Senior Network Engineer

The Senior Network Engineer role responsible for the design, deployment, and management of enterprise-wide network and network security infrastructure. This position requires extensive expertise in core networking, cloud security, secure access service edge (SASE) solutions, network segmentation, and Zero Trust Architecture (ZTA). The successful candidate will help protect Herc Rentals' network from evolving cyber threats while ensuring availability, performance, and scalability.

This role involves cross-functional collaboration, high-level architecture planning, detailed security policy design, and hands-on implementation of modern security frameworks across enterprise WAN, LAN, wireless, and cloud environments.

• Architect, configure, and manage secure, scalable enterprise network solutions using Cisco, Fortinet, and Palo Alto platforms.
• Lead deployment and management of SASE solutions, such as Zscaler, Fortinet Secure SD-WAN, and Prisma Access from Palo Alto Networks.
• Implement and maintain Network Access Control (NAC) solutions like Cisco ISE or Forescout to enforce security policies across endpoints.
• Design and enforce network segmentation strategies to support Zero Trust models and minimize lateral threat movement.
• Perform advanced firewall rule management, traffic inspection, and policy hardening for Fortinet, Cisco ASA, and Palo Alto firewalls.
• Monitor and respond to security incidents; perform packet captures, root cause analysis, and threat remediation.
• Evaluate and implement IDS/IPS, DLP, DNS security, URL filtering, and SSL inspection tools.
• Partner with security and compliance teams to ensure the network adheres to NIST, ISO, and CIS benchmarks.
• Perform network performance monitoring, tuning, and alerting using tools like SolarWinds, FortiAnalyzer, and Palo Alto Panorama.
• Collaborate with cloud and infrastructure teams to secure hybrid cloud environments in AWS, Azure, and OCI.
• Work closely with managed security services providers (MSSPs) and respond to escalated incidents.
• Develop and maintain network and security documentation, including architecture diagrams, standard operating procedures, and playbooks.
• Provide engineering-level support for incident and problem management across networking and security systems.
• Lead or contribute to security audits, vulnerability assessments, and penetration testing remediation efforts.
• Participate in rotating on-call schedule and off-hours maintenance, upgrades, or incident response.

• 10+ years of progressive experience in enterprise network engineering and security roles.
• Proven experience with Cisco, Fortinet, and Palo Alto network infrastructure and firewalls.
• Hands-on experience with SASE architecture, including Zscaler, Prisma Access, or Fortinet Secure Access.
• Strong knowledge of NAC solutions, including deployment and policy configuration of Cisco ISE or Forescout.
• Deep understanding of network segmentation, VLAN design, micro-segmentation, and Zero Trust Network Access (ZTNA).
• Experience with routing protocols (BGP, OSPF, EIGRP), VPN technologies, DMVPN, and SD-WAN solutions.
• Familiarity with firewall high availability, site-to-site VPN, and remote access VPN architectures.
• Solid experience with security log management, SIEM integration, and tools like Splunk, FortiSIEM, or Elastic Stack.
• Exposure to cloud-native networking and security in AWS, Azure, or OCI.
• Cisco CCNP (preferred); certifications such as PCNSE, Fortinet NSE 4-7, Zscaler ZCCA-IA, or CISSP are a plus.
• Bachelor's degree in computer science, Cybersecurity, or related field (or equivalent experience).
• Excellent documentation and communication skills; ability to explain complex topics to technical and non-technical audiences.
• Strong attention to detail, critical thinking, and a proactive mindset for securing enterprise environments.
• Travel as required to data centers & field locations (10%)
• Availability for on-call rotation to support critical systems & networks.

Education:

Bachelor's degree in Computer Science, Information Technology, or a related field.

Ability to lift up to 50 pounds and experience with rack & stack of equipment in data center environments.