Senior L3 Network Engineer
CTI Consulting
- Location
- Onsite (Pleasanton, California)
- Employment
- Contract
- Level
- Senior Level
About the Role
CTI Consulting is partnering with a leading consumer goods manufacturer to modernize core routing infrastructure and lead plant-wide network remediation. This role focuses on converging IT and industrial network environments while enhancing OT security.
Skills
Full job details
About This Opportunity
CTI Staffing is partnering with a leading consumer goods manufacturer to find a Senior L3 Network Engineer for their network security team based in Pleasanton, CA. This team is leading a plant-wide network remediation and OT security initiative, converging IT and industrial network environments while modernizing core routing infrastructure. This is a high-visibility role for someone who wants to own both the network backbone and the industrial security layer protecting it.
What You'll Do
- Serve as the subject matter expert for BGP routing across data center, WAN, and cloud environments
- Design and enforce Zero Trust microsegmentation across industrial control system environments
- Architect and deploy industrial-grade WiFi networks engineered for high-interference manufacturing environments
- Administer next-generation firewall infrastructure and Zero Trust security policies
- Design and support SD-WAN solutions across hybrid WAN and direct cloud connectivity
- Implement and maintain multi-cloud network architecture across major cloud providers
- Build network automation using infrastructure-as-code tooling
- Lead root cause analysis and resolution for major network incidents
Requirements
What You Bring
Must-Have:
- 10+ years of enterprise network engineering experience across data center, cloud, and manufacturing/OT environments
- SME-level expertise in BGP routing, including traffic engineering and route redistribution at enterprise scale
- Demonstrated hands-on experience designing and deploying industrial/OT WiFi networks in factory floor settings
- Experience with OT/ICS microsegmentation technologies protecting SCADA/PLC/MES systems
- Deep experience with enterprise-grade routing and switching platforms
- Strong background administering next-generation firewalls and Zero Trust security policies
- Experience designing and deploying SD-WAN solutions
- Native multi-cloud networking experience across major cloud platforms
Nice-to-Have:
- Infrastructure-as-code experience (Terraform, Ansible, Python)
- Experience with enterprise network monitoring platforms
- CCNP Enterprise / CCIE (Routing & Switching, Enterprise, or Wireless)
- PCNSE certification
- CWNA or ISA/IEC 62443 Cybersecurity Specialist certification
Technical Environment:
- Cisco Catalyst, Nexus, ISR/ASR routing and switching
- Palo Alto Strata, Panorama, GlobalProtect
- Cisco Viptela and Palo Alto Prisma SD-WAN
- Azure, AWS, GCP
- Terraform, Ansible, Python
- Wireshark, SolarWinds, ThousandEyes, Splunk
What Success Looks Like:
- OT network segmentation implemented and validated within the first 3-6 months
- Industrial WiFi deployment completed with documented RF site survey results
- Stable, well-documented BGP routing posture across WAN and cloud connectivity