Senior Network Engineer, Infrastructure

Job Details: Position Type: Full Time / Experienced Level, Salary Range: $150000.00 - $160000.00Salary/year, Job Category: Corporate IT, Citrin Cooperman offers a dynamic work environment, fostering professional growth and collaboration. We’re continuously seeking talented individuals who bring a problem-solving mindset, fresh perspectives, and sharp technical expertise. We know you have choices, so our team of collaborative, innovative professionals are ready to support your professional development. At Citrin Cooperman, we offer competitive compensation and benefits and most importantly, the flexibility to manage your personal and professional life to focus on what matters most to you! We are looking for a Network Engineer to architect, implement, and manage its enterprise network infrastructure across offices, data centers, cloud, and remote users. This role will lead network-centric initiatives, focusing on performance optimization, security, compliance, and operational excellence. The Senior Network Engineer will be responsible for the design, deployment, and administration of network systems, enforcing policies and standards while ensuring the availability, integrity, and protection of critical data and communications. This is a hands-on role that also serves as the senior technical escalation point for network operations, projects, and incident response. The ideal candidate has hands-on experience managing complex Zscaler, Cisco, and Aruba environments in a global, regulated organization, preferably within the financial services industry. Responsibilities are, but not limited to: Design, configure, and maintain routers, switches, wireless, firewalls, ZTNA/SASE platforms, and load balancers from deployment through refresh. Manage Cisco, HP, and Aruba networks, including EdgeConnect SD-WAN, Aruba Central, wireless controllers, and ClearPass NAC/TACACS. Administer Palo Alto (Panorama) and Cisco Firepower firewalls, VPNs, WAF, and F5/Citrix load balancers to protect applications and keep them available. Administer Zscaler ZIA and ZPA for secure web and application access, including policy tuning and user-experience troubleshooting. Support AWS and Azure cloud networking, including VPN, Direct Connect/ExpressRoute, VPC/VNet, routing, and security groups. Troubleshoot performance with Wireshark, tcpdump, and NetFlow, and manage Infoblox DNS/DHCP and configurations with DNA Center and SolarWinds. Back up network configurations with Data Domain and Veeam, and design and test recovery and failover strategies for business continuity. Run ITIL-based incident, problem, change, and patch management, act as Tier 3 and on-call escalation, and lead off-hours upgrades, refreshes, and office moves. Partner with network and DevOps teams to automate repetitive tasks using PowerShell, Python, Ansible, and Git. Support security compliance, audits, and vulnerability remediation, and manage carriers and vendors while evaluating new technologies. Maintain network diagrams, runbooks, and SOPs, and mentor junior engineers and Service Desk staff through knowledge sharing and peer review. Qualifications: The ideal candidate must: Have a bachelor’s degree in technology or related field (required). Have networking certifications (CCNP/CCIE, Aruba, Palo Alto, or Zscaler preferred); security certifications such as Security+, CISSP, or CCSP are a plus. Have proven experience leading or participating in large-scale network and security projects with multiple stakeholders, from planning and design through implementation, cutover, and handoff to operations. Possess 7+ years of hands-on experience designing, implementing, and supporting enterprise networks in a multi-site environment. Have a strong background in firewalls, IDS/IPS, SIEM, and network security best practices, including firewall rule analysis, log review, and incident investigation. Have extensive expertise in Aruba, Cisco and other enterprise-grade networking platforms Possess excellent communication and problem-solving skills, with the ability to fine-tune and optimize network performance and to explain technical issues and trade-offs to non-technical stakeholders. Have the ability to troubleshoot independently, from physical layer and cabling through routing, firewall, and application-layer issues, and to work with vendors and carriers to resolve them. Have experience working within ITIL-based incident, problem, and change management processes, and supporting audits and compliance reviews (such as SOC 2 or ISO 27001) in a regulated environment. Have hands-on expertise in: Networking & Security: Cisco ASA/Firepower, Palo Alto/Panorama, HP ProCurve/Aruba switching, Aruba Wireless, Edgeconnect/Silverpeak, Zscaler, ClearPass, TACACS, 802.1X/NAC, VPN, MFA, CASB, Defender, XDR, DLP Routing & Switching: BGP, OSPF, VLANs, spanning tree, QoS, SD-WAN, MPLS, IPsec/SSL VPN Network Infrastructure Services: AD, DNS, DHCP, ADFS Monitoring & Tools: SolarWinds, Cisco DNA Center, Infoblox, NetFlow, Wireshark, tcpdump, SNMP, syslog, packet capture Microsoft Platforms: Windows Server 2016/2019/2022, Exchange, M365, AVD, SharePoint, Teams Systems Management: MECM, SCCM, Intune Cloud Networking: AWS, Azure (VPC/VNet, VPN, Direct Connect/ExpressRoute, security groups) Virtualization: VMware ESX, Hyper-V Disaster Recovery/High Availability (DR/HA) Scripting & Automation: PowerShell, Python, VB, Ansible, REST APIs, Git Have a security-focused mindset with strong knowledge of compliance frameworks. Be willing to work outside standard business hours when needed, including on-call coverage and planned maintenance windows. Possess strong analytical and problem-solving abilities. Have excellent verbal and written communication skills. Be detail-oriented, self-motivated, and results-driven. Have the ability to prioritize and perform effectively under pressure. Have the ability to manage multiple projects and incidents at once while keeping stakeholders informed. Have strong interpersonal and collaborative skills. Demonstrate initiative and consistent follow-through.