Senior Infrastructure Engineer II

Role Overview 

We’re looking for an experienced Infrastructure & Network Engineer to own the reliability, performance, and security of our on-prem data center and network—centered on Cisco Nexus 9000 (NX‑OS) switching and FortiGate firewalls—alongside our Dell VxRail hyperconverged platform and Microsoft workloads. You will lead day‑to‑day operations, project delivery, and lifecycle management for core network, security, compute, storage, and critical services. 

Key Responsibilities:

Network (Primary) 

• Core Switching (Cisco Nexus 9K C93240YC‑FX2): Design, implement, and maintain VLANs, VPC, vPC peer‑link/keepalive, HSRP/VRRP (if used), QoS, and ACLs on NX‑OS. Manage EVPN/VXLAN (if applicable) and L2/L3 segmentation, including route‑maps, BGP/OSPF where used. 

• Access/Edge & Routing: Maintain interconnects to firewalls, load balancers, ISPs, and campus/branch devices. Capacity planning, link upgrades, optics selection, and redundancy testing. 

• Network Monitoring & Troubleshooting: Use NetFlow/sFlow, SNMP, syslog, and tools (e.g., SolarWinds/PRTG) to monitor health and performance. Root cause analysis for latency, drops, asymmetric routing, or microbursts. 

Security (Fortinet) 

• FortiGate (e.g., 601E, 201E): Manage policy packages, NAT, zones, interfaces, VDOMs, IPSec/SSL VPN, routing, and high availability. Configure UTM features (Application Control, Web Filtering, IPS) according to policy. Periodic ruleset review, cleanup, and documentation (change control). 

• FortiManager/FortiAnalyzer (if present): Centralized policy management, revisions, audits, and traffic/security analytics. 

• Security Posture: Implement network segmentation and least‑privilege access; support SFTP, RDS, and secure remote access. Coordinate vulnerability remediation (firmware/OS upgrades, CVE mitigation). 

Compute, Storage & Virtualization 

• Dell VxRail (vSphere): Cluster operations, lifecycle upgrades, vSAN health, capacity planning, and performance tuning. VM provisioning standards, templates, tagging, and backup integration. 

• Windows Server / AD / RDS: Support core services (AD/DNS/DHCP/PKI/NPS), Remote Desktop Services collections/brokers, and GPO hygiene. Maintain file services, secure shares, and SFTP services (OpenSSH on Windows/Linux). 

• Linux (Nice-to-have): Basic admin for bastion/utility hosts, SSH hardening, and automation agents. 

Required Qualifications:

• 8+ years in enterprise network/infrastructure engineering roles. 

• Hands‑on with Cisco Nexus (NX‑OS): vPC, LACP, STP enhancements, VXLAN/EVPN (preferred), routing (BGP/OSPF), QoS, and NX‑OS upgrades (ISSU when applicable). 

• Proven experience with FortiGate firewalls: Policy/NAT design, VPNs (IPSec/SSL), HA pairs, virtual domains, security profiles, and firmware lifecycle. 

• Strong knowledge of TCP/IP, IPv4 subnetting, DNS/DHCP, NTP, and PKI. 

• Experience with VMware/vSphere (ideally with VxRail), Windows Server/AD/RDS, and basic Linux. 

• Proficiency in PowerShell/Bash, and familiarity with automation (Ansible, REST APIs, or Terraform desirable). 

• Solid understanding of network security best practices, segmentation, and logging/SIEM integration. 

Preferred Certifications:

• Cisco: CCNP Data Center or Enterprise (CCIE a plus). 

• Fortinet: NSE 4+ (NSE 5/6/7 a plus). 

• VMware: VCP‑DCV (VxRail cert a plus). 

• Microsoft: Azure Administrator/Network, Windows Server Hybrid Administrator. 

• ITIL Foundation.