Network Support L2/L3 Professional

About the Role:

We are seeking an L2/L3 Network Engineer with 8 years of experience to support a strategic engagement with a large regionally integrated healthcare delivery system. The role spans two connected phases - a multi-week Enterprise Network Infrastructure Assessment covering the clients full site estate and vendor-hosted application connectivity and the subsequent multi-year NOC Managed Services support engagement.

This role will bring solid enterprise networking expertise, healthcare operating awareness and the ability to work across ambulatory practices, clinics, hospital campuses, data canters and hybrid connectivity environments.

Key Responsibilities

Advanced Troubleshooting Incident Management

• Execute site-by-site network discovery activities across LAN, WAN, wireless, and data center environments, including hands-on data collection at Tier 1 hospital locations and remote assessment support for Tier 2 and Tier 3 sites.
• Operate discovery tools - Device42, Lansweeper, ServiceNow Discovery, and SolarWinds - to collect configuration item data, generate topology datasets, and populate standardized inventories under the direction of the Senior Engineer.
• Extract and validate network configuration data, IP addressing, VLAN mappings, routing tables, and switch/router hardware and software versions.
• Support the perimeter security review by pulling firewall configurations, running rule audits, and documenting findings across Fortinet FortiGate and Palo Alto Networks estates.
• Contribute to data center switch inventory activities across Cisco Nexus and Arista fabrics - rack cabling documentation, port assignments, uplink/downlink mapping, and version reviews.
• Support hardware lifecycle, software and firmware currency, and end-of-life/end-of-support risk cataloguing using automated inventory extracts.
• Contribute to the site coverage tracker, risk register, and weekly deliverable packages.
• Serve as an L2/L3 network engineer within the NOC Managed Services model, handling second-line incident response and complex event triage.
• Execute standard network change management activities - VLAN additions, firewall rule adds/changes, switch port configurations, SD-WAN template applications, and routine site refresh activities - following standardized templates developed during the assessment.
• Support code upgrade and patch cycles across switches, routers, and network devices under Senior Engineer direction.
• Support hardware refresh and lifecycle activities including racking, cabling, initial configuration, and cutover coordination.
• Respond to monitoring alerts, perform initial diagnosis, resolve within L2 scope, or escalate to Senior Engineer when out of scope.
• Contribute to ServiceNow ITSM workflows - incident, change, problem, and CMDB updates.
• Support weekly status reporting, ticket closures, and change execution reporting to the SDM.

Network Design Architecture

• Contribute to and review HLD/LLD for new sites, migrations, segmentation initiatives, and firewall architectures.
• Validate designs for scalability, security, and adherence to enterprise standards.
• Recommend improvements across routing, switching, wireless, and security domains.

Firewall Network Security

• Manage and optimize Fortinet FortiGate environments, including policies, NAT, UTM profiles, VPNs, routing, and HA.
• Audit firewall rules to ensure least-privilege access and compliance.
• Support segmentation, hardening, and compliance initiatives.

Network Optimization Reliability

• Perform capacity planning, traffic analysis, and performance tuning.
• Monitor network health and proactively address chronic or systemic issues.
• Implement long-term preventive and resiliency measures.

Automation Tooling

• Develop and maintain automation scripts (Python, Bash, EEM) to streamline operations.
• Automate configuration backups, compliance checks, and monitoring integrations.

Change Management Migrations

• Lead major network changes, upgrades, firewall migrations, and routing redesigns.
• Prepare RFCs, rollback plans, risk assessments, and post-change reports.
• Coordinate with application, infrastructure, security, and ISP teams.

Vendor ISP Management

• Work with ISPs and OEMs (Cisco, Fortinet) on escalations, TAC cases, and hardware issues.
• Validate circuit performance and support last-mile troubleshooting.

Documentation Knowledge Sharing

• Maintain network diagrams, SO…