Network Engineer

Job Description for Senior Network Engineer

We are seeking a Senior Network Engineer who brings deep technical expertise, sound operational judgment, and the ability to deliver reliable, scalable network services across multi‑region and global environments, including regulated FedRAMP‑authorized platforms. The role is primarily operations‑focused, encompassing ownership of day‑to‑day network reliability, performance, and incident response while also incorporating engineering and build responsibilities as required – such as evolving routing architectures, developing automation pipelines, troubleshooting complex network behaviors, and executing major initiatives across data centers and cloud platforms.

Beyond technical capability, we look for a cultural fit who embodies our core expectation to "be kind" – a teammate who collaborates openly, communicates respectfully, supports others, and contributes to a positive, inclusive engineering culture.

• Engineer, build, and deliver network solutions for global data centers, cloud platforms, FedRAMP‑authorized environments, build environments, and product connectivity needs.
• Engineer and optimize routing for a global IP backbone, including multi‑region route propagation, redundancy, and traffic‑engineering strategies.
• Engineer, build, and operate scalable, highly available L3 topologies using BGP, OSPF, and robust routing policy (communities, AS‑path manipulation, MED/local‑pref tuning, ECMP, route‑reflector hierarchy).
• Design and implement secure network segmentation, boundary controls, and traffic isolation required for FedRAMP Moderate/High environments.
• Implement hybrid and cloud‑native routing across AWS, Azure, and GCP using Direct Connect, Express Route, VPN, Transit Gateway, Virtual WAN, and cloud router constructs.
• Develop and maintain automated provisioning, configuration, compliance, and validation pipelines using Python, Ansible/AWX, and Git‑driven CI/CD workflows, including FedRAMP configuration baselines.

• Ensure connectivity, availability, and performance across multi‑region data centers, backbone sites, cloud platforms, and regulated FedRAMP environments using proactive monitoring, telemetry, and lifecycle management practices.
• Operate networks in accordance with FedRAMP continuous monitoring requirements, including configuration drift detection, vulnerability mitigation, and audit readiness.
• Troubleshoot complex routing, TCP, and connectivity issues using tools such as netcat, ping/ICMP, logs, and packet captures.
• Lead or support major incident response when needed, including FedRAMP‑relevant incident handling, escalation, and reporting procedures.
• Execute changes, upgrades, and migrations safely using structured procedures (MOPs), documented approvals, automated workflows, and validated rollback mechanisms.
• Remediate vulnerabilities and maintain compliance across network OS versions, configurations, firmware, and security posture in coordination with Security and Compliance teams.

• Engineer enhancements, new capabilities, and service‑driven connectivity features supporting product, platform evolution, and FedRAMP boundary services.
• Design automation that enforces least privilege, segmentation, encryption‑in‑transit, logging, and configuration compliance for regulated environments.
• Replace manual operational steps with automated workflows incorporating pre/post‑checks, compliance gates, evidence collection, and safe‑rollback logic.
• Test new network OS versions, automation logic, routing changes, and security controls in controlled environments prior to production and FedRAMP deployment.
• Partner with Build, Engineering, Architecture, Product, Security, and Compliance teams to ensure reliability, scalability, and alignment with FedRAMP control objectives.

• Translate product, regulatory, and platform requirements into network designs that meet FedRAMP architectural and security expectations with clear timelines and dependencies.
• Conduct capacity planning across links, devices, cloud gateways,…