Lead Network Engineer

Job Description

BETSOL is looking for a Network Lead Engineer to own how that network is designed, secured and evolved. This is a design and build role. You will set the network architecture and standards, lead projects from requirements through cutover, and make the technical calls on routing, segmentation, security and cloud connectivity. Day-to-day monitoring, ticket handling and first- and second-line troubleshooting with our IT and NOC teams; you are the engineering authority they escalate complex design problems to, and the person who removes the root causes so those problems stop recurring. 

Key responsibilities 

Architecture and design 

• Own the end-to-end network architecture across BETSOL offices, data center and colocation sites, and cloud environments, including target-state designs and a multi-year roadmap. 
• Design LAN, WAN and SD-WAN topologies, routing (BGP, OSPF), segmentation and high-availability patterns, and document them as reference architectures and high- and low-level designs. 
• Design hybrid and multi-cloud connectivity for Azure and AWS: VNet/VPC architecture, hub-and-spoke and transit designs, ExpressRoute or Direct Connect, site-to-site VPN and private endpoints. 
• Define network standards: addressing and IP management, naming, configuration baselines, hardware and software lifecycle, and capacity planning. 

Network security and zero trust 

• Design and own next-generation firewall policy architecture, micro-segmentation and secure remote access. 
• Lead the move toward a zero trust and SASE model, including secure web gateway and private access services, in partnership with the security team. 
• Build network controls and evidence that satisfy ISO/IEC 27001 audits and customer security reviews, and remediate network findings from vulnerability scans and penetration tests. 
• Design DNS, DDoS protection, web application firewall and load-balancing patterns for internet-facing services. 

Project leadership and delivery 

• Lead network projects such as office build-outs, data center migrations, SD-WAN rollouts, firewall refreshes and cloud landing zones, from requirements and design through implementation and cutover. 
• Write implementation and rollback plans, lead change reviews, and execute or supervise high-risk changes during planned windows. 
• Evaluate vendors and technologies, run proofs of concept, and produce build-versus-buy recommendations with cost estimates. 
• Work with cloud, DevOps, security and application teams so network design is part of solution design from the start, not an afterthought. 

Automation and engineering excellence 

• Automate configuration, compliance checks and provisioning using Python, Ansible and Terraform, and manage network configuration as code with version control. 
• Define observability for the network (telemetry, flow data, synthetic checks and meaningful alerts) so operations teams detect issues before users do. 
• Act as the final technical escalation point for complex design-level problems, lead root cause analysis, and drive permanent architectural fixes. 
• Mentor network engineers, review their designs and changes, and build runbooks and knowledge so the operations team can run the network independently. 

Qualifications

Required qualifications 

• 8+ years of network engineering experience, including at least 2 years in a lead or architect capacity owning designs and projects end to end. 
• Deep expertise in routing and switching (BGP, OSPF, VLANs, VRFs, QoS) and enterprise WAN or SD-WAN design. 
• Hands-on design experience with next-generation firewalls such as Palo Alto, Fortinet or Cisco, including policy architecture and segmentation. 
• Practical cloud networking experience in Azure and/or AWS, including hybrid connectivity. 
• Network automation skills with Python and Ansible or Terraform. 
• CCNP Enterprise or CCNP Security, or an equivalent professional-level certification. 
• Strong written design documentation and the ability to explain trade-offs, cost and risk to technical and non-technical leaders. 
• Network Certifications such as CCNP, CCIE, CCDE or equivalent (Azure Network Engineer Associate, AWS Advanced Networking etc.).

Preferred qualifications 

• Experience with zero trust and SASE platforms such as Zscaler, Prisma Access or Netskope. 
• Experience with Kubernetes networking, service mesh or cloud load balancers. 
• Familiarity with ISO/IEC 27001, SOC 2 network controls and audit evidence. 
• Experience in an IT services or managed services company supporting multiple customer environments. 

Additional Information