Note: The job is a remote job and is open to candidates in USA. CMG Financial is seeking an experienced Network Engineer to take meaningful ownership of their enterprise network infrastructure across on-premises, hybrid, and Microsoft Azure environments. This hands-on engineering role involves solving complex network challenges, improving reliability and security, and directly impacting the design and operation of enterprise infrastructure.

Responsibilities

• Design, implement, troubleshoot, and optimize enterprise network infrastructure across on-premises and Azure environments
• Manage Palo Alto NGFW security policies, NAT, App-ID, User-ID, Content-ID, and VPN connectivity
• Monitor and respond to threat prevention, URL filtering, and WildFire events
• Manage site-to-site and remote-access VPNs and troubleshoot connectivity, routing, and performance issues
• Use Panorama and Strata Cloud Manager to manage policies, visibility, logging, and firewall operations at scale
• Support and evolve Prisma Access and SASE capabilities, including remote-user connectivity and identity integration
• Support Azure VNets, subnets, NSGs, private endpoints, Private Link, peering, and Private DNS
• Maintain and troubleshoot hub-and-spoke network architectures
• Monitor network health using Azure Network Watcher, Connection Monitor, flow logs, and packet capture
• Support hybrid connectivity using VPNs and ExpressRoute with BGP
• Work with Azure Firewall, Load Balancer, Application Gateway, and related networking services
• Lead troubleshooting across Layers 1–7 for connectivity, latency, routing, application access, and performance issues
• Investigate complex incidents and perform root cause analysis on recurring problems
• Use tools such as SolarWinds and Wireshark to isolate and resolve network issues
• Partner with application, security, cloud, and service desk teams to drive issues through resolution
• Provide clear diagnostic context when escalating issues to vendors or other engineering teams
• Implement approved network changes involving firewall policies, VLANs, routing, segmentation, and connectivity
• Automate operational tasks using Python, PowerShell, or Bash
• Maintain and enhance infrastructure-as-code using Terraform and related technologies
• Validate infrastructure changes through appropriate planning, testing, and change-management processes
• Maintain network diagrams, runbooks, IP addressing documentation, standards, and operational procedures
• Identify opportunities to improve network reliability, security, performance, and operational efficiency

Skills

• 3–7+ years of network engineering experience in enterprise, multi-site, or hybrid cloud environments
• Strong knowledge of TCP/IP, subnetting, routing, switching, VLANs, DNS, and DHCP
• Experience with Cisco Catalyst, Nexus, and/or Meraki networking
• Hands-on experience with BGP in enterprise or hybrid-cloud environments
• Strong firewall experience, including security policies, NAT, VPNs, and network segmentation
• Hands-on experience with Palo Alto Networks NGFW technologies
• Strong Layer 1–7 troubleshooting and root cause analysis skills
• Understanding of Zero Trust, IDS/IPS, DDoS mitigation, and secure network segmentation
• Experience working in environments where availability, security, and operational discipline matter
• Strong communication skills and the ability to collaborate across technical and non-technical teams
• Ability to participate in an on-call rotation as needed
• A bachelor's degree in Computer Science, Information Technology, or a related field is preferred; equivalent hands-on professional experience is also valued
• Microsoft Azure Network Engineer Associate
• Palo Alto Networks PCNSE
• Cisco CCNA / CCNP

Company Overview

Company H1B Sponsorship