The Role
Lead Greenfield and Brownfield customer network deployments and production migrations. Design and troubleshoot advanced routing (BGP, OSPF, MPLS, VRF), implement firewalls (FortiGate, Cisco ASA), and build secure enterprise VPN and SD-WAN architectures. Participate in U.S.-aligned change windows and resolve complex escalations to minimize downtime.
Summary Generated by Built In
This is a remote position.
About the Role
We are hiring a highly technical Senior Network Engineer with strong experience in customer deployments (Greenfield and Brownfield environments). The ideal candidate should have prior experience in an OEM TAC environment (Cisco, Juniper, Fortinet) or at a high-end system integrator handling escalations and complex troubleshooting.
This role focuses on:
- Customer network deployments
- Production migrations
- Firewall and routing implementations
- Advanced routing design and troubleshooting
- Enterprise VPN architectures
The candidate must be a routing champion with deep protocol-level understanding and real-world implementation experience.
Primary Responsibilities
1. Customer Deployments (Primary Focus)
- Lead Greenfield network deployments.
- Execute Brownfield migrations with minimal downtime.
- Perform firewall cutovers and routing transitions.
- Design and implement secure WAN architectures.
- Participate in customer change windows aligned to U.S. hours.
2. Routing (Deep Expertise Required)
Strong hands-on implementation and troubleshooting experience with:
- BGP (iBGP, eBGP, route reflectors, route maps)
- OSPF (multi-area, LSA troubleshooting)
- Static routing & policy-based routing
- Redistribution strategies
- VRF segmentation
- MPLS fundamentals
- Route filtering and prefix lists
Must be able to debug routing issues from packet capture level.
3. Firewall & Security Platforms
Hands-on deployment and troubleshooting:
Fortinet (Strongly Preferred)
- FortiGate deployment
- HA clustering
- IPSec VPN configuration
- SSL VPN
- Policy optimization
- NAT policies
- SD-WAN configuration
Cisco ASA
- ASA firewall configuration
- Site-to-site IPSec VPN
- Remote access VPN
- AnyConnect deployment
- ACL and NAT troubleshooting
Experience with Juniper SRX or other enterprise firewalls is a plus.
4. VPN Technologies
- Site-to-site IPSec VPN
- Remote access VPN
- SSL VPN
- Policy-based and route-based VPNs
- Phase 1 / Phase 2 troubleshooting
- Encryption domain mismatches
We are hiring a highly technical Senior Network Engineer with strong experience in customer deployments (Greenfield and Brownfield environments). The ideal candidate should have prior experience in an OEM TAC environment (Cisco, Juniper, Fortinet) or at a high-end system integrator handling escalations and complex troubleshooting.
This role focuses on:
- Customer network deployments
- Production migrations
- Firewall and routing implementations
- Advanced routing design and troubleshooting
- Enterprise VPN architectures
The candidate must be a routing champion with deep protocol-level understanding and real-world implementation experience.
Primary Responsibilities
1. Customer Deployments (Primary Focus)
- Lead Greenfield network deployments.
- Execute Brownfield migrations with minimal downtime.
- Perform firewall cutovers and routing transitions.
- Design and implement secure WAN architectures.
- Participate in customer change windows aligned to U.S. hours.
2. Routing (Deep Expertise Required)
Strong hands-on implementation and troubleshooting experience with:
- BGP (iBGP, eBGP, route reflectors, route maps)
- OSPF (multi-area, LSA troubleshooting)
- Static routing & policy-based routing
- Redistribution strategies
- VRF segmentation
- MPLS fundamentals
- Route filtering and prefix lists
Must be able to debug routing issues from packet capture level.
3. Firewall & Security Platforms
Hands-on deployment and troubleshooting:
Fortinet (Strongly Preferred)
- FortiGate deployment
- HA clustering
- IPSec VPN configuration
- SSL VPN
- Policy optimization
- NAT policies
- SD-WAN configuration
Cisco ASA
- ASA firewall configuration
- Site-to-site IPSec VPN
- Remote access VPN
- AnyConnect deployment
- ACL and NAT troubleshooting
Experience with Juniper SRX or other enterprise firewalls is a plus.
4. VPN Technologies
- Site-to-site IPSec VPN
- Remote access VPN
- SSL VPN
- Policy-based and route-based VPNs
- Phase 1 / Phase 2 troubleshooting
- Encryption domain mismatches
Skills Required
- Strong experience in customer network deployments (Greenfield and Brownfield)
- Prior experience in an OEM TAC environment (Cisco, Juniper, Fortinet) or at a high-end system integrator handling escalations and complex troubleshooting
- Deep, protocol-level routing expertise (BGP, OSPF, MPLS, VRF, route maps, route reflectors, prefix lists, redistribution strategies)
- Ability to debug routing issues from packet-capture level
- Hands-on Fortinet FortiGate deployment experience (HA clustering, IPSec/SSL VPN, NAT, policy optimization, SD-WAN)
- Hands-on Cisco ASA experience (ASA configuration, site-to-site IPSec, remote access VPN, AnyConnect, ACL and NAT troubleshooting)
- Experience with enterprise VPN technologies (site-to-site IPSec, remote access, SSL VPN, policy-based and route-based VPNs, Phase1/Phase2 troubleshooting)
- Availability to participate in customer change windows aligned to U.S. hours
- Experience with Juniper SRX or other enterprise firewalls
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Onemind Services LLC is a full-service Managed Service Provider (MSP) and Cloud Service Provider (CSP) specializing in cloud, security, Internet of Things (IoT), and data center technologies. The company focuses on unifying technology, security, and innovation through cloud-native solutions, automation, and observability to help businesses scale, secure, and thrive, offering services including Infrastructure-as-a-Service (IaaS) and Platform-as-a-Service (PaaS).
