{"id":4141474,"url":"https://alion.io/job/vesta-senior-network-engineer","title":"Senior Network Engineer","company":{"id":445072,"name":"Vesta","domain":"vesta.com","url":"https://alion.io/company/vesta-5","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"C","score":67,"open_postings":11,"ghost_share":0.545,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Networking","role_family":"Networking","seniority":"senior","employment_type":"contractor","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_company_offices","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon CloudWatch","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"BGP","optional":false},{"name":"Cloudflare","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"OSPF","optional":false},{"name":"PCI DSS","optional":false},{"name":"pfSense","optional":false},{"name":"Proxmox VE","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"VPN","optional":false},{"name":"Ansible","optional":true},{"name":"CloudFormation","optional":true},{"name":"Python","optional":true},{"name":"Terraform","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-11-12T02:14:38Z","employer_posted_date":null,"last_verified_at":"2026-11-12T02:14:38Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"About Vesta\n\nVesta helps wireless providers make more money byimprovinga part of theirbusinessmostdon’tthink about — payments. Vesta works with major names like AT&T, Rogers, Telcel, and Vodafone, helping them stop fraud, reduce failed transactions, and make sure moretransactions are successful. ForMNOs,MVNOs and prepaid carriers, this can mean fewer lost customers and more revenue — all without adding friction to the checkout experience. With over 100 million transactions processed every year in 40+ countries, Vestahelpswireless providers turn their payment systems into a competitive advantage.\n\nNote: This is a 6-12 month Contract Position.\n\nPosition Summary\n\nVesta Corporation is seeking a Senior Network Engineer to lead the design, implementation, and ongoing operations of our global enterprise network. This is a senior individual-contributor role operating at the intersection of complex multi-site networking, hybrid cloud infrastructure, and PCI compliance. The ideal candidate brings 10+ years of hands-on enterprise networking experience, deep fluency with AWS network architecture and security services, strong familiarity with both commercial and open-source tooling, and the ability to drive infrastructure modernization initiatives with limited oversight.\n\nKey Responsibilities\nOn-Premises & Hybrid Network Infrastructure\n\nDesign, implement, and maintain scalable, secure network infrastructure across data centers, remote sites, and AWS/Azure cloud environments.\n\nArchitect and operate routing and switching infrastructure including BGP, NAT, VLANs, Spanning Tree, IPsec VPNs and HSRP.\n\nManage and tune enterprise firewall platforms (Cisco, pfSense, Check Point) in alignment with PCI DSS segmentation and access control requirements.\n\nAdminister and optimize F5 BIG-IP LTM/GTM for application delivery, load balancing, and traffic steering across production environments.\n\nManage Cloudflare DNS, WAF, and network security policies for internet-facing properties.\n\nMaintain network security policy management via FireMon; contribute to access path analysis and rule lifecycle management.\n\nManage Proxmox-based virtualization as it relates to network-adjacent workloads and VM/LXC networking.\n\nCoordinate with vendors and carriers to manage WAN circuits, resolve outages, and drive cost optimization.\n\nAWS Network Design & Operations\n\nDesign, deploy, and maintain AWS Virtual Private Clouds (VPCs) including subnet design, CIDR allocation, route tables, internet gateways, and NAT gateways across multi-account and multi-region environments.\n\nArchitect and manage VPC-to-VPC connectivity via VPC Peering, AWS Transit Gateway, and PrivateLink to support secure, scalable inter-service communication.\n\nConfigure and maintain AWS Site-to-Site VPN and Direct Connect circuits for hybrid connectivity between on-premises data centers and AWS environments.\n\nDesign and enforce AWS Security Group and Network ACL policies as network-layer access controls, aligned with PCI DSS segmentation requirements.\n\nManage DNS architecture within AWS using Route 53 for private hosted zones, resolver endpoints, conditional forwarding, and DNS failover across hybrid environments.\n\nConfigure and manage AWS NAT Gateways, Elastic IPs, and Elastic Load Balancers (ALB/NLB) for workload exposure and traffic routing.\n\nMaintain AWS network connectivity for partner data and compute workloads migrated into cloud environments, including GDPR and data sovereignty considerations.\n\nAWS Security & Compliance\n\nImplement and maintain AWS security controls at the network layer including Security Groups, NACLs, VPC Flow Logs, and WAF rulesets on CloudFront and ALB.\n\nEnable and manage AWS CloudTrail across accounts to ensure comprehensive API activity logging; integrate with centralized SIEM for alerting and audit evidence.\n\nConfigure and maintain AWS GuardDuty for threat detection; triage findings and drive remediation in coordination with the security team.\n\nManage AWS Security Hub to aggregate and prioritize findings from GuardDuty, Inspector, Macie, and third-party integrations; produce compliance posture reports for PCI DSS and SOC 1 Type 2 audits.\n\nAdminister AWS IAM policies, roles, and permission boundaries as they relate to network resource access; enforce least-privilege principles across VPC, Direct Connect, and Transit Gateway configurations.\n\nUse AWS Config rules and AWS Organizations SCPs to enforce network security standards and detect drift across multi-account environments.\n\nMonitoring, Observability & Automation\n\nMonitor AWS network health using VPC Flow Logs, CloudWatch metrics and alarms, Transit Gateway Network Manager, and Reachability Analyzer.\n\nBuild and maintain CloudWatch dashboards and alarms for network throughput, latency, NAT gateway utilization, VPN tunnel status, and Direct Connect metrics.\n\nEvaluate, deploy, and operationalize FOSS tools as replacements for commercial products where appropriate (e.g., Oxidized, NetBox)\n\nContribute to Infrastructure as Code for network resources using automation; enforce configuration consistency across environments.\n\nMaintain comprehensive documentation for network topology, configurations, and operational runbooks; support PCI DSS and SOC 1 Type 2 audit evidence collection.\n\nParticipate in on-call rotation and be available for after-hours work including unscheduled incidents.\n\nTravel to domestic data center and office locations as needed to support deployments or incidents.\n\nTechnical Expertise & Core Competencies\nRequired On-Premises\n\n10+ years of hands-on enterprise networking experience in large-scale, multi-site environments.\n\nExpert-level Cisco routing and switching: IOS/NX-OS, BGP, OSPF, EIGRP, VLANs, STP, QoS.\n\nEnterprise firewall administration: Cisco ASA/FTD, pfSense, and Check Point. Rule management, segmentation strategy, and change control.\n\nF5 BIG-IP LTM/GTM: virtual servers, pools, iRules, traffic policies, and GTM topology records.\n\nCloudflare: DNS management, WAF rulesets, and security policy administration.\n\nFireMon: policy analysis, rule review workflows, and access path validation.\n\nDeep understanding of TCP/IP, DNS, DHCP, routing/switching protocols, and secure remote access.\n\nExperience operating in PCI DSS compliant environments including control implementation and audit evidence collection.\n\nRequired AWS Networking & Security:\n\nVPC architecture: subnet design and CIDR planning, route tables, internet gateways, NAT gateways, and VPC endpoints.\n\nVPC connectivity: VPC Peering, Transit Gateway, and AWS PrivateLink for inter-VPC and cross-account routing.\n\nHybrid connectivity: Site-to-Site VPN and Direct Connect configuration, BGP peering, and failover design.\n\nSecurity controls: Security Groups, Network ACLs, and VPC Flow Logs for traffic visibility and PCI segmentation enforcement.\n\nDNS: Route 53 private hosted zones, resolver endpoints, conditional forwarding rules, and health-check-based failover.\n\nLoad balancing and exposure: Application Load Balancer (ALB), Network Load Balancer (NLB), and Elastic IP management.\n\nMonitoring and observability: CloudWatch metrics, alarms, dashboards; VPC Flow Logs analysis; Transit Gateway Network Manager.\n\nSecurity and compliance services: CloudTrail, GuardDuty, Security Hub, AWS Config, IAM policy review, and ACM.\n\nMulti-account governance: AWS Organizations, SCPs, and Control Tower network guardrails.\n\nPreferred / Nice to Have\n\nProxmox VE: VM/LXC provisioning, cluster management, and software-defined networking.\n\nInfrastructure as Code: Terraform or CloudFormation for network resource provisioning and drift detection.\n\nExperience deploying FOSS tools to replace commercial networking or monitoring products (e.g., Oxidized, NetBox).\n\nAzure networking: Azure Firewall, NSGs, and Azure DNS private zones.\n\nZero-trust / overlay VPN concepts and implementation (e.g., Tailscale or Wireguard).\n\nAWS advanced networking: CloudFront distributions, WAF on ALB/CloudFront, PrivateLink endpoint services, Network Firewall.\n\nScripting or automation: Python, Bash, or Ansible for network task automation.\n\nVendor management: circuit provisioning, carrier escalations, and hardware lifecycle coordination.\n\nQualifications\n\n10+ years of enterprise networking experience in complex, multi-site or global environments.\n\nDemonstrated hands-on proficiency with AWS networking and security services in production environments.\n\nDemonstrated ability to work independently and drive projects to completion without heavy oversight.\n\nStrong vendor management skills, able to coordinate service delivery and incident resolution with carriers, ISPs, and hardware vendors.\n\nProven ability to document infrastructure for audits, incident response, and operational continuity.\n\nWillingness and ability to travel domestically as needed (valid driver’s license required).\n\nAvailable for on-call rotation and after-hours support windows.\n\nEducation & Certifications\nEducation\n\nBachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent professional experience.\n\nRequired Certifications\n\nCisco CCNP (or higher) Enterprise, Data Center, or Security track.\n\nPreferred Certifications\n\nAWS Certified Advanced Networking, Specialty (ANS-C01) or AWS Solutions Architect | Professional.\n\nAWS Certified Security, Specialty (SCS) is a strong differentiator given the compliance posture of this role.\n\nMicrosoft Azure Network Engineer Associate or equivalent Azure networking certification.\n\nCheck Point CCSE or equivalent firewall platform certification.\n\nCCIE (any track), F5 Certified BIG-IP Administrator, HashiCorp Terraform Associate, or other advanced certifications.\n\nOriginally posted on Himalayas","description_format":"text","description_chars":9700,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Software & Embedded Finance","Mortgage Lending & Brokers"],"lifecycle":[{"event":"open","at":"2026-11-12T05:29:30Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":7,"reasons":["seen:0","win:early"],"computed_at":"2026-11-12T09:00:06Z"},"pay":null,"html_url":"https://alion.io/job/vesta-senior-network-engineer","json_url":"https://alion.io/job/vesta-senior-network-engineer.json","meta":{"generated_at":"2026-11-12T09:00:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18182,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":445072},"rest":"https://alion.io/mcp/rest/get_company?id=445072"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvesta-senior-network-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvesta-senior-network-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvesta-senior-network-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/vesta-senior-network-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvesta-senior-network-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4141474}},{"tool":"search_jobs","arguments":{"company":"vesta.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4141474},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}