Senior Infrastructure Engineer; SRE | Networking, Azure & Infrastructure as Code; Terraform

Job Title:

Senior Infrastructure Engineer (SRE) | Networking, Azure & Infrastructure as Code (Terraform/Ansible)

Location:

East Lansing MI 48823 – Onsite working

Perm/FTE Role

US citizens and Green Card Holders and those authorized to work in the US are encouraged to apply. We are unable to sponsor H1b candidates at this time.

Senior Infrastructure Engineer
- Site Reliability Engineering
- Network Focus

• We are looking for a Senior Infrastructure Engineer
  - Site Reliability Engineering with deep networking expertise to join the team responsible for the reliability, availability, and performance of hybrid infrastructure.
• Our environment spans on-premises VMware infrastructure, Azure, enterprise storage and backup platforms, networking, and CI/CD tooling, and we are in the middle of a multi-year migration of on-premises workloads to Azure.
• This is an SRE role with a focus in networking. Your deepest expertise will be in networking, and you will be one of the team's go-to people for network operations, perimeter security, and the network side of our cloud migration.
• Like every SRE on the team, you will also carry broader responsibilities: on-call, project work, automation, and troubleshooting across the full environment.
• Our network is managed as code and operated as one part of a larger interconnected system, and the role reflects that.

• Own the day-to-day operational health of switching, routing, wireless, and perimeter infrastructure
• Design, implement, and maintain firewall policy through established change management
• Administer zero trust and remote access platforms
• Support the network side of our Azure migration: hybrid connectivity, virtual network design input, network security group and gateway implementation
• Manage network configuration through automation and configuration-as-code rather than device-by-device changes
• Serve as a primary resource when incidents have a network dimension, including ruling the network in or out quickly so the team can chase the real problem
• Maintain infrastructure health beyond the network in areas you take on: monitoring, capacity trending, performance
• Implement changes through Infrastructure as Code and CI/CD pipelines using Ansible, Terraform, and Git Hub Actions
• Plan and track your work in Jira; contribute to estimates and technical feasibility discussions
• Participate in a weekly round-robin on-call rotation covering the full environment
• Remediate security findings within established timelines and support audit activities with documentation and evidence
• Follow change management procedures and keep configuration documentation accurate

• 7+ years of IT experience, including at least 2 years focused on network engineering or network operations with production ownership

• Routing and switching (L2/L3, VLANs, BGP, OSPF, WAN/ISP connectivity)
• Perimeter firewalls: policy design, NAT, segmentation, and safe rule lifecycle management
• Azure networking: virtual networks, subnets, network security groups, NAT gateways, VNet integration, and hybrid connectivity
• Hands-on experience managing network infrastructure through Infrastructure as Code and automation:
  Ansible, Terraform, Git-based workflows. This is how we operate our network day to day.
• Comfort with open networking standards and platforms; much of our network runs on Linux-based network operating systems, and comfort at a Linux shell is expected
• Working knowledge across the broader stack, including:
• Linux and Windows Server administration
• Azure beyond networking (resource deployment basics)
• Virtualization concepts (VMware)
• Sound judgment under pressure: you know when to act, when to elevate, and how to form an opinion before you do
• Clear written communication; our change management and incident processes depend on it
• Comfort operating in an environment where many systems are business-critical, not just the obvious ones

• Experience with zero trust network access platforms (Cloudflare, Microsoft Global Secure Access, or similar)
• Experience with open or disaggregated network operating systems (SONiC, VyOS, TNSR, or similar)
• Financial services or…