Network Engineer L-3

Coretek is seeking a Network Engineer - L3 to design, implement, support, and continuously improve enterprise network and network security environments across Azure, hybrid, and on-premises data centers for managed services clients. This role owns complex routing, switching, firewall, SD-WAN, and cloud connectivity solutions, translating business, security, and compliance requirements into resilient, secure, and supportable network architectures.The ideal candidate combines deep hands-on experience with Palo Alto and Fortinet firewalls, Azure networking, and enterprise LAN/WAN with strong troubleshooting discipline and client-facing communication. The engineer serves as the senior escalation point for network incidents, leads root cause analysis, reduces recurring issues, and drives standards, automation, and continuous improvement across the managed network estate.Key ResponsibilitiesAzure & Hybrid Cloud NetworkingDesign, deploy, and support Azure network architectures including hub-and-spoke, Virtual WAN, VNets, peering, UDRs, NSGs, and Private Endpoints/Private DNSImplement and troubleshoot hybrid connectivity using site-to-site VPN, point-to-site VPN, and ExpressRouteConfigure and support Azure Firewall, Application Gateway/WAF, Azure Load Balancer, Front Door, and DNS servicesAlign network designs to Cloud Adoption Framework landing zone connectivity guidance and Well-Architected principlesMaintain network diagrams, IP address plans, architecture decisions, and configuration standardsNetwork Security & FirewallsDesign, deploy, and manage Palo Alto (PAN-OS, Panorama, VM-Series) and Fortinet (FortiGate, FortiManager) firewalls on-premises and in AzureBuild and maintain security policies, NAT, IPsec tunnels, GlobalProtect/remote access VPN, URL filtering, and threat prevention profilesApply Zero Trust and network segmentation principles across cloud and data center environmentsPerform firewall rule reviews, policy cleanup, and security posture assessments, and create prioritized remediation plansCoordinate with security operations teams on threat investigations, vulnerability remediation, and compliance requirementsEnterprise LAN/WAN & Data CenterSupport and optimize routing and switching environments, including BGP, OSPF, VLANs, STP, and Layer 2/Layer 3 designsManage SD-WAN, wireless, load balancing, and data center network infrastructurePlan and execute network upgrades, migrations, firmware/OS lifecycle management, and data center-to-cloud transitionsValidate capacity, redundancy, and failover designs to meet availability commitmentsManaged Services Support, Escalation & ReliabilityProvide L3 escalation support for complex network, firewall, connectivity, and performance issues across multiple clientsLead technical triage, packet capture and traffic analysis, service restoration, and coordination with ISPs, vendors, and client teamsPerform root cause analysis, document corrective actions, and eliminate recurring incidents through engineering improvementsImprove network monitoring, alert quality, runbooks, and change and maintenance proceduresParticipate in an escalation/on-call rotation and provide clear, timely status communications during major incidentsAutomation & Operational ExcellenceAutomate network deployment and configuration tasks using Terraform, Bicep, Ansible, PowerShell, or PythonDevelop and enforce network standards, templates, and configuration baselines across client environmentsReview incident, ticket, and capacity trends to identify proactive improvementsTrack remediation completion, risk reduction, and service stability outcomesClient Advisory & Technical LeadershipServe as a trusted network advisor and escalation point for managed services clientsLead network design reviews, technical discovery, and recommendation readoutsMentor Systems Engineers and service desk staff and build reusable troubleshooting guidance and knowledge articlesCollaborate with Azure, security, EUC, service delivery, and account teams; support presales discovery and client onboarding into managed servicesRequirements5+ years of enterprise network engineering experience, including 4+ years as a Cloud Network Engineer supporting multiple clients and systemsHands-on experience designing and supporting Azure networking and hybrid connectivity in production environmentsStrong experience administering Palo Alto and/or Fortinet next-generation firewallsExperience providing L3 escalation support, leading major incident triage, and completing root cause analysis in a managed services or multi-client environmentProven ability to move between design, hands-on implementation, troubleshooting, and client communicationTechnical ExpertiseAzure Networking: VNets, hub-and-spoke, Virtual WanExpressRoute, VPN, and hybrid connectivityPalo Alto PAN-OS, Panorama, and VM-SeriesFortinet FortiGate and FortiManagerRouting & Switching:BGP, OSPF, VLANsSD-WAN, load balancing, and DNSZero Trust, segmentation, and Azure FirewallTerraform, Bicep, Ansible, and network automationPreferred CertificationsMicrosoft Certified: Azure Network Engineer Associate (AZ-700) - requiredPalo Alto Networks Certified Network Security ProfessionalFortinet Certified Professional: Network SecurityPalo Alto Networks Certified Next-Generation Firewall EngineerMicrosoft Certified: Azure Security Engineer Associate (AZ-500)CCNP Enterprise or equivalentDesired CharacteristicsDisciplined, methodical troubleshooting and strong network design judgmentConsultative, client-focused communication during normal operations and high-severity incidentsOwnership, accountability, urgency, and bias for actionAbility to work independently while collaborating across cloud, security, and support teamsStrong documentation, knowledge transfer, and diagramming skillsCoaching mindset and willingness to grow the technical capability of the teamCommitment to secure, stable, automated, and standards-driven network outcomesSuccess Metrics Performance Area -- Measure of SuccessNetwork Reliability -- Reduced network-related incidents, outages, and repeat issuesSecurity Posture -- Firewall policy hygiene, closed findings, and measurable risk reductionCloud Connectivity -- Secure, scalable, and supportable Azure and hybrid network implementationsEscalation Support -- Effective L3 ownership, timely restoration, and quality root cause analysisAutomation & Standards -- Reusable templates, configuration baselines, and reduced manual effortDocumentation -- Current diagrams, IP plans, runbooks, and knowledge articlesChange Quality -- Successful changes and migrations with minimal unplanned impact