Network Engineer, Consultant

Blue Shield of California's mission is to ensure all Californians have access to high-quality health care at a sustainably affordable price. We are transforming health care in a way that truly serves our nonprofit mission by lowering costs, improving quality, and enhancing the member and physician experience.

• Lead the development of architecture blueprints, design specifications, implementation & migration plans, and operational best practices based on the data gathered from the business partners, IT peers, technology vendors and Industry best practices - to design, build and run BSC network infrastructure environments in Campus, Cloud and Datacenters.
• Deploy, monitor, and manage network infrastructure in campus networks (23 campus network locations) using Cisco Catalyst 9K switches, Cisco Catalyst Wireless Access Points & Controllers, Aruba Wireless Access Points and Controllers, Cisco ISR & ASR Routers and SilverPeak WAN optimizers.
• Implement security and compliance posture in campus networks using Cisco ISE, Cisco DNA Center, TurstSec and Software Defined Access (SDA) technologies in the campus networks using Network Admission Control (NAC) and Micro Segmentation.
• Deploy, monitor, and manage high performance and highly secure network Infrastructure in the collocated Data Centers (2 Data Centers) using Cisco ACI, Palo Alto Firewalls, F5 Load Balancers, Cisco ASR 1002 HX routers and SilverPeak Wan Optimizers.
• Implement network traffic visibility, observability and application mapping strategies using Gigamon, Extrahop, Cisco Tetration, Cisco StealthWatch, Solarwinds, Splunk and any other necessary tools to enable application and infrastructure performance optimization and to reduce mean time to restore.
• Build, monitor and manage "Infrastructure As A Service" and "Platform As A Service" environments across multiple Cloud Providers (CSP) primarily Azure and Google Cloud Platform, using both cloud native and 3rd party tools (Aviatrix, Palo Alto Prisma, F5, Infoblox) focusing on agile, automated and performance centric workflows
• Lead network services positioning and services development in hybrid cloud environment to build, monitor, and manage intercloud and cloud to on-prem connectivity solutions.
• Design, deploy, monitor, and manage Internet connectivity in Cloud platforms, Data Centers and Branch office focusing redundant high-performance routing (BGP) and edge security solutions like SASE, CDN, WAFS and IDS/IPS
• Design, deploy, monitor, and manage Wide Area Network connecting remote offices, Data Centers and Cloud Environments using MPLS and SDWAN technologies with focus on performance, security, and cost.
• Design, deploy, monitor, and manage Virtual Private Networks to connect BSC to various partner, supplier and vendor networks using private connectivity (MPLS VPNs) or Internet (IPSec VPNs).
• Design, deploy, monitor, and manage remote access networks to enable remote employees, mobile workforce and contractors using Cisco AnyConnect VPN, Meraki AutoVPN, and Citrix VDI.
• Design, deploy, monitor, and manage DNS, DHCP, IPAM and NTP service Infrastructure (DDI) using Microsoft DHCP, DNS and Infoblox architectures in campus networks, Data centers and Cloud environments. Be responsible for BSC owned internal and external name spaces, Domain Name Registrations, and IP Address and AS Number assignments.
• Be responsible for overall network security and compliance needs and strategies including the managing Cisco Umbrella DNS security and collaborate with Information Security team in implementing and managing network security tools, policies, standards, and strategies.
• Participate and provide evidence and artifacts for various internal and external infrastructure audit and Governance, Risk and Compliance (GRC) activities.
• Spearhead, Orchestrate, Implement, and mature a well-defined and well-structured network automation program across the multiple network infrastructure elements (campus, Data Center and Cloud) using Infrastructure as Code (IaC) strategies and network focused automation tools using Ansible, Python & Terraform etc.
• Manage the network monitoring platform using Solarwinds, Service Now, Splunk, and collaborate with network architects to optimize system performance and collaborate with GRC, Internal Audit and InfoSec to ensure the network security and compliance requirements are being met and being recorded in appropriate places.
• Manage and maintain clear, concise and up to date documentation for all areas of network infrastructure including all campus, data center and cloud networks using tools like Netbrain, MS Visio, and Confluence etc.
• Be an active and regular participant in knowledge capture and sharing activities with the immediate team and across the organization to facilitate the understanding of the current infrastructure as well as the emerging technologies.
• Participate in team meetings to keep the team Lead and the Manager up to date on various network activities and assist them in training and mentoring the rest of Network Engineering team.
• Participate in On-Call rotation.

• Requires a bachelor's degree or equivalent experience
• Requires at least 5 to 7 years of prior relevant experience
• Experience working with large scale network environments including LANs, WANs, Data Center Networks & Remote Access Networks
• Industry certifications such as CCNA, CCNP, Juniper, Arista, Palo Alto, VMWare, AWS, Azure and Google Cloud Platform certifications.
• Experience in designing large Data Center networks including king with large scale network with overlay technologies like SDN, Vxlan, MPBGP eVPN etc.
• Advanced level knowledge and experience in various Network protocols including TCP/IP, OSPF, BGP, MPLS
• Experience and advanced knowledge of cross-functional domains like DDI, Server & Storage virtualization, Containers, and micro services.
• Very deep understanding and hands experience in designing and building IaaS environments especially in Azure and Google Cloud Platform.
• Strong Network Automation skills using python, terraform & Ansible and familiarity with technologies like Ioc and CI/CD.
• Understanding of Network protocols including TCP/IP, OSPF, BGP, MPLS and hands on experience implementing these technologies.
• Experience working with various enterprise class network hardware. We use Cisco, Palo Alto, F5, Aruba and Silver Peak in our network currently, but we consider experience with any other enterprise-class network hardware.
• Understanding of DDI technologies from any vendor including DNS, DHCP and IPAM
• Experience Network Monitoring and Configuration Management software like Solarwinds, Nagios etc.
• Ability to work as a part of a team as well as ability to work and deliver independently with minimal oversight.
• Written and verbal communication skills and ability to reach across aisle and work collaboratively with other teams.

• Honest. We hold ourselves to the highest ethical and integrity standards. We build trust by doing what we say we're going to do and by acknowledging and correcting where we fall short
• Human. We strive to be our authentic selves, listening and communicating effectively, and showing empathy towards others by walking in their shoes
• Courageous. We stand up for what we believe in and are committed to the hard work necessary to achieve our ambitious goals