Network Engineer - Plex

In support of our ongoing growth, we are looking for a Network Engineer to add to our Plex Cloud Operations department and our continuous improvement culture. As a member of the Network & Firewall team, you will be responsible for supporting and maintaining the networks of Plex's private and public cloud. We are looking for an engineer with the desire to leverage automation and infrastructure as code to help secure and scale our product while building resiliency and redundancy into all solutions.

• Support, implement, and operate networking infrastructure across both private datacenters and public cloud environments, primarily Azure, including routing, firewalling, WAN connectivity, and overlay networking. Provide network and remote connectivity hardware/software support for internal and external customers. Support, manage, and troubleshoot highly available ISP circuits, multi-homed BGP architectures, datacenter interconnect, DCI, and SD-WAN connectivity across multiple regions. Perform root cause investigations and contribute to process/procedure documentation.
  
  Maintain and expand NGFW rule base to ensure least access principles across public and private firewall zones.
• Project work including:
  Structured cabling. Physical infrastructure lifecycle replacements. Network and application security. Monitoring, alerting, and auto remediation. Deploy public cloud, primarily Azure, and private cloud networks utilizing infrastructure as code and Git Ops tooling.
• Support certificate lifecycle management and PKI operations using Keyfactor.
• Support privileged access management and credential hygiene using Keeper Security.
• Support, improve, and maintain network and system monitoring solutions.
• Participate in an on-call rotation.
• Participate in scheduled monthly maintenance windows (second Sunday of each month) as part of a team rotation, typically supporting 3–4 maintenance windows per year.

• Bachelor's Degree or equivalent years of relevant work experience.
• Legal authorization to work in the US is required. We will not sponsor individuals for employment visas, now or in the future, for this job opening.
• Ability to travel up to 10% of time.

• Typically requires 2+ years enterprise infrastructure experience.
• Experience with Infrastructure as Code tools such as Terraform and/or Ansible.
• Experience working with Git-based workflows such as Git Hub Enterprise, Azure Dev Ops, or similar.
• Experience with BGP and MP-BGP, EVPN, in production datacenter environments, including overlay/underlay architectures. Vendor-neutral experience acceptable;
  Arista.
• Experience with certificate management, PKI concepts, and tools such as Keyfactor.
• Experience with privileged access management or enterprise password vaulting tools such as Keeper Security.
• Familiarity with identity and access management platforms such as Okta.
• Foundational understanding of prompt engineering.
• Must be able to lift 40 lbs., stand on a ladder for a long period of time, and crawl into tight spaces.
• Solutions experience:
  Azure, Terraform, Ansible, Elastic, Cisco NX-OS, Arista EOS, BGP, EVPN/VXLAN, Arista DMF or similar packet capture technology, Net Flow/IPFIX, Wireshark, Palo Alto, Fortinet, Keyfactor PKI, Keeper Security, Okta, Jira, Confluence, Windows Server, Ubuntu, VMware, SNMP, LibreNMS.
• This position requires access to technical data controlled under the International Traffic in Arms Regulations (ITAR). Applicants must be U.S. persons as defined under 22 C.F.R.
• 120.62, which includes U.S. citizens, lawful permanent residents, protected individuals (asylees and refugees), and individuals granted asylum or refugee status.

• Health Insurance including…