Goodwin
Sr. Network Engineer
Goodwin’s Global Operations Team seeks a Senior Network Engineer to design, implement, and operate enterprise networking and security platforms across LAN, WAN, wireless, telephony, multi‑cloud networking (Azure & AWS), and Secure Access Service Edge (SASE) architectures. This role requires deep expertise in Cisco networking, Palo Alto security platforms, SASE/SD‑WAN, and public cloud networking services.
What You’ll Do
Design, implement, and support enterprise networking infrastructure, including LAN/WAN, SD‑WAN, firewalls, VPNs, routing, switching, wireless, and voice.
Architect, deploy, and operate SASE solutions, including secure internet breakout, identity‑based access controls, cloud‑delivered security services, traffic steering, resiliency, and high availability across multiple transports and regions.
Implement and manage Cisco platforms (Catalyst, Nexus, ISR/ASR, Call Manager, IOS‑XE/NX‑OS).
Manage and optimize Palo Alto platforms, including next‑generation firewalls and cloud‑delivered security services (SSL decryption, NAT, URL filtering, DLP, GlobalProtect, Threat Prevention).
Design, deploy, and administer Microsoft Azure and AWS networking services, including Azure: VNets, VPN Gateway, ExpressRoute, Network Security Groups, Azure Firewall, Load Balancers, Application Gateway, DNS; AWS: VPCs, Transit Gateway, Site‑to‑Site and Client VPN, Direct Connect, Security Groups, Network ACLs, Elastic Load Balancing, Route 53.
Support secure hybrid and multi‑cloud connectivity between on‑premises environments, Azure, AWS, and SASE points of presence.
Enforce security and compliance using segmentation, zero‑trust principles, least‑privilege access, centralized policy management, and identity‑aware controls.
Perform capacity planning, monitoring, and performance optimization across WAN, cloud, and SASE infrastructures.
Collaborate with security, infrastructure, and application teams on cross‑functional initiatives.
Lead vendor engagements for network hardware, cloud connectivity, SASE services, lifecycle management, and roadmap planning.
Maintain accurate documentation, network diagrams, standards, configurations, and operational runbooks.
Provide Tier‑3 escalation support and participate in on‑call rotations.
Who You Are
Bachelor’s degree in computer science, Information Technology, or equivalent experience.
8+ years of hands‑on experience in enterprise network and security engineering.
Preferred certifications: Cisco CCNP/CCIE, Palo Alto PCNSE, Microsoft Azure Network Engineer Associate, AWS Advanced Networking or Solutions Architect.
Expert‑level knowledge of Cisco routing and switching (BGP, OSPF, EIGRP, MPLS, QoS, VoIP, SIP, H.323); Palo Alto security technologies (App‑ID, User‑ID, Panorama, Threat Prevention); Azure and AWS networking architectures, hybrid routing, and cloud security controls; SASE and SD‑WAN architectures.
Strong experience with Aruba Wireless, ClearPass, VPNs, and remote access solutions.
Familiarity with network and security monitoring platforms (SolarWinds, Cisco DNA Center, Palo Alto Panorama, Azure Monitor, AWS CloudWatch).
Proven troubleshooting, project execution, and executive‑level communication skills.
AI‑Enhanced Responsibilities
Leverage AI‑driven analytics to detect anomalies, predict failures, and optimize network performance across on‑prem, cloud, and SASE environments.
Implement AI‑based security analytics for advanced threat detection and automated response across firewall and SASE platforms.
Use AI‑assisted traffic analysis to optimize routing, bandwidth utilization, and application performance across hybrid and multi‑cloud architectures.
Integrate AI‑powered automation to streamline configuration management, compliance validation, and change management.
AI‑Enhanced Qualifications
Experience with AI‑enabled networking and security platforms (e.g., Cisco DNA Center AI Analytics, Palo Alto Cortex, Azure AI monitoring, AWS native analytics).
Understanding of AI/ML concepts applied to networking and security, including anomaly detection, predictive maintenance, and adaptive policy enforcement.
Benefits And More
Flexible work arrangements and hybrid work schedule.
Health, dental, and vision insurance.
Life and disability insurance.
Retirement & Savings Plan.
Emergency back‑up child and adult care.
Paid vacation, sick time off, and holidays.
Professional development and career advancement opportunities.
Employee recognition and reward programs.
Employee wellness and assistance programs.
Employee discounts and perks.
Consistent with the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, an arrest and conviction record will not automatically disqualify a qualified applicant from consideration. Consistent with the SF Fair Chance Ordinance, an arrest and conviction record will not automatically disqualify a qualified applicant from consideration.
Goodwin Procter LLP is an equal opportunity employer. This means that Goodwin Procter LLP considers applicants for employment, and makes employment decisions without unlawful discrimination on the basis of race, color, gender, gender identity or expression, age, religion, national origin, citizenship status, disability, medical condition, genetic information, marital status, sexual orientation, military or veteran status, or other legally protected status.
To request a reasonable accommodation to participate in the job application or interview process in the US, contact the Benefits Department by email or by phone at 617‑570‑1800. To request any disability or neurodivergence related accommodations to participate in the job application or interview process in the UK or Germany, please email the Recruiting Department. Any information you provide will be in the strictest confidence, and only used for the purpose of providing the accommodations needed. Requesting accommodations will not adversely affect the outcome of your application.
This position is eligible for overtime: No.
The Target Salary Range for this position varies by location and is commensurate with relevant experience:
$130,000.00
–
$165,000.00 .
#J-18808-Ljbffr
What You’ll Do
Design, implement, and support enterprise networking infrastructure, including LAN/WAN, SD‑WAN, firewalls, VPNs, routing, switching, wireless, and voice.
Architect, deploy, and operate SASE solutions, including secure internet breakout, identity‑based access controls, cloud‑delivered security services, traffic steering, resiliency, and high availability across multiple transports and regions.
Implement and manage Cisco platforms (Catalyst, Nexus, ISR/ASR, Call Manager, IOS‑XE/NX‑OS).
Manage and optimize Palo Alto platforms, including next‑generation firewalls and cloud‑delivered security services (SSL decryption, NAT, URL filtering, DLP, GlobalProtect, Threat Prevention).
Design, deploy, and administer Microsoft Azure and AWS networking services, including Azure: VNets, VPN Gateway, ExpressRoute, Network Security Groups, Azure Firewall, Load Balancers, Application Gateway, DNS; AWS: VPCs, Transit Gateway, Site‑to‑Site and Client VPN, Direct Connect, Security Groups, Network ACLs, Elastic Load Balancing, Route 53.
Support secure hybrid and multi‑cloud connectivity between on‑premises environments, Azure, AWS, and SASE points of presence.
Enforce security and compliance using segmentation, zero‑trust principles, least‑privilege access, centralized policy management, and identity‑aware controls.
Perform capacity planning, monitoring, and performance optimization across WAN, cloud, and SASE infrastructures.
Collaborate with security, infrastructure, and application teams on cross‑functional initiatives.
Lead vendor engagements for network hardware, cloud connectivity, SASE services, lifecycle management, and roadmap planning.
Maintain accurate documentation, network diagrams, standards, configurations, and operational runbooks.
Provide Tier‑3 escalation support and participate in on‑call rotations.
Who You Are
Bachelor’s degree in computer science, Information Technology, or equivalent experience.
8+ years of hands‑on experience in enterprise network and security engineering.
Preferred certifications: Cisco CCNP/CCIE, Palo Alto PCNSE, Microsoft Azure Network Engineer Associate, AWS Advanced Networking or Solutions Architect.
Expert‑level knowledge of Cisco routing and switching (BGP, OSPF, EIGRP, MPLS, QoS, VoIP, SIP, H.323); Palo Alto security technologies (App‑ID, User‑ID, Panorama, Threat Prevention); Azure and AWS networking architectures, hybrid routing, and cloud security controls; SASE and SD‑WAN architectures.
Strong experience with Aruba Wireless, ClearPass, VPNs, and remote access solutions.
Familiarity with network and security monitoring platforms (SolarWinds, Cisco DNA Center, Palo Alto Panorama, Azure Monitor, AWS CloudWatch).
Proven troubleshooting, project execution, and executive‑level communication skills.
AI‑Enhanced Responsibilities
Leverage AI‑driven analytics to detect anomalies, predict failures, and optimize network performance across on‑prem, cloud, and SASE environments.
Implement AI‑based security analytics for advanced threat detection and automated response across firewall and SASE platforms.
Use AI‑assisted traffic analysis to optimize routing, bandwidth utilization, and application performance across hybrid and multi‑cloud architectures.
Integrate AI‑powered automation to streamline configuration management, compliance validation, and change management.
AI‑Enhanced Qualifications
Experience with AI‑enabled networking and security platforms (e.g., Cisco DNA Center AI Analytics, Palo Alto Cortex, Azure AI monitoring, AWS native analytics).
Understanding of AI/ML concepts applied to networking and security, including anomaly detection, predictive maintenance, and adaptive policy enforcement.
Benefits And More
Flexible work arrangements and hybrid work schedule.
Health, dental, and vision insurance.
Life and disability insurance.
Retirement & Savings Plan.
Emergency back‑up child and adult care.
Paid vacation, sick time off, and holidays.
Professional development and career advancement opportunities.
Employee recognition and reward programs.
Employee wellness and assistance programs.
Employee discounts and perks.
Consistent with the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, an arrest and conviction record will not automatically disqualify a qualified applicant from consideration. Consistent with the SF Fair Chance Ordinance, an arrest and conviction record will not automatically disqualify a qualified applicant from consideration.
Goodwin Procter LLP is an equal opportunity employer. This means that Goodwin Procter LLP considers applicants for employment, and makes employment decisions without unlawful discrimination on the basis of race, color, gender, gender identity or expression, age, religion, national origin, citizenship status, disability, medical condition, genetic information, marital status, sexual orientation, military or veteran status, or other legally protected status.
To request a reasonable accommodation to participate in the job application or interview process in the US, contact the Benefits Department by email or by phone at 617‑570‑1800. To request any disability or neurodivergence related accommodations to participate in the job application or interview process in the UK or Germany, please email the Recruiting Department. Any information you provide will be in the strictest confidence, and only used for the purpose of providing the accommodations needed. Requesting accommodations will not adversely affect the outcome of your application.
This position is eligible for overtime: No.
The Target Salary Range for this position varies by location and is commensurate with relevant experience:
$130,000.00
–
$165,000.00 .
#J-18808-Ljbffr