Senior Network Engineer Job Details Job Location ABEL SOLUTIONS MARIETTA - MARIETTA, GA Position Type Full Time Indirect Description COMPANY The Applied Technical Services Family of Companies (“ATS” or the “Company”) is a leading provider of critical testing, inspection, and certification services. The Company serves a diverse set of large and stable end markets including manufacturing, power generation, aerospace, medical, and defense. ATS is headquartered in Marietta, GA and employs over 1,900 team members at approximately 70 locations across the United States. Our purpose is to create a safe and reliable world. Position Description Abel Solutions is a rapidly growing IT Consulting and Managed Services provider for more than 100 companies and counting. Our growing IT System Operations team (“SysOps”) is looking for a Senior Network Engineer who will report to the Manager of Engineering. The SysOps team is a central pillar of our growth strategy, and the Senior Network Engineer who will be responsible for managing, configuring, and troubleshooting network systems remotely and on-site for diverse environments. The ideal candidate will have deep expertise in network design, configuration management, and the ability to resolve complex issues. The engineer will be working with advanced networking technologies from vendors like Juniper, Palo Alto, Fortinet, Ubiquiti, and SonicWall, ensuring seamless and secure network operations across multiple locations. The Network Engineer must have a record of self-study and be motivated to articulate findings based on industry best practices. Our team’s mission is to provide state-of-the-art network engineering services to a variety of business industries. This is your opportunity to join this growing team and leave your mark on the development of Abel Solutions IT Services and Cybersecurity department. NOTE: The successful candidate for this position will have access to information subject to U.S. export controls under the U.S. International Traffic in Arms Regulations (“ITAR”) and/or U.S. Export Administration Regulations (“EAR”). Based on the sensitivity of this information, the successful candidate must be a U.S. Person, as defined by ITAR, or, in the event the applicant is not a U.S. Person, be eligible for export licenses to be obtained from the Department of State, Directorate of Defense Trade Controls (“DDTC”) on a per-project basis to access ITAR and EAR controlled data and information. A “U.S. Person” includes (a) U.S. citizens or nationals; (b) U.S. lawful permanent residents (i.e., “green card” holders); (c) persons granted refugee status; or (d) persons granted asylum in the United States. Company may choose not to apply for such license at its discretion due to federal approval timing considerations. Job Responsibilities Remote Network Configuration & Management: · Configure and maintain complex routing and switching environments remotely using CLI across multi-vendor platforms. · Manage and troubleshoot advanced Layer 2 and Layer 3 configurations, including VLANs, STP, EtherChannel, OSPF, BGP, MPLS, and VRF on Juniper, Palo Alto, Fortinet, Ubiquiti, and SonicWall devices. · Develop and implement advanced security configurations such as zone-based firewalls, custom IPS signatures, SSL decryption, and DoS protection using CLI-based methods on Palo Alto and SonicWall firewalls. On-Site Network Installation & Troubleshooting: · Lead on-site installations of network infrastructure, including physical setup of routers, switches, access points, and firewalls. · Perform in-depth troubleshooting of physical and logical network layers using CLI tools like ping, traceroute, tcpdump, and vendor-specific commands for packet captures and log analysis. · Conduct diagnostics for routing protocols, latency issues, and packet loss on JunOS, PAN-OS, EdgeOS, and SonicOS, ensuring minimal downtime during incident resolution. Juniper Networks: · Configure Juniper SRX series firewalls using JunOS CLI for security policies, NAT rules, IPsec VPNs, and high-availability (HA) clustering. · Advanced configuration of EX/QFX switches, including VLAN trunking, LAG, Q-in-Q, and BGP/MPLS routing protocols via JunOS. · Apply advanced routing and switching configurations, including IS-IS, BGP, MPLS, and VRF, using JunOS scripting and automation where necessary. Palo Alto Networks: · Perform complex firewall rule creation, security profiles, and application-based traffic management via PAN-OS. · Configure GlobalProtect VPNs, decryption policies, and user-ID using Panorama and PAN-OS, ensuring tight integration with Active Directory and RADIUS for authentication. · Troubleshoot IPSec VPNs, SSL Decryption, and packet captures directly from the CLI using commands like show session all, debug dataplane packet-diag, and test vpn ike-sa. Ubiquiti: · Configure and deploy Ubiquiti EdgeRouters and EdgeSwitches via EdgeOS CLI, focusing on dynamic routing (OSPF, BGP), firewalling, and advanced QoS. · Deploy and manage UniFi Access Points via SSH and CLI, handling WPA2/WPA3 Enterprise configurations, VLAN tagging, and guest network isolation. · Utilize EdgeOS CLI to configure advanced NAT, load balancing, and VPN tunneling (OpenVPN, L2TP/IPsec) for multi-site configurations. SonicWall: · Administer SonicWall NSA/SMB firewalls via SonicOS, including custom NAT policies, deep packet inspection, content filtering, and SSLVPN configurations. · Configure advanced site-to-site and client VPNs using CLI commands, ensuring seamless integration with cloud and remote networks. · Utilize SonicOS CLI for dynamic routing (RIPv2, OSPF, BGP), VLAN configurations, and troubleshooting deep-packet inspection and traffic anomalies. Network Security and Monitoring: · Configure security features such as IPsec, SSL VPNs, next-generation firewall policies, and intrusion prevention systems (IPS) on Palo Alto, SonicWall, and Juniper devices. · Conduct security audits and compliance checks using automated scripts or CLI tools like junos-script or Panorama. · Manage Syslog, SNMP, and NetFlow integrations into monitoring tools such as SolarWinds, PRTG, or Nagios, ensuring centralized logging and alerting from all devices. Scripting & Automation: · Leverage Python and Ansible to automate repetitive configuration tasks across multi-vendor platforms. · Develop CLI-based automation for bulk configuration changes or validation across JunOS, PAN-OS, and EdgeOS platforms. · Use JunOS Event Scripts and Python scripts to streamline the management of complex routing or firewalling tasks. Other Responsibilities/Expectations · Attend company functions, including company meetings, to cultivate team building. · Seek out opportunities for professional skills advancement through classes, seminars, webinars, events, self-study, etc. · Assist the Abel Solutions leadership with other activities and tasks as assigned. · Obtain certifications from Microsoft or others as the role designates and is prescribed by leadership. Qualifications Experience Requirements Network Configuration & Management: · Extensive hands-on experience configuring and managing complex Layer 2/Layer 3 networks using CLI. Proficient in VLANs, STP, OSPF, BGP, MPLS, and VRF configurations for routers, switches, and firewalls. Deep understanding of high-availability clustering, dynamic routing, and load balancing. Firewall & Security: · Strong proficiency in configuring next-generation firewalls (NGFW) and VPNs (IPSec, SSL). Expertise in firewall rules, NAT, IPS/IDS, SSL decryption, and deep packet inspection. Ability to manage advanced security policies and troubleshooting for performance optimization and security compliance. Wireless & Remote Access: · Experienced in configuring and deploying wireless networks (WPA2/WPA3, VLAN tagging) and VPN solutions (site-to-site, client-to-site). Skilled in optimizing wireless access points and configuring secure remote access for distributed networks. Troubleshooting & Diagnostics: · Advanced troubleshooting skills using CLI tools like tcpdump, packet capture utilities, and log analysis for identifying and resolving network latency, routing issues, and security incidents. Ability to diagnose complex issues across both physical and logical layers of the network. Scripting & Automation: · Familiarity with Python, Bash, and automation tools like Ansible for creating scripts to automate configuration management, network monitoring, and bulk changes across multi-vendor environments. Skilled in developing network automation solutions that enhance operational efficiency. Monitoring & Performance Management: · Proficient in integrating and configuring Syslog, SNMP, and NetFlow for comprehensive network monitoring and performance analysis. Experience with network monitoring platforms for alerting, logging, and proactive troubleshooting. Soft Skill Requirements · Demonstrated enthusiasm and passion for network engineering, evidenced by a self-motivated desire for continuous learning. · Availability to respond to cyber incidents outside of standard working hours as needed that target the network layer. · Solid grasp of foundational concepts in cloud, network, and endpoint security, awareness of current threat landscapes and attack trends, as well as an understanding of defense-in-depth strategies. · Capability to manage and complete projects both independently and as part of a team. · Excellent written and oral communication to client stakeholders. · Strong professional background with the Microsoft ecosystem to include both on-premises and cloud-based products. Education Requirements · Bachelor's degree in information systems is preferred with 4+ years of networking experience o Associates with 6+ years of networking experience in lieu of a bachelor's degree o 8+ years of networking experience in lieu of a formal degree · Certifications in relevant security functions, such as: o Cisco Certified Network Associate (CCNA), Cisco Certified Network Professional (CCNP), Juniper Networks Certified Associate (JNCIA), Microsoft Certified: Azure Network Engineer Associate, and CompTIA Network ITAR U.S. Persons” Only: A requirement of this position is access to information that is subject to U.S. export controls under the U.S. International Traffic in Arms Regulations (“ITAR”). Accordingly, the company will consider only “U.S. Persons” for this position. A “U.S. Person” includes (a) U.S. citizens or nationals; (b) U.S. lawful permanent residents (i.e., “green card” holders); (c) persons granted refugee status; or (d) persons granted asylum in the United States. This information is collected solely for purposes of complying with U.S. export control requirements and will not be used to unlawfully discriminate in the hiring process. Equal Employment Opportunity Statement Applied Technical Services is an Equal Opportunity and Affirmative Action Employer encouraging diversity in the workplace. All qualified applicants will receive consideration for employment without regard to their race, color, creed, religion, national origin, citizenship status, ancestry, sex, age, physical or mental disability unrelated to ability, marital status, family responsibilities, pregnancy, genetic information, sexual orientation, gender expression, gender identity, transgender, sex stereotyping, order of protection status, protected veteran or military status, or an unfavorable discharge from military service, and other categories protected by federal, state or local law.