Senior Network Engineer-US

About Us Onemind Services, LLC, is a distinguished MSP, CSP, and ISP, creating its own proprietary products. Our flagship, Cloudmylab, is the world's leading hosted lab solution, built entirely within our data centers. Serving the DoD and Fortune 100 companies, we're expanding our Public Cloud worldwide, powered by robust, self-owned infrastructure and unparalleled engineering expertise. Dedicated to innovation and security, our team is committed to excellence, providing scalable, efficient, and reliable solutions for digital transformation. Job Description This is a remote position. About the Role We are hiring a highly technical Senior Network Engineer with strong experience in customer deployments (Greenfield and Brownfield environments). The ideal candidate should have prior experience in an OEM TAC environment (Cisco, Juniper, Fortinet) or at a high-end system integrator handling escalations and complex troubleshooting. This role focuses on: - Customer network deployments - Production migrations - Firewall and routing implementations - Advanced routing design and troubleshooting - Enterprise VPN architectures The candidate must be a routing champion with deep protocol-level understanding and real-world implementation experience. Primary Responsibilities 1. Customer Deployments (Primary Focus) - Lead Greenfield network deployments. - Execute Brownfield migrations with minimal downtime. - Perform firewall cutovers and routing transitions. - Design and implement secure WAN architectures. - Participate in customer change windows aligned to U.S. hours. 2. Routing (Deep Expertise Required) Strong hands-on implementation and troubleshooting experience with: - BGP (iBGP, eBGP, route reflectors, route maps) - OSPF (multi-area, LSA troubleshooting) - Static routing & policy-based routing - Redistribution strategies - VRF segmentation - MPLS fundamentals - Route filtering and prefix lists Must be able to debug routing issues from packet capture level. 3. Firewall & Security Platforms Hands-on deployment and troubleshooting: Fortinet (Strongly Preferred) - FortiGate deployment - HA clustering - IPSec VPN configuration - SSL VPN - Policy optimization - NAT policies - SD-WAN configuration Cisco ASA - ASA firewall configuration - Site-to-site IPSec VPN - Remote access VPN - AnyConnect deployment - ACL and NAT troubleshooting Experience with Juniper SRX or other enterprise firewalls is a plus. 4. VPN Technologies - Site-to-site IPSec VPN - Remote access VPN - SSL VPN - Policy-based and route-based VPNs - Phase 1 / Phase 2 troubleshooting - Encryption domain mismatches