Network Engineer

1. Networking - Juniper, Palo Alto.  Must understand low level networking, Palo Alto devices will be in GCP where Juniper will not.  Switching remains on-prem. 
2. Networking in GCP - differences between traditional and Cloud networks.
3. Automation - Terraform, Python (small scripts), Ansible (small automation). Palo Alto - Panorama.  Scripting core skill to scale, gather data. 

Technical skillsets:

• Comprehensive understanding of BGP: Configure and troubleshoot in large global environments.
• Comprehensive understanding of routing concepts: Inter-VR routing, policy-based routing, routing protocols, route filtering, path selection, access-lists etc.
• Comprehensive understanding of switching concepts: VLANs, Layer 2, Mac-forwarding, vlan trunking, VRRP, Gratuitous ARP. Applications that today use L2 networking must be rebuilt as L2 networks are lost in migration to Cloud. 
• Comprehensive understanding of firewall/security concepts: L2-L7, all versions of NAT, failover scenarios, zonal concepts, IPSec, L7 encryption concepts, URL filtering, DNS, security profiles and rules, proxying.
• Comprehensive understanding of Load Balancing concepts: Cloud LB and conventional LB and their differences in functionality.
• Good understanding of Public Cloud platforms: Preferably GCP; specifically Networking, Firewalling, IAM and how they relate to Cloud Native services (PSA, Cloud SQL, GCVE, Cloud Interconnects, BMS, FileStore, Netapp, etc).
• Good understanding of Infrastructure as Code (IAC) to provision resources: Must be able to customize and optimize the codebase to simplify deliveries.
• Good understanding of Linux administration: Using Linux to bridge technical gaps in Windows and understanding the tools available to troubleshoot network connectivity.
• Understanding of APIs: in order to expedite data collection and configuration to eliminate human error.
• Understanding of DevOps: how it can improve delivery and operation.

 Products:

• Juniper: MX, SRX, QFX
• Palo Alto: Physical and virtual firewalls, Panorama.
• Google Cloud Platform
• Squid Proxy

Tools:

• Terraform
• Algosec or similar tool for traffic flow governance.
• Ansible
• M2VM (GCP migration tool)
• Azure DevOps pipelines
• Azure DevOps GIT

 Mandatory languages:

• Python
• HCL (HashiCorp Configuration Language)
• YAML
• JSON