Role Description We’re looking for a Senior Network Engineer who dominates cloud networking — someone who can design, secure, and scale complex, global environments across AWS, Azure, and GCP with total confidence. This isn’t a routine admin job — this is for the person who owns the network layer of a modern cloud-first enterprise. You’ll lead the charge on F5 load balancing, next-gen firewalling (Palo Alto and FortiGate), and cloud interconnect design, ensuring high availability, zero downtime, and airtight security. If your idea of “troubleshooting” involves packet captures in one window and Terraform scripts in another, you’ll fit right in. What You’ll Do: - Design, build, and optimize cloud-native network architectures across AWS, Azure, and GCP. - Engineer multi-cloud connectivity — Direct Connect, ExpressRoute, and Interconnect — for high-performance, redundant global networks. - Own F5 in the cloud (BIG-IP VE / NGINX / Distributed Cloud) for advanced load balancing, traffic management, and security. - Lead firewall strategy across Palo Alto (Panorama, GlobalProtect) and Fortinet FortiGate for segmentation, VPNs, and advanced threat protection. - Architect and secure VPCs, VNets, and shared service models — routing, peering, NAT, and private connectivity. - Integrate Cisco virtual appliances and cloud-native routing solutions for scalable, secure interconnectivity. - Automate everything — leverage Python, Ansible, or Terraform to enforce consistency and speed up deployments. - Monitor and optimize performance across hybrid and multi-cloud networks using advanced observability and telemetry tools. - Lead incident response and root cause analysis for complex network or connectivity issues. - Collaborate cross-functionally with Cloud, Security, and DevOps teams to ensure seamless integration and security alignment. Qualifications - 7+ years of experience in network engineering, with 3+ years focused on cloud networking. - Deep hands-on expertise with Azure (VNets, NSGs, Front Door, peering, route tables, Private DNS). - Strong experience with AWS (VPCs, Transit Gateway, Route 53) and GCP (VPCs, Interconnect, Cloud DNS). - Master-level skills in F5 BIG-IP VE, NGINX, or F5 Distributed Cloud. - Proven experience managing Palo Alto and FortiGate in cloud deployments. - Advanced routing and security knowledge — BGP, IPSec, GRE, NAT, segmentation, and high-availability designs. - Scripting and automation skills (Python, Ansible, Terraform) — you treat infrastructure as code. - Performance and reliability mindset — you know how to design for scale and uptime. Bonus Points - Certifications: F5 CTS, Palo Alto PCNSE, Fortinet NSE, Cisco CCNP/CCIE, AWS/Azure/GCP Network Specialty. - Experience with SASE, Zero Trust, or Cloud Security Posture Management frameworks. - Strong background in large-scale network transformations or multi-cloud migrations. What Makes You a Fit - You build secure, scalable, self-healing networks that never go down. - You’re cloud-native to the core — no rack, no cable, no problem. - You can visualize complex architectures and explain them simply. - You stay calm in the fire and find elegant fixes under pressure. - You’re hands-on, proactive, and proud of running a network that just works — flawlessly.

• Design, implement, and manage network infrastructure to meet program requirements. • Ensure the reliability, performance, scalability, and security of network environments. • Collaborate with IT teams and stakeholders to develop, maintain, and enforce network policies and standards. • Troubleshoot and resolve complex network issues using industry-standard tools and methodologies. • Configure and manage network hardware and software, such as routers, switches, and firewalls. • Conduct network assessments and recommend improvements to architecture and performance. • Support automated network configuration, monitoring, and operational workflows. • Develop and maintain technical documentation, diagrams, and network procedures. • Apply network engineering and data security best practices across all solutions. • Stay current with industry trends, emerging technologies, and evolving security requirements. • Manage multiple workstreams simultaneously while maintaining strong attention to detail.

Title: Network Engineer (Mortgage Industry) Location: United States Department: Information Technology Job Description: POSITION OVERVIEW: CMG Financial is looking for an experienced Network Engineer to design, implement, and manage enterprise network infrastructure across on-premises, hybrid, and Azure cloud environments. You will work with cutting-edge technologies including Palo Alto next-generation firewalls, Azure networking services, and modern SASE architectures to ensure secure, high-availability connectivity for our organization. ESSENTIAL DUTIES and RESPONSIBILITIES, includes the following responsibilities, but not limited to: Firewall & Security Operations - Review and update Palo Alto security policies, NAT rules, and App-ID/User-ID configurations - Monitor threat prevention alerts, URL filtering hits, and WildFire submissions - Manage VPN tunnels (site-to-site and remote access) — check tunnel status, address drops or mismatches Azure Networking - Monitor NSG flow logs, Azure Network Watcher, and Connection Monitor for anomalies - Review hub-and-spoke topology health — VNet peering, private endpoints, DNS resolution - Check Azure Firewall policy hits and deny logs Change & Configuration Management - Implement and document approved network changes (firewall rules, VLAN changes, routing updates) - Use Panorama/Strata Cloud Manager to push policy updates across managed firewalls - Maintain and update network documentation (topology diagrams, runbooks, IP addressing) Ticket & Problem Resolution - Respond to and triage network incidents — Layer 1–7 troubleshooting, root cause analysis - Triage and prioritize incoming tickets from the service desk queue; assign severity and ownership - Investigate and resolve network-related incidents (connectivity failures, latency, application access issues) - Perform root cause analysis on recurring issues and document findings for problem records - Update ticket status, add work notes, and communicate resolution steps to stakeholders - Escalate complex issues to senior engineers or vendors with full diagnostic context (logs, captures, configs) - Close resolved tickets with detailed resolution notes for knowledge base reuse Automation & IaC - Write or maintain PowerShell/Python/Bash scripts for operational tasks - Update Terraform configs for infrastructure changes; validate and plan before apply Collaboration - Communicate with application, security, and helpdesk teams on connectivity issues - Participate in on-call rotation; hand off or escalate as needed - Attend change advisory or ops standup meetings QUALIFICATIONS AND EXPERIENCE: Education and Experience - Bachelor's degree in Computer Science, Information Technology, or a related field — or equivalent hands-on experience - 3–7+ years of network engineering experience in enterprise, multi-site, or hybrid cloud environments Core Networking Skills - Deep understanding of TCP/IP, subnetting, routing, switching, VLANs, DNS, and DHCP - Experience Cisco Catalyst, Nexus and Meraki switches - Experience with BGP in enterprise or hybrid cloud environments - Hands-on experience with firewalls, including rule creation, NAT, and VPNs - Experience with load balancing technologies (NetScaler ADC Preferred) and network segmentation, including Zero Trust design principles - Strong troubleshooting capability across Layer 1–7, including incident response, root cause analysis, and performance optimization - Strong understanding of network security concepts: Zero Trust architecture, IDS/IPS, and DDoS mitigation - Experience implementing secure segmentation across on-premises and cloud environments Palo Alto Networks - Hands-on experience with Palo Alto NGFW: security policy management, NAT, App-ID, User-ID, and Content-ID - Experience configuring site-to-site and remote access VPNs using Palo Alto firewalls - Experience with threat prevention, URL filtering, and WildFire services - Experience using Panorama / Strata Cloud Manager for centralized firewall management - Experience with Prisma Access (SASE), including remote user access, service connections, and identity integration (SAML, Azure AD) - Experience with Strata Cloud Manager for policy management, visibility, logging, and analytics - Understanding of Zero Trust Network Access (ZTNA) and modern SASE architectures Monitoring & Tooling - Experience with network monitoring and troubleshooting tools: SolarWinds, and Wireshark - Familiarity with SD-WAN and enterprise wireless networking (802.11 standards, controllers, access points) Collaboration & Communication - Strong communication skills with the ability to work across technical and non-technical teams - Ability to document network architecture, standards, and operational procedures - Strong analytical and problem-solving skills with attention to detail - Ability to participate in on-call rotation as needed Preferred Certifications - Azure Network Engineer Associate - Palo Alto PCNSE - Cisco CCNA / CCNP Nice to Have - Strong experience with Azure networking: VNets, subnet design, and IP addressing strategies - Experience configuring and managing NSGs, ASGs, and Azure Firewall policies - Experience with Azure Load Balancer (Layer 4), Application Gateway (Layer 7), and Azure Front Door - Experience designing hybrid connectivity: Site-to-Site VPN, Point-to-Site VPN, and ExpressRoute with BGP routing - Experience with Private Endpoints, Private Link, VNet peering, hub-and-spoke architectures, and Azure Private DNS Zones - Experience integrating PaaS resources with virtual networks (VNet integration, service endpoints) - Experience using Azure Network Watcher, Connection Monitor, NSG flow logs, and packet capture - Scripting experience in Python, PowerShell, or Bash for automation and operational efficiency - Experience with IaC tools: Terraform, ARM templates, and Bicep - Familiarity with YAML for configuration, pipelines, and automation workflows - Experience with Azure landing zones and large-scale hub-and-spoke architectures - Experience with enterprise SASE deployments - Experience in DevOps / NetDevOps environments - Familiarity with compliance frameworks such as NIST or ISO 27001 SUPERVISORY RESPONSIBILITIES: Direct Reports: NA PHYSICAL and ENVIRONMENTAL CONDITIONS: This role operates in an ADA compliant office environment, utilizing typical office equipment and tasks including computer work. The position may involve partial stationary positions and moving throughout the day. Flexibility to work overtime to meet project deadlines is required. Base Compensation Information – For residents of the states of CA & CO, and for NY + other areas requiring disclosure: CMG pays a salary of $110,000.00 to $130,000.00 total compensation annually. Factors that affect salary may include: Education, years of experience in Network Engineering, prior work history for a first mortgage lender and software knowledge. CMG Financial is an equal opportunity employer and does not unlawfully discriminate in employment decisions. CMG will consider all qualified applicants without regard to race, religion, national origin, sex, age, veteran status, disability, familial status, marital status, actual or perceived sexual orientation, or actual or perceived gender identity. CMG MORTGAGE, INC. NMLS #1820 If you are a recruiter or placement agency, please do not submit resumes to any person or email address at CMG Financial prior to having a signed agreement . CMG Financial is not liable for and will not pay placement fees for candidates submitted by any agency other than its approved recruitment partners. Furthermore, any resumes sent to us without an agreement in place will be considered your company’s gift to CMG Financial and may be forwarded to our recruiters for their attention.

• Direct the upstream data team to extract, normalize, and validate legacy network configurations from acquired companies, hunting for IP conflicts and hardware limitations. • Analyze complex, custom-designed legacy networks and map them to our standardized target-state architectural archetypes. • Lead targeted interviews with client SMEs to determine if complex routing or firewall configurations are driven by strict regulatory mandates (PCI-DSS, HIPAA, SOC 2) or historical design choices. • Write and maintain the Master Requirements Document, locking the technical scope and delivery baseline for the migration execution teams. • Consolidate fragmented discoveries into centralized executive dashboards, providing the PMO and client leadership with a single pane of glass for technical debt and migration readiness.