Senior L3 Network Engineer | 1062835

Senior L3 Network Engineer |

Pleasanton, California

Contract

Posted 08/25/2026

Job Description

OUR GOAL:
Treat our consultants and clients the way we would like others to treat us!Interested in joining our team? Check out the opportunity below and apply today!

Job Title: Senior L3 Network Engineer (Cisco, Palo Alto, SD-WAN, Cloud & OT)
Location: Pleasanton, CA with some light travel possible

We are seeking an enterprise-grade Senior L3 Network Engineer with deep domain expertise in Cisco infrastructure, Palo Alto security, multi-cloud networking, and Operational Technology (OT) environments. Serving as a Subject Matter Expert (SME) in BGP routing and IT/OT network convergence, you will drive the design, security, deployment, and operational resilience of critical enterprise, data center, cloud, and manufacturing networks.

The key areas are obviously BGP routing expertise, as well as experience with OT micro-segmentation; preferably including WiFi.

Key Responsibilities

BGP Routing & Advanced Core Networking (SME): Serve as the Subject Matter Expert for BGP routing (eBGP/iBGP, BGP-EVPN, route reflectors, community tagging, path manipulation, and traffic engineering) across data centers, WAN, and cloud. Design, deploy, and maintain core Cisco routing/switching infrastructure (Catalyst, Nexus, ISR/ASR) and manage complex L3 protocols (BGP, OSPF, EIGRP, MPLS, route redistribution) and Layer 2/3 constructs (VLANs, STP, EtherChannel, HSRP, QoS).

OT Microsegmentation & Industrial Security: Lead OT network security initiatives by designing and enforcing Zero Trust microsegmentation strategies within manufacturing, SCADA, PLC, and MES environments to isolate industrial assets, minimize blast radiuses, and maintain compliance (e.g., IEC 62443, NIST SP 800-82).

OT Wi-Fi Design & Deployment: Architect, conduct RF site surveys for, deploy, and optimize industrial wireless (OT Wi-Fi) networks engineered specifically for high-interference, high-density manufacturing and plant floor environments.

Firewall Administration & Zero Trust: Administer Palo Alto Strata Next-Generation Firewalls, Panorama, GlobalProtect, NAT, and security policies. Implement network segmentation and mapping of Purdue Model architectures into modern firewall controls.

SD-WAN & Hybrid WAN Engineering: Design, deploy, and support SD-WAN solutions (Cisco Viptela and Palo Alto Prisma SD-WAN) while managing WAN connectivity across MPLS, DIA, Direct Internet Access, and hybrid VPNs.

Multi-Cloud Network Architecture: Implement and support cloud networking across Azure, AWS, and GCP using ExpressRoute, Direct Connect, Cloud VPN, Transit Gateway, and Virtual WAN solutions.

Infrastructure Support & Automation: Develop network automation using Terraform, Ansible, and Python (IaC). Provide compute network support (e.g., VMware vSAN deployments) and top-tier L3 escalation support, including root cause analysis (RCA) and major incident resolution.

Monitoring & Modernization: Monitor network health and security using enterprise platforms (Wireshark, SolarWinds, ThousandEyes, Splunk) and lead technical documentation and network modernization initiatives.

Required Skills & Qualifications:

Experience: 10+ years in enterprise network engineering supporting data center, cloud, and manufacturing/OT environments.

BGP & Routing Mastery: SME-level expertise in BGP routing, traffic engineering, redistribution, and enterprise-scale WAN/LAN topologies.

OT Microsegmentation & Wireless: Demonstrated hands-on experience designing and deploying OT/industrial Wi-Fi networks in factory floor settings, alongside microsegmentation technologies (e.g., Cisco ISE, Forescout, Palo Alto, Nozomi) for ICS/SCADA systems.

Core Hardware & Security: Cisco (Catalyst, Nexus, ISR, ASR), Palo Alto Strata, Panorama, GlobalProtect, and NGFW security policies.

SD-WAN & Cloud: Cisco Viptela, Prisma SD-WAN, and native multi-cloud networking across AWS, Azure, and GCP.

Automation & Tools: Terraform, Ansible, Python, Wireshark, SolarWinds, ThousandEyes, Splunk.

Certifications (Preferred): CCNP Enterprise / CCIE (Routing & Switching/Enterprise/Wireless), PCNSE, CWNA, or ISA/IEC 62443 Cybersecurity Specialist.

Reference:

Don’t meet every single requirement? Studies have shown that women and people of color are less likely to apply to jobs unless they meet every qualification. At Revel IT, we are dedicated to building a diverse, inclusive, and authentic workplace, so if you’re excited about this role, but your experience doesn’t align perfectly with every qualification in the description, we encourage you to apply anyway. You might be the right candidate for this or our other open roles!

Revel IT is an Equal Opportunity Employer. Revel IT does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need.

#gdr4900

Job ID: