Network Engineer III

CBTS serves enterprise and midmarket clients across the United States and Canada, providing a suite of flexible technology solutions. The Network Engineer III is responsible for operational support, troubleshooting, and optimization of complex enterprise network environments, acting as a Tier 3 escalation engineer for customer networks.

Responsibilities:

• Participate in a 24×7 on‑call rotation as a Tier‑3 escalation engineer
• Troubleshoot and resolve complex network issues across:
• • Palo Alto and Fortinet firewalls
• • Cisco IOS/XE, Nexus, and Meraki environments
• • Aruba switching and wireless infrastructures
• • F5 LTM/GTM load balancing platforms
• Lead high‑severity incident response, including:
• • Technical troubleshooting
• • Customer communications
• • Root cause analysis (RCA) and corrective actions
• Act as a senior technical escalation point during major outages and service-impacting events
• Provide senior‑level support for enterprise network architectures, including:
• • Campus, WAN, and data center networking
• • Firewall and security enforcement
• • Load balancing and application delivery
• Own the full managed service lifecycle, including:
• • Customer onboarding and service readiness
• • Change management and risk assessment
• • Hardware and software upgrades
• • Platform migrations and decommissioning
• Validate and enforce:
• • Network security policies and segmentation
• • Routing and traffic flow design
• • High availability, redundancy, and resiliency standards
• Support advanced routing implementations, including:
• • BGP (required) – policy control, filtering, and failover
• • OSPF
• Troubleshoot and support hybrid and cloud connectivity, including:
• • AWS (VPC, Transit Gateway)
• • Azure (vNET, vWAN, ExpressRoute)
• • Google Cloud Platform (VPC)
• Ensure optimized:
• • Traffic flow and path selection
• • Application performance and availability
• • SLA adherence and fault isolation
• Support enterprise firewall and security platforms, including:
• • Palo Alto Networks NGFW
• • Fortinet FortiGate
• Troubleshoot and maintain:
• • Security policies and rulebases
• • NAT, VPN (IPsec/SSL), and remote access
• • High availability firewall clusters
• Partner with security teams to align network enforcement with enterprise security posture
• Support and troubleshoot F5 Load Balancers, including:
• • LTM and GTM configurations
• • Application availability and traffic distribution
• • SSL offloading and persistence
• Assist in identifying and resolving application performance and availability issues related to network design
• Contribute to automation and standardization efforts using:
• • APIs, Python, Ansible, or Terraform (preferred)
• Improve observability using:
• • Network monitoring platforms (e.g., SNMP, API‑based telemetry, LogicMonitor)
• Develop and maintain:
• • SOPs and operational runbooks
• • Tier‑3 troubleshooting and escalation guides
• • Service readiness documentation for new platforms
• Mentor and provide technical guidance to Tier‑1 and Tier‑2 engineers
• Collaborate with Architecture, Product, and Service Management teams to continuously improve managed network offerings

Requirements:

• 7+ years of hands-on network engineering experience
• Strong experience supporting: Routers, switches, firewalls, load balancers, and WAN infrastructure
• Experience working in a Managed Services or enterprise operations environment
• Proficiency with: Network monitoring and performance analysis tools, Visio or similar tools for detailed network diagrams
• Familiarity with: Wireless technologies and site deployments, Security intelligence and vulnerability awareness
• Prior experience in network design or presales engineering is a plus
• Cisco Certified Network Associate (CCNA) – Required
• Bachelor's degree in a related field, or equivalent practical experience
• Strong hands-on experience with: Palo Alto Networks firewalls, Fortinet FortiGate, Cisco routing and switching, Cisco Meraki, Aruba switching and wireless, F5 Load Balancers
• Deep understanding of: TCP/IP, routing, and switching fundamentals, NAT, firewalling, and VPN technologies, High availability and redundancy design, QoS and application-aware networking
• BGP (required) – design, troubleshooting, and policy enforcement
• OSPF
• Experience supporting enterprise WAN and hybrid network designs
• Ability to translate architectures and concepts across vendors
• Strong troubleshooting skills in mixed-vendor customer environments
• Experience supporting both hardware-based and cloud-connected network platforms
• Cisco Certified Network Professional (CCNP) – Highly Recommended
• Vendor certifications (Palo Alto, Fortinet, F5, Aruba) are a strong plus
• Contribute to automation and standardization efforts using: APIs, Python, Ansible, or Terraform (preferred)