Staff Network Engineer
Job Summary
The Staff Network Engineer designs, deploys, and maintains Zoom's global corporate network across campus, cloud, and remote environments. This senior individual contributor role focuses on automation, operational health, and scalable infrastructure solutions. The engineer will collaborate with security and product teams to ensure secure, reliable, and observable global connectivity.
Responsibilities
- Design and operate global enterprise LAN/WAN infrastructure.
- Manage BGP peering, VLANs, and Layer 2 topology.
- Administer firewall policies and Zero Trust access control.
- Develop automation scripts and IaC for network operations.
- Provide technical escalation support and maintain documentation.
Required Skills
- 10+ years enterprise network engineering experience.
- Strong TCP/IP and packet-level troubleshooting.
- Proficiency in BGP, Layer 2 protocols, and 802.1X/NAC.
- Experience with Juniper, Aruba, and Firewall/Zero Trust platforms.
- Automation skills (scripts, playbooks, IaC).
Job Details
Responsibilities:
- Design and operate enterprise LAN/WAN infrastructure (switching, routing, wireless, MPLS/SDWAN).
- Manage global BGP peering, VLAN segmentation (802.1Q), and Layer 2 topology (RSTP/MSTP).
- Administer firewall policy, Zero Trust remote access, and 802.1X network access control.
- Support cloud network connectivity and partner with Security and Cloud Engineering teams.
- Build automation to reduce toil - scripts, playbooks, and IaC templates.
- Serve as a technical escalation point; contribute to on-call rotation.
- Write and maintain runbooks, network diagrams, and change procedures.
Required Qualifications:
- 10+ years of hands-on enterprise network engineering experience.
- Strong TCP/IP fundamentals and packet-level troubleshooting skills.
- Production BGP experience: policy, prefix filtering, and peering.
- Solid Layer 2 skills: 802.1Q VLANs, spanning tree, LACP.
- 802.1X / NAC experience in an enterprise environment.
- Firewall administration experience (Palo Alto or equivalent).
- Zero Trust / remote access platform experience (Zscaler, Prisma Access, GlobalProtect, or equivalent).
- Juniper networking experience (EX, QFX, SRX, or MX or equivalent).
- Aruba wireless experience (or equivalent).
- Network monitoring and observability experience (SNMP, NetFlow, syslog, or equivalent tooling).