Sr. Network Automation Engineer

About the role

Netskope stands as the foremost leader in Security Service Edge (SSE), establishing the benchmark for how modern enterprises secure access across cloud, web, and private applications. The platform is trusted by more than 5,000 organizations worldwide, including 30+ of the Fortune 100, providing Zero Trust Network Access, Cloud Access Security Broker, and Secure Web Gateway capabilities through a single-pass, cloud-native architecture.

Underpinning these capabilities is a highly resilient global network engineered for continuous availability, managed directly by Netskope's Platform Reliability Engineering team. This expansive infrastructure consists of hundreds of Points of Presence across every major region, hundreds of BGP sessions spanning internet exchanges, transit providers, and direct peering partners, and a robust multi-vendor stack of routers, switches, firewalls, and load balancers that enterprises trust with their most security-critical traffic. The platform delivers:

• 99.999% availability with guaranteed low-latency performance for enterprise customers worldwide
• Hundreds of globally distributed Points of Presence providing best-path routing and regional redundancy
• Hundreds of BGP peering, transit, and internet exchange relationships managed and optimized continuously
• Multi-vendor network infrastructure (Cisco, Juniper, Arista, F5, Palo Alto) spanning data centers across every major region
• GTM and GSLB-driven traffic management ensuring seamless failover and performance at global scale
• Strict RTO and RPO objectives with zero-downtime change execution across a live production network
• Continuous capacity expansion as Netskope grows into new markets and enterprise segments

As a Senior Network Engineer on this team, you will be the network domain owner embedded within the team. You will keep this infrastructure healthy, well-monitored, and continuously improving — owning day-to-day operations end-to-end while proactively identifying and resolving risks before they reach customers. This is a high-ownership role for an engineer who genuinely cares about uptime and takes pride in knowing the health of their network without being told to look.

Responsibilities

• Configure, maintain, and troubleshoot routers and switches across a multi-vendor environment — Cisco IOS/NX-OS, Juniper Junos, and Arista EOS
• Manage BGP peering sessions with transit providers, internet exchanges, and direct peering partners; tune route policy, path selection, and prefix filtering to optimize performance and cost across hundreds of sessions
• Install and configure new ISP transit links; manage circuit turn-up, capacity monitoring, and provider coordination globally
• Configure and maintain firewalls including rulesets, NAT policies, zone-based security, and periodic policy audit and cleanup
• Configure and manage load balancers including GTM/GSLB components, virtual servers, health monitors, persistence profiles, and SSL offload for multi-region traffic management
• Monitor network health continuously — reviewing dashboards and utilization trends, identifying degradation patterns, and acting proactively before issues escalate to customer impact
• Upgrade software on production routers, switches, firewalls, and load balancers with minimal disruption; plan and execute changes with documented rollback procedures
• Configure and maintain IPsec/IKE VPN tunnels across the global PoP footprint
• Perform packet captures and traffic analysis to diagnose issues and support incident investigations
• Troubleshoot problems from the network layer through the application layer, own root cause analysis, and drive permanent remediations
• Build and extend monitoring tools and dashboards to improve visibility into network performance and availability across all regions
• Use BGP policies and traffic engineering to minimize latency to customers, balance load across providers, and manage congestion across internet exchange relationships

Required Skills & Experience

• 8+ years of hands-on network engineering experience in production internet-facing data center or SaaS environments
• Multi-vendor routing and switching expertise — Cisco, Juniper, and Arista; comfortable configuring and troubleshooting across all three in production
• Expert-level BGP — peering and transit configurations, route policy design, path optimization, and troubleshooting for IPv4 and IPv6 at scale
• Firewall operations experience in production environments — Juniper SRX, Palo Alto, Cisco ASA/FTD, or equivalent
• Load balancer and GTM/GSLB experience — F5 BIG-IP, Citrix ADC, or equivalent; virtual server management, health monitoring, global traffic management across multiple regions
• Strong L2 through L7 protocol knowledge — spanning-tree, LACP, MLAG, VLANs, BGP, OSPF, DNS, NTP, SNMP, SSH, Syslog, HTTP/S, SSL/TLS
• Experience with network monitoring platforms and dashboard tooling; ability to read utilization trends and build meaningful alert thresholds
• Proficiency with packet capture and traffic analysis tools (Wireshark, tcpdump)
• Solid Linux experience including basic scripting
• Background in KVM/ESXI hypervisor networking
• Strong documentation habits — change records, runbooks, architecture diagrams, and post-incident write-ups
• Prior experience in a public-facing SaaS, cloud, or internet infrastructure environment strongly preferred
• BSCS or equivalent required, MSCS or equivalent strongly preferred

#LI-AB1