Role Description - Designing, redesigning, and implementation of connectivity, security, delivery and monitoring services relating to virtual networks, VPN, NAT gateways, DNS, load balancers, web application firewalls, application gateways, etc. - Extensive experience in networking within large enterprise environments, including WAN, LAN, data centers, and cloud environments. - Design, deploy, and manage cloud-based network solutions using Azure, GCP and AWS platforms. - Develop and implement strategies for seamless cloud integration, including hybrid cloud environments. - Experience with HPE Aruba network solutions, including wireless and wired networking. - Experience designing and implementing BGP routing policies to ensure optimal path selection and traffic engineering. - Continuously adapts and fine-tunes architecture, configuration standards, and protocols in partnership with Infrastructure and Security teams. - Knowledgeable in network security best practices and integration. - Developing, designing, and implementing network roadmap, architecture, standards, and governance. - Monitor network performance using advanced tools and techniques, identifying and resolving issues proactively. - Contribute in continuous process development, improvement, and automation of Perimeter Defense related solutions and support activities. - Collaborate with cross-functional teams to ensure seamless network operations. - 5+ years of designing, deploying of experience, maintaining, and improving on-prem and cloud networks. - Experience with cloud networking technologies, including VNETs, ExpressRoute, User Defined Routes, Network Security Groups, Load Balancers, Application Gateways, DNS, Route Servers, and Network Managers. - Proficiency in configuring and managing Cisco Switches, HPE Switches. - Extensive background in core networking technologies such as TCP/IP, STP, HSRP, NAT, QoS, SNMP, and SYSLOG. - Proficiency in routing technologies, specifically BGP. - Knowledge of ITIL, and change management processes. - Self-starter with high energy to meet the needs of a demanding business and IT environment. Qualifications - 5+ years of experience in designing, deploying, maintaining, and improving on-prem and cloud networks. - Experience with cloud networking technologies. - Proficiency in configuring and managing Cisco and HPE Switches. - Extensive background in core networking technologies. - Knowledge of ITIL and change management processes. Requirements - Extensive experience in networking within large enterprise environments. - Experience with HPE Aruba network solutions. - Experience designing and implementing BGP routing policies. - Knowledgeable in network security best practices. - Ability to monitor network performance and resolve issues proactively. - Strong collaboration skills with cross-functional teams. Benefits - Competitive Salary - Career Growth

Role Description Core4ce is seeking a Senior Enterprise Network Services Engineer to design, implement, and maintain secure and scalable enterprise network infrastructures. The ideal candidate will have a strong background in network engineering, security, routing, firewall management, load balancing, and automation. This role requires deep knowledge of TCP/IP networking, encryption protocols, traffic analysis, scripting, and cloud networking. Additionally, the candidate will be responsible for planning IT security projects, troubleshooting complex network issues, and ensuring compliance with security policies. - Design, configure, install, and manage enterprise network infrastructure, including routers, switches, firewalls, and load balancers. - Plan and schedule the installation or modification of network hardware and software. - Implement and maintain secure network configurations across multi-VRF Cisco routers and enterprise environments. - Troubleshoot and analyze TCP/IP network traffic, including TCP 3-way handshake, TCP window scaling, and MSS. - Capture and analyze network packets using TCPDump (Linux) and Flow Monitor Capture (Cisco ASR). - Implement multi-protocol routing solutions with BGP, OSPF, and VRF-based networks. - Use Wireshark, TCPDump, and other diagnostic tools for network performance analysis. - Perform TLS/SSL handshake troubleshooting and security configuration. - Configure and maintain firewalls (Palo Alto, Cisco), including security policies, VPNs, and intrusion prevention systems (IPS). - Implement AAA technologies (Cisco ISE, LDAP, OTP) for access management. - Ensure certificate management and encryption, including TLS/SSL and OpenSSL operations. - Install, configure, and troubleshoot digital certificates on F5 LTM/GTM/APM/ASM appliances. - Implement F5 Client Constrained Delegation (C3D) for certificate delegation. - Enable certificate-based authentication using Client-SSL profiles and APM policies. - Deploy and maintain network monitoring, alerting, and repair systems in production environments. - Troubleshoot BGP neighbor configurations, VPNv4 unicast summary, and OSPF network participation. - Optimize and troubleshoot load balancing solutions and DNS-based traffic management. *This position is designed to be flexible, with responsibilities evolving to meet business needs and enable individual growth. Qualifications - Minimum 4 years of hands-on experience as a Network Administrator or Network Security Engineer. - Secret clearance w/Tier 5 investigation. - Strong knowledge of OSI and TCP/IP network models, TCP 3-way handshake, and window scaling. - Experience with Palo Alto and Cisco firewalls. - Experience with F5 LTM, GTM, APM, ASM for load balancing and security. - Cisco Certified Network Professional (CCNP) certification or equivalent experience or willingness to get within 45 days of hire. Requirements - Strong troubleshooting skills with routing protocols (BGP, OSPF, VRF, LISP). - Familiarity with network packet capture tools (TCPDump, Wireshark). - Understanding of essential network services (DNS, SMTP, NTP, IMAP, SNMP). - Experience in TLS/SSL security, OpenSSL, and certificate management. - Experience working with Unix/Linux-based systems. - Experience with network automation (REST APIs, Syslog, XML, SNMP). - Experience deploying and troubleshooting load-balanced services and SSL certificate management. Benefits - 401(k) with 100% company match on the first 6% deferred, with immediate vesting. - Comprehensive medical, dental, and vision coverage—employee portion paid 100% by Core4ce. - Unlimited access to training and certifications, with no pre-set cap on eligible professional development. - Tuition assistance for job-related degrees and courses. - Paid parental leave, PTO that grows with tenure, and generous holiday schedules. - The Forge gives every employee the chance to propose bold innovations and help bring them to life with internal backing.

**What You Will Own:** - Design and operate reliable cross-DC and hybrid connectivity across IPsec, BGP, routing policy, firewalling, DNS, Cloudflare, provider networking, and cloud connectivity. - Build highly available network paths across data centers, public cloud providers, OpenNebula, Kubernetes/Talos, and bare-metal infrastructure. - Own network changes end to end: design, risk assessment, peer review, rollout, monitoring, validation, rollback, and post-change notes. - Replace fragile manual patterns with documented, observable, repeatable services using Git review, automation, scripts, source-of-truth data, and monitoring. - Debug and resolve production incidents involving Linux networking, BIRD/FRR, strongSwan, Juniper JunOS, firewalls, Cloudflare, DNS, MTU/MSS, asymmetric routing, NAT/conntrack, packet loss, Kubernetes CNI behavior, and provider constraints. - Maintain architecture documents, topology diagrams, HLD/LLD specs, runbooks, disaster recovery procedures, configuration snapshots, IPAM/source-of-truth data, and operational handoff material. - Work closely with IaaS, SRE/Observability, Security, Automation/Data, Platform, Service Delivery, and product teams.

Role Description We are hiring a hands-on Senior Cloud Network Engineer to own and evolve the network layer of our hybrid infrastructure. This is an engineering role with real architecture ownership: you will design, implement, monitor, document, automate, secure, and troubleshoot production networking across data centers, cloud regions, Kubernetes/Talos clusters, OpenNebula environments, and bare metal. This is a technical ownership role. It is not a diagrams-only architecture position, and it is not a people-management role. You will define technical solutions, ship production changes, verify behavior, support incidents, and leave behind the runbooks, diagrams, and automation that make the next change safer. How We Work: - Remote-first Infrastructure team organized into small senior cells. - Work with one existing network engineer, core infrastructure engineers, and adjacent Infrastructure teams. - Networking is a high-impact shared dependency, valuing calm incident work and automation that reduces repeat pressure. - Focus on turning complex demand into reliable systems, clear ownership, safer changes, and observable operations. This role is a strong fit if you enjoy: - Moving between architecture, packet captures, production configuration, monitoring, runbooks, rollback plans, and failure drills. - Real ownership of cross-DC, on-prem, private cloud, and public/provider infrastructure. It is probably not the right fit if you are looking for: - A pure architecture role. - A large dedicated network team. - Only planned project work. - No incident participation. - Manual CLI-only changes without documentation, review, automation, and validation. Qualifications - Senior production networking experience in environments where availability matters. - Strong BGP and routing fundamentals: prefix filtering, communities, route policy, failover, BFD or similar mechanisms, asymmetric routing, traffic steering, and debugging. - Strong IPsec, VPN, and site-to-site connectivity experience, ideally with strongSwan or similar tooling. - Deep Linux networking knowledge: iproute2, tcpdump, nftables/iptables, conntrack, system networking, DNS behavior, NIC/offload basics, and MTU/MSS troubleshooting. - Datacenter networking fundamentals: VLANs, LACP, switching, firewalls, optics/cabling awareness, maintenance windows, and backup/recovery practices. - Cloud and provider networking experience: VPC/VNet-style networks, CIDR planning, route tables, security groups/NACLs/firewalls, NAT/egress, VPN, load balancers, DNS, and provider limitations. - Kubernetes networking fundamentals: CNI, Services, Ingress, NetworkPolicy, node/pod/service paths, egress control, DNS, load balancing, and packet-level troubleshooting. - Network observability and performance mindset: telemetry, flow logs, synthetic checks, bandwidth and latency analysis, packet loss, jitter, saturation, and provider or appliance limits. - Network security operations: segmentation, firewall rule lifecycle, least privilege, AAA concepts, secrets handling, and safe maintenance-window discipline. - Comfort with infrastructure automation using scripting, APIs, Ansible, Terraform/OpenTofu, Git-based reviews, repeatable rollouts, and configuration validation. - Clear written communication in remote and asynchronous teams: change plans, incident updates, runbooks, risk statements, rollback plans, and owner/date commitments. - Sound judgment under uncertainty: you can make bounded decisions, but you verify production impact and blast radius before acting. Requirements - Design and operate reliable cross-DC and hybrid connectivity across IPsec, BGP, routing policy, firewalling, DNS, Cloudflare, provider networking, and cloud connectivity. - Build highly available network paths across data centers, public cloud providers, OpenNebula, Kubernetes/Talos, and bare-metal infrastructure. - Own network changes end to end: design, risk assessment, peer review, rollout, monitoring, validation, rollback, and post-change notes. - Replace fragile manual patterns with documented, observable, repeatable services using Git review, automation, scripts, source-of-truth data, and monitoring. - Debug and resolve production incidents involving Linux networking, BIRD/FRR, strongSwan, Juniper JunOS, firewalls, Cloudflare, DNS, MTU/MSS, asymmetric routing, NAT/conntrack, packet loss, Kubernetes CNI behavior, and provider constraints. - Maintain architecture documents, topology diagrams, HLD/LLD specs, runbooks, disaster recovery procedures, configuration snapshots, IPAM/source-of-truth data, and operational handoff material. - Work closely with IaaS, SRE/Observability, Security, Automation/Data, Platform, Service Delivery, and product teams. Benefits - A focus on professional development. - Interesting and challenging projects. - Fully remote work with flexible working hours, allowing you to schedule your day and work from any location worldwide. - Paid 24 days of vacation per year, 10 days of national holidays, and unlimited sick leaves. - Compensation for private medical insurance. - Co-working and gym/sports reimbursement. - Budget for education. - The opportunity to receive a reward for the most innovative idea that the company can patent.