Senior IT Network Engineer (Menlo Park CA or Durham, NC) #4506

GRAIL•Durham, NC

1d•Hybrid

About The Position

Our mission is to detect cancer early, when it can be cured. We are working to change the trajectory of cancer mortality and bring stakeholders together to adopt innovative, safe, and effective technologies that can transform cancer care. We are a healthcare company, pioneering new technologies to advance early cancer detection. We have built a multi-disciplinary organization of scientists, engineers, and physicians and we are using the power of next-generation sequencing (NGS), population-scale clinical studies, and state-of-the-art computer science and data science to overcome one of medicineâs greatest challenges. GRAIL is headquartered in the bay area of California, with locations in Washington, D.C., North Carolina, and the United Kingdom. It is supported by leading global investors and pharmaceutical, technology, and healthcare companies. For more information, please visit grail.com GRAIL is seeking a Senior IT Network Engineer to join our IT Infrastructure team. In this role, you will be a hands-on technical contributor responsible for building, operating, and supporting secure, scalable, and highly available network infrastructure across AWS and hybrid environments. You will play a critical role in enabling reliable connectivity for GRAILâs cloud platforms, on-premise systems, and mission-critical applications that support early cancer detection. This role emphasizes deep technical execution and operational ownership. You will design, implement, monitor, and troubleshoot AWS networkingâprimarily Amazon VPCâbased architecturesâwhile also supporting on-premise and data center networking using Juniper and Aruba platforms and Palo Alto firewalls. You will partner closely with Platform, Security, SRE, and Application teams to ensure performance, availability, and security across the network stack. This is a hybrid role based in either Menlo Park, CA (moving to Sunnyvale, CA in Fall 2026) or Durham, NC. Our current flexible work arrangement policy requires that a minimum of 60%, or 24 hours, of your total work week be on-site. Your specific schedule, determined in collaboration with your manager, will align with team and business needs and could exceed the 60% requirement for the site.

Requirements

8+ years of experience working in network engineering roles with hands-on production responsibility.
5+ years of hands-on experience designing and operating AWS networking, including Amazon VPC, subnets, routing, Security Groups, and Network ACLs.
Hands-on experience with AWS Transit Gateway, Site-to-Site VPN, and Direct Connect.
Experience configuring and supporting Amazon Route 53 and Elastic Load Balancing.
5+ years of experience supporting enterprise or data center networking environments.
Hands-on experience with Juniper and/or Aruba networking platforms.
Hands-on experience with Palo Alto Networks firewalls.
Demonstrated experience implementing network monitoring, logging, and alerting solutions.
Strong troubleshooting skills across networking and application layers (DNS, TCP/IP, TLS, HTTP).
Bachelorâs degree in Computer Science, Information Technology, or related field, or equivalent practical experience.

Nice To Haves

Experience working in healthcare, life sciences, or other regulated environments.
Familiarity with AWS Network Firewall, AWS WAF, Global Accelerator, or AWS PrivateLink.
Experience with infrastructure automation and scripting using Terraform, Python, or Bash.
Exposure to zero-trust networking models or SASE / SD-WAN solutions.
Relevant certifications such as AWS Advanced Networking, CCNP, or Palo Alto Networks certifications.

Responsibilities

Design, build, and maintain AWS networking components, including VPCs, subnets, route tables, Internet Gateways, NAT Gateways, VPC endpoints, and Transit Gateway.
Configure and manage AWS network security controls, including Security Groups, Network ACLs, AWS Network Firewall, and AWS WAF, in alignment with security best practices.
Implement and support hybrid connectivity solutions, including AWS Direct Connect and Site-to-Site VPNs.
Configure and support traffic management and DNS services using Amazon Route 53 and Elastic Load Balancing (ALB, NLB, GLB).
Operate and troubleshoot on-premise and data center networking environments using Juniper and Aruba platforms, including routing, switching, VLANs, VRFs, and BGP/OSPF.
Configure and support Palo Alto Networks firewalls, including security policies, NAT, VPNs, and traffic inspection.
Implement and maintain network monitoring, logging, alerting, and dashboards using tools such as VPC Flow Logs, CloudWatch, Route 53 health checks, firewall logs, and device telemetry.
Participate in and often lead network-related incident response, performing root-cause analysis and contributing to corrective and preventive actions.
Support capacity planning, performance analysis, and validation of throughput, latency, and failover behavior.
Build and maintain infrastructure-as-code for network components using Terraform or CloudFormation, and contribute to CI/CD workflows.
Serve as a senior technical resource, reviewing designs, mentoring junior engineers, and communicating technical risks and tradeoffs to cross-functional partners.