Goodwin
Sr. Network Engineer – Goodwin
Join Goodwin’s Global Operations Team, and make a real impact on a global scale. At Goodwin, we work with some of the world’s most successful and innovative investors, entrepreneurs, and disruptors in the life sciences, private equity, real estate, technology, and financial industries, and where they converge. As part of the Global Operations Team – all business professionals at the firm – you’ll collaborate with colleagues from varied backgrounds and experiences, fostering an environment where cross‑functional learning, networking, and collaboration are at the core of what we do.
Here, we’re not just supporting a law firm; we’re partnering with attorneys and clients to deliver cutting‑edge solutions in high‑stakes litigation and dispute resolution, world‑class regulatory compliance and advisory services, and complex transactions. Our commitment to integrity, ingenuity, agility, and ambition drives us, and we’re proud to have been recognised as the “Best Business Team” by The American Lawyer. This is your opportunity to grow professionally in a dynamic, global environment, surrounded by forward‑thinking peers.
What You’ll Do
Design, implement, and support enterprise networking infrastructure, including LAN/WAN, SD‑WAN, firewalls, VPNs, routing, switching, wireless, and voice.
Architect, deploy, and operate SASE solutions, including secure internet breakout, identity‑based access controls, cloud‑delivered security services, traffic steering, resiliency, and high availability across multiple transports and regions.
Implement and manage Cisco platforms (Catalyst, Nexus, ISR/ASR, Call Manager, IOS‑XE/NX‑OS).
Manage and optimise Palo Alto platforms, including next‑generation firewalls and cloud‑delivered security services (SSL decryption, NAT, URL filtering, DLP, GlobalProtect, Threat Prevention).
Design, deploy, and administer Microsoft Azure and AWS networking services, including Azure: VNets, VPN Gateway, ExpressRoute, Network Security Groups, Azure Firewall, Load Balancers, Application Gateway, DNS; AWS: VPCs, Transit Gateway, Site‑to‑Site and Client VPN, Direct Connect, Security Groups, Network ACLs, Elastic Load Balancing, Route 53.
Support secure hybrid and multi‑cloud connectivity between on‑premises environments, Azure, AWS, and SASE points of presence.
Enforce security and compliance requirements using segmentation, zero‑trust principles, least‑privilege access, centralised policy management, and identity‑aware security controls.
Perform capacity planning, monitoring, and performance optimisation across WAN, cloud, and SASE infrastructures.
Collaborate with security, infrastructure, and application teams on cross‑functional initiatives.
Lead vendor engagements for network hardware, cloud connectivity, SASE services, lifecycle management, and roadmap planning.
Maintain accurate documentation, including network diagrams, standards, configurations, and operational runbooks.
Provide Tier‑3 escalation support and participate in on‑call rotations.
Who You Are
Bachelor’s degree in computer science, Information Technology, or equivalent experience.
8+ years of hands‑on experience in enterprise network and security engineering.
Preferred certifications: Cisco CCNP/CCIE, Palo Alto PCNSE, Microsoft Azure Network Engineer Associate, AWS Advanced Networking or Solutions Architect.
Expert‑level knowledge of Cisco routing and switching (BGP, OSPF, EIGRP, MPLS, QoS, VoIP, SIP, H.323), Palo Alto security technologies (App‑ID, User‑ID, Panorama, Threat Prevention), Azure and AWS networking architectures, hybrid routing, and cloud security controls, SASE and SD‑WAN architectures, including secure web gateways, zero‑trust access, identity‑based policy enforcement, and cloud security services.
Strong experience with Aruba Wireless, ClearPass, VPNs, and remote access solutions.
Familiarity with network and security monitoring platforms (SolarWinds, Cisco DNA Center, Palo Alto Panorama, Azure Monitor, AWS CloudWatch).
Proven troubleshooting, project execution, and executive‑level communication skills.
AI‑Enhanced Responsibilities
Leverage AI‑driven analytics to proactively detect anomalies, predict failures, and optimise network performance across on‑prem, cloud, and SASE environments.
Implement AI‑based security analytics for advanced threat detection, behavioural analysis, and automated response across firewall and SASE platforms.
Use AI‑assisted traffic analysis to optimise routing, bandwidth utilisation, and application performance across hybrid and multi‑cloud architectures.
Integrate AI‑powered automation to streamline configuration management, compliance validation, and change management.
AI‑Enhanced Qualifications
Experience with AI‑enabled networking and security platforms (e.g., Cisco DNA Center AI Analytics, Palo Alto Cortex, Azure AI monitoring, AWS native analytics).
Understanding of AI/ML concepts applied to networking and security, including anomaly detection, predictive maintenance, and adaptive policy enforcement.
Benefits & Compensation
Target Salary Range: $130,000 – $165,000 (varies by location and experience).
Flexible work arrangements and hybrid work schedule.
Health, dental, and vision insurance.
Life and disability insurance.
Retirement & Savings Plan.
Emergency back‑up child and adult care.
Paid vacation, sick time off, and holidays.
Professional development and career advancement opportunities.
Employee recognition and reward programs.
Employee wellness and assistance programs.
Employee discounts and perks.
Consistent with the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance an arrest and conviction record will not automatically disqualify a qualified applicant from consideration.
Consistent with the SF Fair Chance Ordinance, an arrest and conviction record will not automatically disqualify a qualified applicant from consideration.
Goodwin Procter LLP is an equal opportunity employer. This means that Goodwin Procter LLP considers applicants for employment, and makes employment decisions without unlawful discrimination on the basis of race, color, gender, gender identity or expression, age, religion, national origin, citizenship status, disability, medical condition, genetic information, marital status, sexual orientation, military or veteran status, or other legally protected status.
To request a reasonable accommodation to participate in the job application or interview process in the US, contact the Benefits Department by email or by phone at 617‑570‑1800. To request any disability or neurodivergence related accommodations to participate in the job application or interview process in the UK or Germany, please email the Recruiting Department. Any information you provide will be in the strictest confidence, and only used for the purpose of providing the accommodations needed. Requesting accommodations will not adversely affect the outcome of your application.
This position is eligible for overtime: No.
#J-18808-Ljbffr
Here, we’re not just supporting a law firm; we’re partnering with attorneys and clients to deliver cutting‑edge solutions in high‑stakes litigation and dispute resolution, world‑class regulatory compliance and advisory services, and complex transactions. Our commitment to integrity, ingenuity, agility, and ambition drives us, and we’re proud to have been recognised as the “Best Business Team” by The American Lawyer. This is your opportunity to grow professionally in a dynamic, global environment, surrounded by forward‑thinking peers.
What You’ll Do
Design, implement, and support enterprise networking infrastructure, including LAN/WAN, SD‑WAN, firewalls, VPNs, routing, switching, wireless, and voice.
Architect, deploy, and operate SASE solutions, including secure internet breakout, identity‑based access controls, cloud‑delivered security services, traffic steering, resiliency, and high availability across multiple transports and regions.
Implement and manage Cisco platforms (Catalyst, Nexus, ISR/ASR, Call Manager, IOS‑XE/NX‑OS).
Manage and optimise Palo Alto platforms, including next‑generation firewalls and cloud‑delivered security services (SSL decryption, NAT, URL filtering, DLP, GlobalProtect, Threat Prevention).
Design, deploy, and administer Microsoft Azure and AWS networking services, including Azure: VNets, VPN Gateway, ExpressRoute, Network Security Groups, Azure Firewall, Load Balancers, Application Gateway, DNS; AWS: VPCs, Transit Gateway, Site‑to‑Site and Client VPN, Direct Connect, Security Groups, Network ACLs, Elastic Load Balancing, Route 53.
Support secure hybrid and multi‑cloud connectivity between on‑premises environments, Azure, AWS, and SASE points of presence.
Enforce security and compliance requirements using segmentation, zero‑trust principles, least‑privilege access, centralised policy management, and identity‑aware security controls.
Perform capacity planning, monitoring, and performance optimisation across WAN, cloud, and SASE infrastructures.
Collaborate with security, infrastructure, and application teams on cross‑functional initiatives.
Lead vendor engagements for network hardware, cloud connectivity, SASE services, lifecycle management, and roadmap planning.
Maintain accurate documentation, including network diagrams, standards, configurations, and operational runbooks.
Provide Tier‑3 escalation support and participate in on‑call rotations.
Who You Are
Bachelor’s degree in computer science, Information Technology, or equivalent experience.
8+ years of hands‑on experience in enterprise network and security engineering.
Preferred certifications: Cisco CCNP/CCIE, Palo Alto PCNSE, Microsoft Azure Network Engineer Associate, AWS Advanced Networking or Solutions Architect.
Expert‑level knowledge of Cisco routing and switching (BGP, OSPF, EIGRP, MPLS, QoS, VoIP, SIP, H.323), Palo Alto security technologies (App‑ID, User‑ID, Panorama, Threat Prevention), Azure and AWS networking architectures, hybrid routing, and cloud security controls, SASE and SD‑WAN architectures, including secure web gateways, zero‑trust access, identity‑based policy enforcement, and cloud security services.
Strong experience with Aruba Wireless, ClearPass, VPNs, and remote access solutions.
Familiarity with network and security monitoring platforms (SolarWinds, Cisco DNA Center, Palo Alto Panorama, Azure Monitor, AWS CloudWatch).
Proven troubleshooting, project execution, and executive‑level communication skills.
AI‑Enhanced Responsibilities
Leverage AI‑driven analytics to proactively detect anomalies, predict failures, and optimise network performance across on‑prem, cloud, and SASE environments.
Implement AI‑based security analytics for advanced threat detection, behavioural analysis, and automated response across firewall and SASE platforms.
Use AI‑assisted traffic analysis to optimise routing, bandwidth utilisation, and application performance across hybrid and multi‑cloud architectures.
Integrate AI‑powered automation to streamline configuration management, compliance validation, and change management.
AI‑Enhanced Qualifications
Experience with AI‑enabled networking and security platforms (e.g., Cisco DNA Center AI Analytics, Palo Alto Cortex, Azure AI monitoring, AWS native analytics).
Understanding of AI/ML concepts applied to networking and security, including anomaly detection, predictive maintenance, and adaptive policy enforcement.
Benefits & Compensation
Target Salary Range: $130,000 – $165,000 (varies by location and experience).
Flexible work arrangements and hybrid work schedule.
Health, dental, and vision insurance.
Life and disability insurance.
Retirement & Savings Plan.
Emergency back‑up child and adult care.
Paid vacation, sick time off, and holidays.
Professional development and career advancement opportunities.
Employee recognition and reward programs.
Employee wellness and assistance programs.
Employee discounts and perks.
Consistent with the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance an arrest and conviction record will not automatically disqualify a qualified applicant from consideration.
Consistent with the SF Fair Chance Ordinance, an arrest and conviction record will not automatically disqualify a qualified applicant from consideration.
Goodwin Procter LLP is an equal opportunity employer. This means that Goodwin Procter LLP considers applicants for employment, and makes employment decisions without unlawful discrimination on the basis of race, color, gender, gender identity or expression, age, religion, national origin, citizenship status, disability, medical condition, genetic information, marital status, sexual orientation, military or veteran status, or other legally protected status.
To request a reasonable accommodation to participate in the job application or interview process in the US, contact the Benefits Department by email or by phone at 617‑570‑1800. To request any disability or neurodivergence related accommodations to participate in the job application or interview process in the UK or Germany, please email the Recruiting Department. Any information you provide will be in the strictest confidence, and only used for the purpose of providing the accommodations needed. Requesting accommodations will not adversely affect the outcome of your application.
This position is eligible for overtime: No.
#J-18808-Ljbffr