and the ability to resolve complex issues. The engineer will be working with advanced networking technologies from vendors like Juniper Palo Alto Fortinet Ubiquiti and SonicWall ensuring seamless and secure network operations across multiple locations.

The Network Engineer must have a record of self-study and be motivated to articulate findings based on industry best practices. Our teams mission is to provide state-of-the-art network engineering services to a variety of business industries. This is your opportunity to join this growing team and leave your mark on the development of Abel Solutions IT Services and Cybersecurity department.

NOTE: The successful candidate for this position will have access to information subject to U.S. export controls under the U.S. International Traffic in Arms Regulations (ITAR) and/or U.S. Export Administration Regulations (EAR). Based on the sensitivity of this information the successful candidate must be a U.S. Person as defined by ITAR or in the event the applicant is not a U.S. Person be eligible for export licenses to be obtained from the Department of State Directorate of Defense Trade Controls (DDTC) on a per-project basis to access ITAR and EAR controlled data and information. A U.S. Person includes (a) U.S. citizens or nationals; (b) U.S. lawful permanent residents (i.e. green card holders); (c) persons granted refugee status; or (d) persons granted asylum in the United States. Company may choose not to apply for such license at its discretion due to federal approval timing considerations.

Job Responsibilities

Remote Network Configuration & Management:

Configure and maintain complex routing and switching environments remotely using CLI across multi-vendor platforms.

Manage and troubleshoot advanced Layer 2 and Layer 3 configurations including VLANs STP EtherChannel OSPF BGP MPLS and VRF on Juniper Palo Alto Fortinet Ubiquiti and SonicWall devices.

Develop and implement advanced security configurations such as zone-based firewalls custom IPS signatures SSL decryption and DoS protection using CLI-based methods on Palo Alto and SonicWall firewalls.

On-Site Network Installation & Troubleshooting:

Lead on-site installations of network infrastructure including physical setup of routers switches access points and firewalls.

Perform in-depth troubleshooting of physical and logical network layers using CLI tools like ping traceroute tcpdump and vendor-specific commands for packet captures and log analysis.

Conduct diagnostics for routing protocols latency issues and packet loss on JunOS PAN-OS EdgeOS and SonicOS ensuring minimal downtime during incident resolution.

Juniper Networks:

Configure Juniper SRX series firewalls using JunOS CLI for security policies NAT rules IPsec VPNs and high-availability (HA) clustering.

Advanced configuration of EX/QFX switches including VLAN trunking LAG Q-in-Q and BGP/MPLS routing protocols via JunOS.

Apply advanced routing and switching configurations including IS-IS BGP MPLS and VRF using JunOS scripting and automation where necessary.

Palo Alto Networks:

Perform complex firewall rule creation security profiles and application-based traffic management via PAN-OS.

Configure GlobalProtect VPNs decryption policies and user-ID using Panorama and PAN-OS ensuring tight integration with Active Directory and RADIUS for authentication.

Troubleshoot IPSec VPNs SSL Decryption and packet captures directly from the CLI using commands like show session all debug dataplane packet-diag and test vpn ike-sa.

Ubiquiti:

Configure and deploy Ubiquiti EdgeRouters and EdgeSwitches via EdgeOS CLI focusing on dynamic routing (OSPF BGP) firewalling and advanced QoS.

Deploy and manage UniFi Access Points via SSH and CLI handling WPA2/WPA3 Enterprise configurations VLAN tagging and guest network isolation.

Utilize EdgeOS CLI to configure advanced NAT load balancing and VPN tunneling (OpenVPN L2TP/IPsec) for multi-site configurations.

SonicWall:

Administer SonicWall NSA/SMB firewalls via SonicOS including custom NAT policies deep packet inspection content filtering and SSLVPN configurations.

Configure advanced site-to-site and client VPNs using CLI commands ensuring seamless integration with cloud and remote networks.

Utilize SonicOS CLI for dynamic routing (RIPv2 OSPF BGP) VLAN configurations and troubleshooting deep-packet inspection and traffic anomalies.

Network Security and Monitoring:

Configure security features such as IPsec SSL VPNs next-generation firewall policies and intrusion prevention systems (IPS) on Palo Alto SonicWall and Juniper devices.

Conduct security audits and compliance checks using automated scripts or CLI tools like junos-script or Panorama.

Manage Syslog SNMP and NetFlow integrations into monitoring tools such as SolarWinds PRTG or Nagios ensuring centralized logging and alerting from all devices.

Scripting & Automation:

Leverage Python and Ansible to automate repetitive configuration tasks across multi-vendor platforms.

Develop CLI-based automation for bulk configuration changes or validation across JunOS PAN-OS and EdgeOS platforms.

Use JunOS Event Scripts and Python scripts to streamline the management of complex routing or firewalling tasks.

Other Responsibilities/Expectations

Attend company functions including company meetings to cultivate team building.

Seek out opportunities for professional skills advancement through classes seminars webinars events self-study etc.

Assist the Abel Solutions leadership with other activities and tasks as assigned.

Obtain certifications from Microsoft or others as the role designates and is prescribed by leadership.

Experience Requirements

Network Configuration & Management:

Extensive hands-on experience configuring and managing complex Layer 2/Layer 3 networks using CLI. Proficient in VLANs STP OSPF BGP MPLS and VRF configurations for routers switches and firewalls. Deep understanding of high-availability clustering dynamic routing and load balancing.

Firewall & Security:

Strong proficiency in configuring next-generation firewalls (NGFW) and VPNs (IPSec SSL). Expertise in firewall rules NAT IPS/IDS SSL decryption and deep packet inspection. Ability to manage advanced security policies and troubleshooting for performance optimization and security compliance.

Wireless & Remote Access:

Experienced in configuring and deploying wireless networks (WPA2/WPA3 VLAN tagging) and VPN solutions (site-to-site client-to-site). Skilled in optimizing wireless access points and configuring secure remote access for distributed networks.

Troubleshooting & Diagnostics:

Advanced troubleshooting skills using CLI tools like tcpdump packet capture utilities and log analysis for identifying and resolving network latency routing issues and security incidents. Ability to diagnose complex issues across both physical and logical layers of the network.

Scripting & Automation:

Familiarity with Python Bash and automation tools like Ansible for creating scripts to automate configuration management network monitoring and bulk changes across multi-vendor environments. Skilled in developing network automation solutions that enhance operational efficiency.

Monitoring & Performance Management:

Proficient in integrating and configuring Syslog SNMP and NetFlow for comprehensive network monitoring and performance analysis. Experience with network monitoring platforms for alerting logging and proactive troubleshooting.

Soft Skill Requirements

Demonstrated enthusiasm and passion for network engineering evidenced by a self-motivated desire for continuous learning.

Availability to respond to cyber incidents outside of standard working hours as needed that target the network layer.

Solid grasp of foundational concepts in cloud network and endpoint security awareness of current threat landscapes and attack trends as well as an understanding of defense-in-depth strategies.

Capability to manage and complete projects both independently and as part of a team.

Excellent written and oral communication to client stakeholders.

Strong professional background with the Microsoft ecosystem to include both on-premises and cloud-based products.

Education Requirements

Bachelors degree in information systems is preferred with 4 years of networking experience

o Associates with 6 years of networking experience in lieu of a bachelors degree

o 8 years of networking experience in lieu of a formal degree

Certifications in relevant security functions such as:

o Cisco Certified Network Associate (CCNA) Cisco Certified Network Professional (CCNP) Juniper Networks Certified Associate (JNCIA) Microsoft Certified: Azure Network Engineer Associate and CompTIA Network.

Benefits include: 401(k) 401(k) matching Dental insurance Disability insurance Employee assistance program Flexible spending account Health insurance Life insurance Paid time off Professional development assistance Relocation assistance Tuition reimbursement Vision insurance company issued credit card and/or reimbursement for all business-related expenses.

High potential for growth in a rapidly growing PE backed company.

Supplemental Pay: Considerable P&L based variable compensation plan

EOE/AA/M/F/Vet/Disability

Applied Technical Services is an equal opportunity employer where employment is based upon personal capabilities and qualifications without discrimination due to race color religion gender age national origin disability veteran status or any other protected characteristic as established by law.

A requirement of this position is access to information that is subject to U.S. export controls under the U.S. International Traffic in Arms Regulations (ITAR). Accordingly the company will consider only U.S. Persons for this position. A U.S. Person includes (a) U.S. citizens or nationals; (b) U.S. lawful permanent residents (i.e. green card holders); (c) persons granted refugee status; or (d) persons granted asylum in the United States. This information is collected solely for purposes of complying with U.S. export control requirements and will not be used to unlawfully discriminate in the hiring process.