Sr. Network Engineer and SRE

Job Description

IRE Network Engineer

Position Title

IRE Network Engineer

We are seeking a highly skilled Senior Network Engineer to lead the design, automation, and modernization of enterprise network infrastructure across hybrid environments. This role is responsible for building highly resilient, secure, software-defined network architectures spanning on-premises data centers, private cloud, and public cloud platforms.

The ideal candidate possesses deep expertise in network engineering, Infrastructure as Code (Terraform), scripting, network isolation, micro-segmentation, and cloud networking. This individual will partner closely with Cloud Engineering, Cybersecurity, Infrastructure, SRE, and Application teams to deliver secure, scalable, and automated networking solutions aligned with Zero Trust principles.

________________________________________

Key Responsibilities

Enterprise Network Engineering

• Design, implement, and support highly available enterprise network infrastructure across:

o On-premises data centers

o Private cloud platforms

o AWS

o Microsoft Azure

Engineer resilient Layer 2/Layer 3 network architectures including

o Routing

o Switching

o BGP

o OSPF

o VXLAN/EVPN

o SDN technologies

• Design network architectures supporting critical enterprise resiliency and disaster recovery.

________________________________________

Infrastructure Automation

• Build Infrastructure as Code (IaC) solutions using Terraform.
• Develop reusable Terraform modules and standardized deployment patterns.
• Automate network provisioning and configuration management.
• Integrate automation into Git-based CI/CD pipelines.
• Eliminate manual networking activities through automation-first engineering.

________________________________________

Scripting & Automation

Develop automation using

• Python
• PowerShell
• Bash
• REST APIs

Automate

• Network provisioning
• Configuration validation
• Compliance verification
• Drift detection
• Operational reporting
• Health monitoring

________________________________________

Network Isolation & Segmentation

Lead enterprise initiatives involving

• Network isolation strategies
• Secure enclave design
• Air-gapped environments
• Isolated Recovery Environments (IRE)
• Secure management networks
• Recovery network architectures

Design secure separation between

• Production
• Non-production
• Recovery environments
• Cyber Recovery environments
• Management networks

________________________________________

Micro-Segmentation

Design and implement enterprise micro-segmentation utilizing technologies such as:

• VMware NSX
• Illumio
• Cisco Secure Workload (formerly Tetration)
• Cloud-native security groups
• Azure Network Security Groups
• AWS Security Groups
• Network ACLs

Responsibilities include

• East-West traffic control
• Zero Trust network architectures
• Least-privilege network access
• Dynamic policy enforcement
• Application dependency mapping

________________________________________

Cloud Networking

Engineer networking solutions across

AWS

• VPCs
• Transit Gateway
• Direct Connect
• Route Tables
• PrivateLink
• Network Firewall

Azure

• VNets
• ExpressRoute
• Virtual WAN
• Azure Firewall
• NSGs
• Application Gateway
• Azure Load Balancer

________________________________________

Security Engineering

Collaborate with Cyber Security to implement

• Zero Trust networking
• Network Access Control
• Secure remote connectivity
• Firewall architecture
• IDS/IPS
• DDoS protection
• Secure DNS
• Certificate management
• Encryption in transit

________________________________________

Resiliency Engineering

Design networking solutions supporting

• High Availability
• Disaster Recovery
• Active-Active architectures
• Active-Passive architectures
• Multi-region cloud deployments
• Automated failover
• Resilient routing
• Critical application recovery

________________________________________

Monitoring & Observability

Implement enterprise network observability using tools such as

• ThousandEyes
• SolarWinds
• Dynatrace
• Splunk
• Grafana
• Prometheus
• Cloud-native monitoring solutions

Develop dashboards, KPIs, and automated alerting for proactive network operations.

________________________________________

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or equivalent experience.
• 8+ years of enterprise network engineering experience.
• 5+ years supporting hybrid cloud networking.
• 3+ years of Terraform Infrastructure as Code experience.
• Strong experience with Python, PowerShell, or Bash scripting.
• Extensive experience with enterprise routing and switching.
• Experience implementing software-defined networking (SDN).
• Hands-on experience designing network isolation and secure segmented environments.
• Experience implementing micro-segmentation in enterprise environments.
• Strong understanding of Zero Trust networking principles.
• Experience supporting mission-critical enterprise platforms.

________________________________________

Preferred Qualifications

• Experience in large financial institutions or other highly regulated industries.
• Experience supporting hybrid multi-cloud environments.
• Knowledge of Kubernetes/OpenShift networking.
• Experience with VMware NSX or Cisco ACI.
• Familiarity with GitHub, GitLab, or Azure DevOps pipelines.
• Experience with disaster recovery and cyber recovery networking.
• Knowledge of Infrastructure as Code governance and policy-as-code.
• Experience with immutable infrastructure and resilient network architectures.

________________________________________

Preferred Certifications

• CCNP Enterprise or CCIE
• AWS Advanced Networking – Specialty
• Microsoft Azure Network Engineer Associate (AZ-700)
• HashiCorp Terraform Associate
• VMware VCP-NV (NSX)
• Palo Alto PCNSE
• CISSP (preferred)

________________________________________

Key Competencies

• Enterprise network architecture
• Hybrid cloud networking
• Infrastructure as Code (Terraform)
• Python, PowerShell, and Bash scripting
• Network automation
• Zero Trust architecture
• Network isolation
• Micro-segmentation
• Cloud networking (AWS & Azure)
• SDN technologies
• Enterprise resiliency
• Disaster Recovery networking
• Cyber Recovery networking
• Infrastructure security
• CI/CD integration
• Cross-functional leadership
• Excellent communication and executive presentation skills