Network Engineer L-3

About the role

Coretek is seeking a Network Engineer – L3 to design, implement, support, and continuously improve enterprise network and network security environments across Azure, hybrid, and on-premises data centers for managed services clients. This role owns complex routing, switching, firewall, SD-WAN, and cloud connectivity solutions, translating business, security, and compliance requirements into resilient, secure, and supportable network architectures.

The ideal candidate combines deep hands-on experience with Palo Alto and Fortinet firewalls, Azure networking, and enterprise LAN/WAN with strong troubleshooting discipline and client-facing communication. The engineer serves as the senior escalation point for network incidents, leads root cause analysis, reduces recurring issues, and drives standards, automation, and continuous improvement across the managed network estate.

Key Responsibilities

Azure & Hybrid Cloud Networking

Design, deploy, and support Azure network architectures including hub-and-spoke, Virtual WAN, VNets, peering, UDRs, NSGs, and Private Endpoints/Private DNS.

Implement and troubleshoot hybrid connectivity using site-to-site VPN, point-to-site VPN, and ExpressRoute.

Configure and support Azure Firewall, Application Gateway/WAF, Azure Load Balancer, Front Door, and DNS services.

Align network designs to Cloud Adoption Framework landing zone connectivity guidance and Well-Architected principles.

Maintain network diagrams, IP address plans, architecture decisions, and configuration standards.

Network Security & Firewalls

Design, deploy, and manage Palo Alto (PAN-OS, Panorama, VM-Series) and Fortinet (FortiGate, FortiManager) firewalls on-premises and in Azure.

Build and maintain security policies, NAT, IPsec tunnels, GlobalProtect/remote access VPN, URL filtering, and threat prevention profiles.

Apply Zero Trust and network segmentation principles across cloud and data center environments.

Perform firewall rule reviews, policy cleanup, and security posture assessments, and create prioritized remediation plans.

Coordinate with security operations teams on threat investigations, vulnerability remediation, and compliance requirements.

Enterprise LAN/WAN & Data Center

Support and optimize routing and switching environments, including BGP, OSPF, VLANs, STP, and Layer 2/Layer 3 designs.

Manage SD-WAN, wireless, load balancing, and data center network infrastructure.

Plan and execute network upgrades, migrations, firmware/OS lifecycle management, and data center-to-cloud transitions.

Validate capacity, redundancy, and failover designs to meet availability commitments.

Managed Services Support, Escalation & Reliability

Provide L3 escalation support for complex network, firewall, connectivity, and performance issues across multiple clients.

Lead technical triage, packet capture and traffic analysis, service restoration, and coordination with ISPs, vendors, and client teams.

Perform root cause analysis, document corrective actions, and eliminate recurring incidents through engineering improvements.

Improve network monitoring, alert quality, runbooks, and change and maintenance procedures.

Participate in an escalation/on-call rotation and provide clear, timely status communications during major incidents.

Automation & Operational Excellence

Automate network deployment and configuration tasks using Terraform, Bicep, Ansible, PowerShell, or Python.

Develop and enforce network standards, templates, and configuration baselines across client environments.

Review incident, ticket, and capacity trends to identify proactive improvements.

Track remediation completion, risk reduction, and service stability outcomes.

Client Advisory & Technical Leadership

Serve as a trusted network advisor and escalation point for managed services clients.

Lead network design reviews, technical discovery, and recommendation readouts.

Mentor Systems Engineers and service desk staff and build reusable troubleshooting guidance and knowledge articles.

Collaborate with Azure, security, EUC, service delivery, and account teams; support presales discovery and client onboarding into managed services.

Requirements

5+ years of enterprise network engineering experience, including 4+ years as a Cloud Network Engineer supporting multiple clients and systems.

Hands-on experience designing and supporting Azure networking and hybrid connectivity in production environments.

Strong experience administering Palo Alto and/or Fortinet next-generation firewalls.

Experience providing L3 escalation support, leading major incident triage, and completing root cause analysis in a managed services or multi-client environment.

Proven ability to move between design, hands-on implementation, troubleshooting, and client communication.

Technical Expertise

Azure Networking: VNets, hub-and-spoke, Virtual Wan

ExpressRoute, VPN, and hybrid connectivity

Palo Alto PAN-OS, Panorama, and VM-Series

Fortinet FortiGate and FortiManager

Routing & Switching:BGP, OSPF, VLANs

SD-WAN, load balancing, and DNS

Zero Trust, segmentation, and Azure Firewall

Terraform, Bicep, Ansible, and network automation

Preferred Certifications

Microsoft Certified: Azure Network Engineer Associate (AZ-700) – required

Palo Alto Networks Certified Network Security Professional

Fortinet Certified Professional: Network Security

Palo Alto Networks Certified Next-Generation Firewall Engineer

Microsoft Certified: Azure Security Engineer Associate (AZ-500)

CCNP Enterprise or equivalent

Desired Characteristics

Disciplined, methodical troubleshooting and strong network design judgment

Consultative, client-focused communication during normal operations and high-severity incidents

Ownership, accountability, urgency, and bias for action

Ability to work independently while collaborating across cloud, security, and support teams

Strong documentation, knowledge transfer, and diagramming skills

Coaching mindset and willingness to grow the technical capability of the team

Commitment to secure, stable, automated, and standards-driven network outcomes

Success Metrics

Performance Area -- Measure of Success

Network Reliability -- Reduced network-related incidents, outages, and repeat issues

Security Posture -- Firewall policy hygiene, closed findings, and measurable risk reduction

Cloud Connectivity -- Secure, scalable, and supportable Azure and hybrid network implementations

Escalation Support -- Effective L3 ownership, timely restoration, and quality root cause analysis

Automation & Standards -- Reusable templates, configuration baselines, and reduced manual effort

Documentation -- Current diagrams, IP plans, runbooks, and knowledge articles

Change Quality -- Successful changes and migrations with minimal unplanned impact

Posting text as published by Coretek Services.

The evidence behind this listing

Workplace

Remote Employer field

Seniority

Not established

Employment type

Not established

Location as listed

United States

Pay and work authorization

Stated pay

Not stated

Visa sponsorship

Not stated

Security clearance

Not established

Citizenship

Not established