Principal Network Engineer

OneMain Financial • Baltimore, MD

3d • $185,000 - $210,000 • Hybrid

About The Position

This is a senior individual contributor role serving as the technical lead for enterprise network operations across cloud, hybrid cloud, on-premises, and application delivery infrastructure. The focus is on application delivery, reliability, redundancy, and optimization — making sure traffic gets where it needs to go, stays available, and performs well. The role requires an automation-first mindset, treats documentation as non-negotiable, and expects someone who can navigate ambiguity without waiting for a playbook. This position typically operates as a team of one, but for larger initiatives you’ll coordinate with engineers borrowed from DevOps, Network Security, and other teams. You’ll need to delegate effectively, maintain quality oversight, and keep projects on schedule. The split is roughly 85% proactive work (architecture, automation, roadmaps, standards) and 15% reactive incident response. When incidents happen, time-to-resolution is the metric that matters.

Requirements

• Minimum 8 years of experience supporting large enterprise multi-cloud hybrid network stacks.
• Deep understanding of DNS architecture, resolution, and troubleshooting.
• BGP proficiency across diverse platforms including Azure VWAN, Arista, Aruba, AWS Transit Gateway, Virtual Network Gateways, VPNs, and Palo Alto.
• Solid grasp of dynamic routing protocols (OSPF, BGP, EIGRP) and route influencing techniques (local preference, MED, AS path prepend, route maps).
• Understanding of high availability designs including VRRP, HSRP, and active/passive and active/active failover architectures.
• Familiarity with ECMP and traffic distribution across multiple paths.
• Global traffic management, GSLB, and DNS-based load balancing.
• Deep understanding of TLS negotiations, cipher exchanges, and common failure points.
• HTTP response codes known by heart.
• Deep understanding of cloud networking best practices in both Azure and AWS.
• Familiarity with WAN circuit technologies: DWDM (WAVE), Type 2, Point-to-Point, and MPLS.
• Foundational understanding of SD-WAN concepts including underlay/overlay architecture.
• Basic understanding of Kubernetes networking across EKS, AKS, native K8s, and OCP.
• Proficiency with Wireshark for packet capture analysis.
• Ability to read and interpret browser HAR files.
• Python scripting and automation development.
• Bash scripting and automation.
• Ansible for network configuration management and automation.
• GitOps workflows and GitHub Actions CI/CD pipelines.
• Terraform for infrastructure-as-code provisioning and management across cloud environments.
• Secrets management across HashiCorp Vault, Azure KeyVault, and/or AWS Secrets Manager.
• Proficient with the Linux command line and system processes.
• Ability to operate as a self-directed team of one while effectively leading borrowed resources on larger initiatives.
• Experience with both ITSM and Agile project management methodologies.
• Demonstrated ability to take abstract or ambiguous requirements and develop detailed execution plans.
• Strong written and verbal communication skills with the ability to present technical topics to non-technical audiences.
• A thirst for learning new and ever-changing network topologies and products.
• Willingness to serve as secondary on-call 24/7/365.

Nice To Haves

• F5 BIG-IP or equivalent Application Delivery Controller (ADC) experience.
• NGINX or NGINX Plus experience.
• Zscaler or similar cloud security platform experience.
• Experience in financial services or other regulated industries; familiarity with audit and compliance frameworks.
• Comfort with emerging AI tooling for task acceleration and problem solving.

Responsibilities

• Serve as the organization’s subject matter expert for network infrastructure across AWS, Azure, and on-premises environments.
• Own application delivery and reliability strategy with a focus on DNS, global traffic management (GSLB), and load balancing.
• Take abstract business requests and translate them into detailed technical roadmaps with clear milestones and deliverables.
• Evaluate network products and platforms to prevent overlapping tool purchases or redundant capabilities.
• Develop and maintain automation using Python, Bash, Ansible, Terraform, and GitHub Actions following a GitOps model.
• Manage secrets and credentials across HashiCorp Vault, Azure KeyVault, and AWS Secrets Manager.
• Build and improve self-service tooling and workflows that reduce manual effort and improve operational consistency.
• Use emerging tools, including AI-assisted development, to accelerate complex task completion.
• Troubleshoot from Layer 7 backward through the full network stack, particularly in environments where the original design was undocumented.
• Read and interpret packet captures (Wireshark) and browser HAR files to isolate issues at the application and transport layers.
• Work through problems when standard troubleshooting tools are unavailable due to security controls.
• Approach troubleshooting methodically: observe symptoms, form a hypothesis, test one variable at a time, document findings, and iterate.
• Serve as secondary on-call (24/7/365) when the primary on-call engineer is blocked or unable to resolve.
• Lead borrowed engineers (senior and junior) from adjacent teams on project-based work, maintaining quality standards and keeping deliverables on schedule.
• Mentor junior engineers and contribute to their professional growth by leading through example.
• Translate technical jargon into business benefits and outcomes for non-technical stakeholders.
• Maintain thorough documentation of designs, decisions, and operational procedures.
• Keep a pulse on where network technology is heading and make sure the organization is prepared for what’s coming.
• Independently explore and map the existing network to understand true design intent.
• Spend the time to understand the products available and their capabilities to prevent the purchase of overlapping tools or redundant products.

Benefits

• Health and wellbeing options including medical, prescription, dental, vision, hearing, accident, hospital indemnity, and life insurances
• Up to 4% matching 401(k)
• Employee Stock Purchase Plan (10% share discount)
• Tuition reimbursement
• Paid time off (15 days’ vacation per year, plus 2 personal days, prorated based on start date)
• Paid sick leave as determined by state or local ordinance, prorated based on start date
• Paid holidays (7 days per year, based on start date)
• Paid volunteer time (3 days per year, prorated based on start date)

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed