Network Engineer

Job Description

I&O Platform Infrastructure Network Engineer

Supervising Associate | Enterprise Technology

The opportunity

In a plan to strengthen and extend our footprint in EY Enterprise Technology we are looking for a proven Network Engineer to support and evolve EY's global data center and enterprise network infrastructure. The role will provide engineering, operational support, automation and lifecycle management across EY's campus, data center and wide-area network environments. The successful candidate will work with cutting-edge networking technologies with a specific focus on routing and switching, data center fabric, network security, SD-WAN, load balancing and network automation.

Your key responsibilities

The I&O Platform Infrastructure Network Engineer provides technical support and engineering of complex nature for the firm's global enterprise network platforms. This professional applies knowledge of multi-vendor routing and switching, data center networking, network security, WAN technologies and automation tooling to support enterprise-scale connectivity and availability.

The role requires in-depth knowledge of the firm's network architecture to implement platform enhancements, lifecycle management activities, patching programs, security initiatives and operational improvements. The engineer will assist in maintaining highly available, high-performance network environments across global data center and office locations while ensuring compliance, resiliency and operational excellence.

Skills and attributes for success

• Strong experience designing and administering enterprise data center and campus network environments.
• Deep knowledge of routing protocols including BGP, OSPF, EIGRP and IS-IS.
• Strong Layer 2 switching experience including VLANs, STP, RSTP, MSTP and VPC/MLAG.
• Experience with Cisco, Arista or Juniper data center switching platforms (exclusionary).
• Experience maintaining mission-critical production network environments in a global data center setting (exclusionary).
• Experience supporting SD-WAN platforms (Cisco Viptela, VMware VeloCloud or equivalent).
• Strong knowledge of network security technologies including:
  • Firewalls (Palo Alto, Cisco ASA/FTD, Fortinet or equivalent)
  • Network Access Control (NAC)
  • IDS/IPS
  • VPN — IPsec and SSL/TLS
  • Microsegmentation
• Experience with data center fabric technologies including:
  • VXLAN
  • EVPN
  • Spine-leaf architecture
  • ACI or equivalent SDN platforms
• Experience with load balancing platforms (F5 BIG-IP, Citrix ADC or equivalent).
• Knowledge of DNS, DHCP and IPAM (DDI) management.
• Experience with network automation and Infrastructure-as-Code tooling including:
  • Ansible
  • Python / Netmiko / NAPALM
  • Terraform
• Experience with network monitoring and observability platforms (SolarWinds, PRTG, ThousandEyes or equivalent).
• Ability to create technical documentation, network diagrams and operational runbooks.
• Strong working knowledge of DevOps, Agile, Kanban, SCRUM and ITIL frameworks.
• Ability to work effectively with clients, management and global engineering teams.

To qualify for the role, you must have experience with

• Enterprise routing and switching administration — 5–7 years.
• BGP, OSPF and other dynamic routing protocol configuration and troubleshooting — 5–7 years.
• Data center switching platforms (Cisco Nexus, Arista EOS, Juniper QFX or equivalent) — 5–7 years.
• Layer 2 technologies including VLANs, VPC, MLAG, STP and trunking — 5–7 years.
• Enterprise firewall administration (Palo Alto, Cisco FTD, Fortinet or equivalent) — 5–7 years.
• SD-WAN deployment and operational management — 3–5 years.
• VXLAN/EVPN data center fabric design and administration.
• Spine-leaf architecture deployment and operations.
• F5 BIG-IP LTM/GTM load balancer administration.
• IPsec and SSL VPN configuration and troubleshooting.
• DDI management (DNS, DHCP, IPAM).
• Network automation scripting using Python, Ansible or equivalent.
• Network change management, patching and firmware lifecycle management.
• Network monitoring, alerting and capacity management.
• Packet capture and traffic analysis (Wireshark, tcpdump or equivalent).
• Disaster Recovery and Business Continuity planning for network platforms.
• Security hardening and vulnerability remediation of network infrastructure.
• Cloud networking fundamentals — Azure Virtual Network, AWS VPC or equivalent.
• Hybrid connectivity including ExpressRoute, Direct Connect or equivalent (preferred).

Ideally, you'll also have

• Cisco CCNP (Enterprise, Data Center or Security) certification (desired).
• Arista ACE certification (desired).
• Palo Alto PCNSE certification (desired).
• Juniper JNCIP certification (better to have).
• F5 201 / 301 certification (better to have).
• ITIL v4 Foundation certification (exclusionary).
• Cisco CCIE (Enterprise Infrastructure or Data Center) — better to have.
• Experience with network telemetry and streaming (gNMI, gRPC, OpenConfig).
• Experience with Cisco ACI or VMware NSX SDN platforms.
• Familiarity with zero-trust network access (ZTNA) frameworks and implementation.

What we look for

An experienced and technically strong network engineer to help build, maintain and modernize EY's global enterprise network infrastructure. We are looking for an individual with deep multi-vendor networking expertise, a passion for automation and security, and the ability to support highly available, high-performance network platforms while driving continuous operational improvement across EY's data center and wide-area network estate.