• Own the end-to-end architecture of GE HealthCare’s global Remote Access platform • Design, implement, and continuously improve secure remote access solutions for employees, partners, and vendors • Serve as the technical authority for remote access architecture, including policy design, traffic routing, authentication, and high availability • Drive standardization, automation, scalability, and reliability across the remote access environment • Troubleshoot and resolve complex network and security issues across global environments • Collaborate closely with Cyber Security, Network Operations, Identity, and Cloud teams to deliver integrated solutions • Ensure solutions meet security, compliance, and availability requirements • Provide architectural-level support for incidents and problem management (no routine operations) • Document architectures, standards, and design decisions to support long-term service delivery

• Participate in a 24×7 on‑call rotation as a Tier‑3 escalation engineer for Prisma SASE. • Troubleshoot and resolve complex issues across: Prisma SD‑WAN control and data planes, Prisma Access (Remote Networks, Mobile Users, Service Connections). • Lead high‑severity incident response, customer communications, and root cause analysis (RCA). • Own the full service lifecycle: Customer onboarding, Change management, Platform upgrades and migrations, Decommissioning. • Validate and enforce security policies, routing and segmentation strategies, high availability and resiliency standards. • Support advanced routing implementations: BGP (required), OSPF. • Enable and support hybrid and cloud connectivity: AWS, Azure, Google Cloud Platform. • Partner with security teams to align network enforcement with enterprise security posture. • Contribute to automation and standardization.

• Participate in a 24×7 on-call rotation as a Tier‑3 escalation engineer for Fortinet network stack with a focus on Fortinet Secure SD-WAN and FortiSASE. • Troubleshoot and resolve complex issues across: FortiGate Secure SD-WAN control and data planes, FortiSASE (ZTNA, SWG, FWaaS), IPsec/ SSL VPN, BGP, NAT, and firewall policy enforcement. • Lead high‑severity incident response, customer communications, and root cause analysis (RCA). • Act as a technical escalation point during major outages. • Lead support Fortinet/FortiSASE architectures, including: Fortinet SD‑WAN branch and hub designs, Fortigate/FortiSASE for ZTNA, SWG, and FWaaS. • Validate and enforce security policies, routing and segmentation strategies, high availability, and resiliency standards. • Support: Zero Trust Network Access (ZTNA), Secure Web Gateway (SWG), Cloud‑delivered firewall policies (FWaaS).

Wilson Elser is a leading defense litigation law firm with more than 1400 attorneys in 46 offices throughout the United States. Founded in 1978, we rank among the top 100 law firms identified by The American Lawyer and 36 in the National Law Journal’s survey of the nation’s largest law firms. The Position We're looking for a Senior Network Engineer to own and evolve our enterprise network across multi-site and cloud environments. You'll be a key technical voice shaping infrastructure strategy, driving security posture through zero-trust principles, and ensuring high availability for business-critical systems — all while working remotely on a collaborative, senior-level team. Key Responsibilities Design & Architecture - Architect scalable, resilient network solutions including routing/switching, SD-WAN, firewalls, VPN, QoS, and zero-trust segmentation. - Define requirements, evaluate technologies, and lead infrastructure changes from design through implementation. - Develop and maintain business continuity and disaster recovery plans for all network components. Operations & Maintenance - Perform proactive maintenance — patching, upgrades, tuning, and health monitoring across the networking estate. - Manage vulnerability findings and vendor security advisories for network equipment and systems. - Maintain accurate network documentation, configuration baselines, and topology diagrams. - Own and resolve network-related incidents and service requests, driving issues to resolution. Collaboration & Strategy - Partner with security, infrastructure, and application teams to support firm-wide initiatives. - Evaluate emerging technologies and translate their impact into actionable recommendations. - Serve as a technical mentor and backup resource across the Network Engineering team. - Communicate clearly with technical and non-technical stakeholders at all levels. Qualifications - 10+ years of hands-on network engineering experience across multi-site enterprise environments - Bachelor's degree in Computer Science, Information Technology, or a related field — or equivalent professional experience. - Palo Alto Firewalls - Production deployment, policy management, and troubleshooting of Palo Alto NGFW (Panorama experience a strong plus). - Cisco ACI - Hands-on experience with Nexus 9300/9000 series in ACI mode — fabric design, EPG/contract configuration, and troubleshooting. - Proven ability to architect, implement, and troubleshoot complex, multi-vendor network infrastructure. - Strong documentation habits — you leave networks better documented than you found them. - Ability to translate ambiguous business requirements into clear, implementable technical designs. - Excellent communication skills — comfortable presenting to both engineers and executives. - Strong project management instincts with the ability to juggle multiple workstreams independently. - A collaborative, team-first mentality balanced with the ability to drive work autonomously. - Routing & Switching - Deep expertise in enterprise routing protocols (OSPF, BGP) and switching (VLANs, port channels, spanning tree, QoS) across multi-site environments. - Cisco certification at the professional or expert level (CCNP, CCDP, or CCIE) strongly preferred. - Experience in professional services, financial services, or legal industry environments. - Familiarity with network automation tooling (Ansible, Python/Netmiko, Terraform for network infra). - Experience with public cloud networking (AWS, Azure) and hybrid connectivity patterns. - Exposure to Panorama for centralized Palo Alto management at scale. - Core Networking - SD-WAN (Silver Peak / HPE Aruba EdgeConnect) — deployment, policy, and optimization - DMVPN, IPSec VPN, and secure remote access architectures - Load balancing (Citrix NetScaler / ADC) — configuration, SSL offload, and health monitoring - Wireless networking via Cisco Meraki — deployment, RF planning, and troubleshooting - Network tapping and packet capture solutions for visibility and forensics - Security & Zero Trust - Zscaler (ZIA/ZPA) — implementation, policy configuration, and troubleshooting - ACL development and firewall policy lifecycle management - Zero-trust network segmentation principles and implementation - WAF configuration and proxy infrastructure - Collaboration & Voice - Cisco Call Manager (CUCM) and Unity Connection — administration and troubleshooting - Network monitoring and management platforms (SolarWinds, PRTG, or equivalent) A variety of factors are considered in making compensation decisions, including but not limited to experience, education, licensure and/or certifications, geographic location, market demands, other business and organizational needs, and other factors permitted by law. Final salary wages offered may be outside of this range based on other reasons and individual circumstances. This position is considered full-time and therefore qualifies for benefits including 401(k) retirement savings plan, medical, dental, vision, disability, and life insurance. Details of participation in these benefit plans will be provided if an employee receives an offer of employment. Salary Range: $135,000—$150,000 USD Why Should You Apply? - Benefits: Outstanding benefits package, including 401k match and generous PTO plan - Career Growth: Ample opportunities for professional development and advancement - Employee Perks: Access to corporate discount plans and other benefits Wilson Elser welcomes submissions of candidates for our open positions exclusively from recruitment agencies with an active, signed fee agreement who have been granted access to a position through our dedicated Recruitment Agency Portal. We are unable to consider submissions from recruitment agencies without a current (dated as of 7/1/2024) agreement in place. We appreciate your understanding. For collaboration inquiries or to establish an agreement, please contact us at talentacquisition@wilsonelser.com. Wilson Elser is committed to a collegial work environment in which all individuals are treated with respect and dignity. It is the Firm's policy that employment will be based on merit, qualifications, and competence. Further, employment decisions will be made without regard to an applicants race, color, age, sex, religion, creed, national origin, ancestry, citizenship, marital status, sexual orientation or preference, gender identity, physical or mental disability, status as a victim of domestic violence, sex offenses, or stalking, past or present service in the uniformed services or application or obligation to serve in the uniformed services, or any other characteristic protected by law. Wilson Elser endeavors to make the Wilson Elser website accessible to any and all users. You may review our Accessibility Policy here. California Residents may review our CCPA notice for applicants and employees here. #ZR