Principal Network Engineer

Blink Health•Pittsburgh, NY

1d•Hybrid

About The Position

Blink Health is seeking a Principal Network Engineer to set the technical direction for network and connectivity strategy across offices and cloud environments. The role owns architecture for routing, switching, VPN, firewall, and cloud networking infrastructure and serves as the company’s senior authority on network design, security, and resilience. It is a hands-on, high-influence position focused on scalable design, solving complex problems, and developing the capabilities of other engineers. The engineer will define and own network architecture and a multi-year roadmap across on-premises environments and AWS, including Meraki, Palo Alto, AWS VPC, and AWS Transit Gateway. They will guide network design for microservices and container-based environments, including AWS and Kubernetes, and partner with engineering, security, and platform teams on significant technical decisions. The role drives network-as-code and automation; establishes security, compliance, redundancy, and high-availability standards; evaluates solutions and presents recommendations to leadership; and leads architecture for complex initiatives such as site build-outs, cloud migrations, network segmentation, zero trust, and M&A integration. It also serves as the final technical escalation point for critical incidents, develops observability and monitoring strategies, mentors network and related staff, maintains technical documentation, and communicates risk, incidents, and major changes to stakeholders. Participation in an on-call rotation is required. The position is based in the Eastern Time Zone and may require travel up to 10% to office sites. The role can work up to four days a week in the New York City, St. Louis, or Pittsburgh office.

Requirements

10+ years of experience designing and operating enterprise network environments, with a strong track record in hybrid on-premises and cloud environments.
Proven experience architecting and leading large-scale network initiatives in AWS and Kubernetes-based microservices environments.
Expert-level knowledge of IPSec/VPN, DNS, SNMP, OSPF, BGP, AWS VPC, Security Groups, peering, Transit Gateway, and advanced routing.
Deep understanding of how cloud, container, and virtualization technologies affect network performance, security, and design.
Hands-on experience with infrastructure-as-code and network automation, such as Terraform, Python, and Ansible.
Demonstrated ability to influence without authority, set standards, and drive cross-functional alignment.
Experience designing for compliance-sensitive environments such as HIPAA, SOC 2, or PCI.
Strong written and verbal communication skills, including the ability to explain technical tradeoffs to leadership.
Comfort working in the Eastern Time Zone.
Ability to travel up to 10% to office sites.
Ability to work up to four days a week in the New York City, St. Louis, or Pittsburgh office.

Nice To Haves

Experience with Palo Alto Networks products, including Panorama and GlobalProtect, and Cisco Meraki at scale.
Experience with service mesh, CNI, or Kubernetes networking internals.
Relevant certifications, such as AWS Advanced Networking Specialty, PCNSE, or CCNP/CCIE.

Responsibilities

Define and own Blink’s network architecture and multi-year roadmap across on-premises environments and AWS, including Meraki, Palo Alto, AWS VPC, and AWS Transit Gateway.
Serve as the senior technical authority for network design in AWS and Kubernetes microservices environments, partnering with engineering, security, and platform teams.
Drive network-as-code and automation using infrastructure-as-code, CI/CD, and configuration management.
Establish and ensure adoption of network design standards and guardrails for security, compliance, redundancy, and high availability.
Lead evaluation, selection, and adoption of products and solutions; develop business cases and present recommendations to IT and engineering leadership.
Lead architecture for complex initiatives, including new site build-outs, cloud migrations, network segmentation, zero trust, and M&A integration.
Serve as the final technical escalation point for critical incidents, lead root cause analysis, and drive systemic fixes.
Partner with security to define hardening and patching standards and investigate and remediate security incidents with network impact.
Design observability and monitoring strategies for network health, performance, and capacity planning.
Mentor and develop network, systems, and service desk staff; create scalable runbooks and training.
Own technical documentation and architecture decision records for critical systems.
Communicate technical information and tradeoffs to technical and non-technical stakeholders, including executive-level updates on risk, incidents, and major changes.
Participate in the on-call rotation as a senior escalation resource.