Senior Network Engineer

About the role

XTIUM is looking for a Senior Network Engineer to design, deploy and operate complex datacenter, enterprise and hybrid-cloud networks. The role covers Tier-2/Tier-3 operations support for complex incidents across on-premises, cloud and hybrid environments, and works closely with global teams.

Key responsibilities

• Work with modern datacenter technologies: Cisco Nexus 9000, vPC, VXLAN and spine-leaf architectures.
• Provide Tier-2/Tier-3 operations support for complex incidents across on-premises, cloud and hybrid environments.
• Work hands-on with Microsoft Azure networking: vWAN, VNets, VPN Gateways, NSGs, routing patterns and connectivity design.
• Design and troubleshoot IPSec Site-to-Site and Remote Access VPNs across multi-vendor firewalls (Cisco, Fortinet, etc.).
• Architect and support large-scale routing environments, including BGP, ISP/MPLS integrations and performance optimization.
• Deploy and manage enterprise infrastructure: Cisco ASR routers, Catalyst, Nexus, ASA/Firepower firewalls.
• Configure and support VLANs, OSPF, EIGRP, BGP, MPLS L2/L3 VPNs, NAT/PAT, ACLs and advanced routing/security features.
• Perform upgrades, maintenance, patching and lifecycle management across network and security platforms.
• Coordinate with ISP/MPLS providers and escalate issues with Cisco, Fortinet, Microsoft and others.
• Maintain compliance through standardized change control, configuration policies and operational best practices.

Required profile

• 8+ years of hands-on experience in cloud, enterprise or service provider networks.
• Experience building secure hybrid-cloud networks and troubleshooting large-scale, multi-layer issues.
• Strong communication and collaboration skills, especially with global teams and international clients.
• Degree in Engineering, Computer Science or a related field (experience can substitute).

Required skills

• High-end Cisco platforms: ASR, Nexus 9000, Catalyst; Cisco ACI preferred.
• Firewalls: Cisco ASA, Firepower/FTD, Fortinet FortiGate.
• Routing and switching: BGP, OSPF, EIGRP, STP, VLANs, MPLS services, NAT/PAT, ACLs.
• IPSec Site-to-Site and Remote Access VPNs.
• Preferred certifications: CCIE Routing & Switching, CCIE Security.