Senior L3 Network Engineer
Boost your chances before you apply.
CTI Consulting
Pleasanton, CA, US
Summary
The Senior L3 Network Engineer will lead plant-wide network remediation and OT security initiatives while modernizing core routing infrastructure. Responsibilities include designing Zero Trust microsegmentation, deploying industrial-grade WiFi, and managing multi-cloud network architectures.
Job Description
About This Opportunity
CTI Staffing is partnering with a leading consumer goods manufacturer to find a Senior L3 Network Engineer for their network security team based in Pleasanton, CA. This team is leading a plant-wide network remediation and OT security initiative, converging IT and industrial network environments while modernizing core routing infrastructure. This is a high-visibility role for someone who wants to own both the network backbone and the industrial security layer protecting it.
What You'll Do
- Serve as the subject matter expert for BGP routing across data center, WAN, and cloud environments
- Design and enforce Zero Trust microsegmentation across industrial control system environments
- Architect and deploy industrial-grade WiFi networks engineered for high-interference manufacturing environments
- Administer next-generation firewall infrastructure and Zero Trust security policies
- Design and support SD-WAN solutions across hybrid WAN and direct cloud connectivity
- Implement and maintain multi-cloud network architecture across major cloud providers
- Build network automation using infrastructure-as-code tooling
- Lead root cause analysis and resolution for major network incidents
Requirements
What You Bring
Must-Have:
- 10+ years of enterprise network engineering experience across data center, cloud, and manufacturing/OT environments
- SME-level expertise in BGP routing, including traffic engineering and route redistribution at enterprise scale
- Demonstrated hands-on experience designing and deploying industrial/OT WiFi networks in factory floor settings
- Experience with OT/ICS microsegmentation technologies protecting SCADA/PLC/MES systems
- Deep experience with enterprise-grade routing and switching platforms
- Strong background administering next-generation firewalls and Zero Trust security policies
- Experience designing and deploying SD-WAN solutions
- Native multi-cloud networking experience across major cloud platforms
Nice-to-Have:
- Infrastructure-as-code experience (Terraform, Ansible, Python)
- Experience with enterprise network monitoring platforms
- CCNP Enterprise / CCIE (Routing & Switching, Enterprise, or Wireless)
- PCNSE certification
- CWNA or ISA/IEC 62443 Cybersecurity Specialist certification
Technical Environment:
- Cisco Catalyst, Nexus, ISR/ASR routing and switching
- Palo Alto Strata, Panorama, GlobalProtect
- Cisco Viptela and Palo Alto Prisma SD-WAN
- Azure, AWS, GCP
- Terraform, Ansible, Python
- Wireshark, SolarWinds, ThousandEyes, Splunk
What Success Looks Like:
- OT network segmentation implemented and validated within the first 3-6 months
- Industrial WiFi deployment completed with documented RF site survey results
- Stable, well-documented BGP routing posture across WAN and cloud connectivity
CTI is a prominent security consulting, planning, and design corporation. CTI’s security experts, specialists, and engineers have provided high tech security and operational/programmatic solutions for federal, state, and city governments, major corporations, and the aviation industry since 1986. CTI is a woman, minority owned corporation certified by the US Small Business Administration and the US Department of Transportation as a Small Disadvantaged Business Enterprise. Headquartered in Germantown, Maryland, CTI has regional offices in Houston, TX, Austin, TX and Chicago, IL.
CTI has extensive and comprehensive knowledge and experience in all areas of security, including vulnerability assessments, training, counterterrorism support, design of security systems, and emergency plan development. CTI’s experience, professionalism and dedication to customer service is evident by the many multi-year projects awarded to the firm.
CTI does not represent any security equipment or products, nor does it have any alliances with manufacturers or vendors offering products or services, which ensures our objectivity and provides our clients with the assurance that our only goal is total client satisfaction and the successful completion of all project tasks.
Founded
1986
Company size
11-50 employees
Industry
Public Safety
Org type
Privately Held
Headquarters
Germantown, MD