At EY, we’re all in to shape your future with confidence.
We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.
The opportunity
The Senior Network Engineer - WAN & Cloud Connectivity within Global Connectivity Solutions (GCS) is responsible for the engineering, implementation, optimisation, automation, and lifecycle management of secure, resilient, and high-performing global WAN and connectivity services. The role provides hands-on technical leadership across routing, switching, SD-WAN, Internet connectivity and peering, B2B IPsec and L2TP VPN, DDoS mitigation, cloud connectivity, and other related network platforms.
The successful candidate will combine deep WAN expertise with broad enterprise networking knowledge across office wired and wireless networks, Internet edge, and infrastructure services. Working with product owners, architecture, operations, information security, cloud engineering, service providers, and technology vendors, the role develops standards and designs, leads complex implementations and migrations, resolves advanced technical issues, and improves service reliability, security, scalability, and operational efficiency.
Your Key Responsibilities
- Provide hands-on technical leadership for the design, implementation, migration, optimization, and lifecycle management of global WAN services.
- Design and support advanced routing and switching solutions using BGP, OSPF, route redistribution, policy controls, Quality of Service (QoS), traffic engineering, high availability, and IPv4/IPv6.
- Lead SD-WAN engineering across branch offices, data centres, cloud environments, SaaS platforms, secure web gateways, and local Internet breakout.
- Engineer Internet edge and peering solutions, including transit, carrier interconnections, route policy, DNS dependencies, DDoS mitigation, capacity planning, resiliency, and performance optimisation.
- Design and support secure B2B connectivity using site-to-site IPsec and L2TP VPNs, partner interconnections, extranet services, segmentation, and security controls.
- Design and implement hybrid and multi-cloud connectivity, including Microsoft Azure ExpressRoute, cloud transit architectures, private connectivity, and integration with AWS and Google Cloud where required.
- Provide technical expertise across office wired and wireless networks, including campus and branch switching, Wi-Fi, RF design, guest networking, and Network Access Control (NAC).
- Maintain an enterprise-wide perspective, understanding how network decisions affect security, cloud, applications, operations, user experience, cost, and service resilience, and lead end-to-end technical design across these domains.
- Translate business, security, operational, and service requirements into cohesive end-to-end technical designs, including high-level and low-level designs, implementation plans, configuration standards, and test plans.
- Develop and maintain network standards, reference architectures, configuration templates, engineering procedures, operational documentation, and support handover materials.
- Lead laboratory validation, proof-of-concept testing, pilot deployments, technology evaluations, and technical aspects of RFI and RFP activities.
- Provide advanced escalation support for complex incidents, performance problems, interoperability issues, and major service disruptions, including root cause analysis and corrective actions.
- Partner with Network Operations and Service Management to ensure solutions comply with change management, ITSM, monitoring, security, and operational readiness requirements.
- Collaborate with service providers, carriers, cloud providers, and OEMs to resolve technical issues, assess product capabilities, and improve service performance and resilience.
- Drive automation and Infrastructure-as-Code practices using APIs, scripting, source control, and repeatable deployment and validation methods.
- Integrate network monitoring, telemetry, analytics, observability, and AIOps capabilities to improve visibility, capacity management, fault detection, and service assurance.
- Mentor engineers, conduct technical design reviews, share engineering knowledge, and promote consistent application of sound engineering principles across the global team.
- Stay current with networking technologies, industry standards, security threats, and vendor roadmaps, and recommend practical improvements aligned with GCS strategy.
Knowledge & Competencies Required:
- Expert-level knowledge of enterprise WAN architecture, routing, switching, and advanced troubleshooting in large, globally distributed environments.
- Deep hands-on experience with BGP, OSPF, routing policy, route redistribution, QoS, traffic engineering, network resiliency, multicast, and IPv4/IPv6.
- Strong experience with SD-WAN architecture, implementation, migration, policy design, application-aware routing, local Internet breakout, segmentation, and operational support.
- Strong understanding of global and local Internet operations, transit and peering, Autonomous Systems, IP addressing, DNS, Internet Exchange Points, carrier interconnections, and DDoS mitigation.
- Hands-on experience designing and operating B2B IPsec and L2TP VPNs, secure partner connectivity, and extranet services.
- Strong knowledge of hybrid cloud networking and private cloud connectivity, with experience particularly in Microsoft Azure ExpressRoute. Familiarity with AWS and Google Cloud networking is desirable.
- Proficiency in enterprise LAN switching, office Wi-Fi, wireless security and radio fundamentals, guest networking, branch network design, and NAC or enterprise authentication platforms.
- Knowledge of network security principles, segmentation, Zero Trust concepts, infrastructure hardening, access controls, and secure network design.
- Experience with network automation using Python, REST APIs, Ansible or equivalent tools, Infrastructure-as-Code approaches, JSON, YAML, and source control.
- Experience with network monitoring, telemetry, packet analysis, performance management, observability, analytics, and capacity planning tools.
- Working knowledge of service provider technologies and services, Ethernet services, MPLS, carrier diversity, circuit delivery, and service assurance processes.
- Strong analytical, diagnostic, and problem-solving skills, with the ability to make sound decisions during complex incidents and time-sensitive technical situations.
- Ability to lead multiple complex engineering initiatives, manage shifting priorities, and deliver outcomes across global and culturally diverse teams.
- Excellent written and verbal communication skills, with the ability to document complex designs and explain technical issues to technical and non-technical stakeholders.
- Ability to see the larger enterprise picture, identify cross-domain dependencies and trade-offs, and provide clear technical direction from initial concept through design approval and implementation.
- Strong collaboration, influencing, mentoring, and stakeholder management skills across product, engineering, architecture, operations, security, cloud, vendor, and business teams.
- Self-starter with a practical, outcome-focused mindset and flexibility to support global activities outside regular business hours when required.
Job Requirements:
Education:
- Bachelor's degree in Computer Science, Computer Engineering, Information Technology, Telecommunications, or a related technical discipline. A Master's degree is an advantage.
Experience:
- Minimum of 12 years of progressive experience in enterprise or service provider networking, including substantial hands-on experience designing, implementing, and supporting large-scale WAN, SD-WAN, Internet, B2B VPN, and cloud connectivity solutions. Experience leading complex global engineering projects and providing senior technical escalation support is required.
Certification Requirements:
- A current Cisco CCNP Enterprise or equivalent professional-level network certification is preferred. CCIE Routing and Switching, CCIE Service Provider, Microsoft Certified: Azure Network Engineer Associate, Versa or other vendor-specific SD-WAN certifications, or relevant cloud networking certifications are strong value additions.
What we offer you
The compensation ranges below are provided in order to comply with United States pay transparency laws. Other geographies will follow their local salary guidelines, which may not be a direct conversion of published US salary ranges. At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers.
- We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job is:
- New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $167,100 to $300,900
- Bay Area California offices – $174,100 to $313,400
- All other offices locations in the US, including Sacramento – $139,300 to $275,800
- Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
- Under our flexible vacation policy, you’ll decide how much vacation time you need based on your own personal circumstances. You’ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
Are you ready to shape your future with confidence? Apply today.
- To make the most of your application experience, please limit yourself to two applications within a six-month period.
- EY accepts applications for this position on an on-going basis.
- For those living in California, please click here for additional information.
- At EY, our values set the foundation for how we work and the behaviors we expect of our people. Any misrepresentation or falsification of information or lack of integrity at any point in the recruiting process may result in withdrawal of your candidacy, revocation of an offer or immediate termination of employment.
EY | Building a better working world
EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.
All in to shape the future with confidence.
EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.
EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at ssc.customersupport@ey.com .