Senior Network Engineer (Hybrid - Seattle, WA)

Nordstrom•Seattle, WA

1d•Hybrid

About The Position

We are seeking a Senior Network Engineer to join a high-performing network engineering team responsible for the design, deployment, and lifecycle management of enterprise-grade network infrastructure. In this role you will serve as a subject matter expert for Juniper routing and switching, Versa SD-WAN, and Juniper Mist wireless platforms, while championing observability excellence through New Relic. You will work autonomously on complex, high-impact initiatives, provide technical leadership to peers, and drive automation and infrastructure-as-code practices that measurably improve operational efficiency and reliability across the organization. A day in the life... Routing & Switching Architect, deploy, and maintain Juniper EX/QFX switching platforms and MX/SRX routing infrastructure at scale across data center, campus, and branch environments. Define and enforce routing policy, BGP/OSPF design standards, VLANs, QoS, and security zone configurations. Conduct in-depth packet-level troubleshooting and root-cause analysis for complex, multi-layer network incidents. SD-WAN (Versa Networks) Own the design, deployment, and day-2 operations of the Versa SD-WAN fabric, including Director and Analytics platform management. Develop and maintain SD-WAN policies for application steering, traffic prioritization, and security service chaining. Evaluate new Versa features and firmware releases; plan and execute controlled upgrades with minimal business disruption. Wireless (Juniper Mist) Lead enterprise Wi-Fi deployments using the Juniper Mist AI-driven wireless platform, including RF planning, SSID design, and client SLA management. Leverage Mist AI and Marvis Virtual Network Assistant to proactively identify and resolve wireless anomalies before they impact users. Integrate Mist with identity and NAC solutions to enforce role-based wireless access policies. Observability, Alerting & Logging (New Relic) Design and maintain comprehensive network observability dashboards, alert policies, and NRQL queries in New Relic to provide real-time visibility into infrastructure health. Instrument network devices for SNMP, syslog, flow telemetry, and synthetic monitoring ingestion into New Relic; tune alert thresholds to minimize noise while ensuring signal fidelity. Partner with NOC and application teams to build unified observability runbooks and on-call escalation playbooks. Scripting, Automation & Infrastructure as Code Develop and maintain automation tooling using Python, Ansible, and/or Terraform to provision, configure, and validate network infrastructure at scale. Build and maintain version-controlled network-as-code repositories (Git); enforce peer review and CI/CD pipelines for infrastructure changes. Evaluate and champion emerging automation frameworks (e.g., Nornir, NAPALM, Netmiko, Batfish) appropriate to team maturity and business outcomes. Leadership & Collaboration Act as a technical mentor and escalation point for junior and mid-level engineers; conduct design and code reviews. Collaborate cross-functionally with security, systems, application, and business teams to translate requirements into scalable network solutions. Author and maintain clear, accurate technical documentation including design diagrams, runbooks, and post-incident reviews. Participate in change advisory board (CAB) reviews; champion risk-aware change management practices. Multi-Cloud Networking (AWS, Azure, OCI & GCP) Design and manage cloud network connectivity across AWS, Microsoft Azure, Oracle Cloud Infrastructure (OCI), and Google Cloud Platform (GCP), ensuring consistent security posture, routing policy, and performance SLAs across all providers. Architect and operate hybrid connectivity solutions including AWS Direct Connect, Azure ExpressRoute, Oracle FastConnect, and GCP Dedicated/Partner Interconnect, integrating cloud fabrics with on-premises and SD-WAN infrastructure. Design and manage cloud-native virtual network constructs: AWS VPCs and Transit Gateways, Azure VNets and Virtual WAN hubs, OCI VCNs and DRGs, and GCP VPCs and Cloud Routers; implement BGP route propagation, prefix filtering, and route summarization across all platforms. Apply cloud-native security controls including Security Groups, NACLs, Azure NSGs, OCI Security Lists, and GCP VPC Firewall Rules; enforce zero-trust principles for east-west and north-south cloud traffic flows. Automate cloud network provisioning and drift detection using Terraform, cloud-native IaC tools (AWS CloudFormation, Azure Bicep, OCI Resource Manager, GCP Deployment Manager), and integrate changes into CI/CD pipelines. Extend New Relic observability into cloud environments; ingest cloud flow logs, CloudWatch/Azure Monitor/OCI Logging/GCP Cloud Logging data, and build unified dashboards that provide end-to-end visibility from on-premises to cloud workloads.

Requirements

7+ years of progressive hands-on experience in enterprise network engineering.
Deep expertise with Juniper routing and switching platforms (EX, QFX, MX, SRX); strong proficiency with Junos OS, CLI, and Junos automation APIs.
Demonstrated experience designing and operating Versa SD-WAN solutions in production environments.
Hands-on experience with Juniper Mist wireless platform including RF design, Mist AI, and Marvis.
Proven ability to build and manage network observability solutions in New Relic, including dashboard authoring, NRQL, and alert configuration.
Proficiency in at least one scripting language (Python strongly preferred) and experience with network automation tools such as Ansible, Terraform, Nornir, or NAPALM.
Strong understanding of core networking protocols: BGP, OSPF, MPLS, 802.1Q, STP/RSTP, QoS, IPSEC VPN, and 802.11 Wi-Fi standards.
Exceptional troubleshooting skills with the ability to isolate issues spanning L1–L7 in complex, multi-vendor environments.
Demonstrated self-direction: ability to define scope, manage priorities, and deliver results with minimal supervision.
Strong written and verbal communication skills; experience presenting technical designs and recommendations to diverse audiences.

Nice To Haves

Juniper certification (JNCIS-ENT or higher; JNCIS-SEC, JNCIS-SP a plus).
Versa Networks SD-WAN certification or equivalent demonstrated expertise.
Experience with Git, CI/CD pipelines (GitHub Actions, GitLab CI, or Jenkins) applied to network infrastructure.
Familiarity with network intent-based validation tools such as Batfish or Forward Networks.
Experience in retail, e-commerce, or distributed multi-site enterprise environments.
Cloud networking certifications or demonstrated hands-on expertise across two or more of the following: AWS (ANS-C01 Advanced Networking Specialty), Microsoft Azure (AZ-700 Network Engineer Associate), Oracle Cloud Infrastructure (OCI Networking), or Google Cloud Professional Cloud Network Engineer.
Experience with containerized or virtual network functions (VNFs) in hybrid infrastructure.

Responsibilities

Routing & Switching Architect, deploy, and maintain Juniper EX/QFX switching platforms and MX/SRX routing infrastructure at scale across data center, campus, and branch environments.
Define and enforce routing policy, BGP/OSPF design standards, VLANs, QoS, and security zone configurations.
Conduct in-depth packet-level troubleshooting and root-cause analysis for complex, multi-layer network incidents.
Own the design, deployment, and day-2 operations of the Versa SD-WAN fabric, including Director and Analytics platform management.
Develop and maintain SD-WAN policies for application steering, traffic prioritization, and security service chaining.
Evaluate new Versa features and firmware releases; plan and execute controlled upgrades with minimal business disruption.
Lead enterprise Wi-Fi deployments using the Juniper Mist AI-driven wireless platform, including RF planning, SSID design, and client SLA management.
Leverage Mist AI and Marvis Virtual Network Assistant to proactively identify and resolve wireless anomalies before they impact users.
Integrate Mist with identity and NAC solutions to enforce role-based wireless access policies.
Design and maintain comprehensive network observability dashboards, alert policies, and NRQL queries in New Relic to provide real-time visibility into infrastructure health.
Instrument network devices for SNMP, syslog, flow telemetry, and synthetic monitoring ingestion into New Relic; tune alert thresholds to minimize noise while ensuring signal fidelity.
Partner with NOC and application teams to build unified observability runbooks and on-call escalation playbooks.
Develop and maintain automation tooling using Python, Ansible, and/or Terraform to provision, configure, and validate network infrastructure at scale.
Build and maintain version-controlled network-as-code repositories (Git); enforce peer review and CI/CD pipelines for infrastructure changes.
Evaluate and champion emerging automation frameworks (e.g., Nornir, NAPALM, Netmiko, Batfish) appropriate to team maturity and business outcomes.
Act as a technical mentor and escalation point for junior and mid-level engineers; conduct design and code reviews.
Collaborate cross-functionally with security, systems, application, and business teams to translate requirements into scalable network solutions.
Author and maintain clear, accurate technical documentation including design diagrams, runbooks, and post-incident reviews.
Participate in change advisory board (CAB) reviews; champion risk-aware change management practices.
Design and manage cloud network connectivity across AWS, Microsoft Azure, Oracle Cloud Infrastructure (OCI), and Google Cloud Platform (GCP), ensuring consistent security posture, routing policy, and performance SLAs across all providers.
Architect and operate hybrid connectivity solutions including AWS Direct Connect, Azure ExpressRoute, Oracle FastConnect, and GCP Dedicated/Partner Interconnect, integrating cloud fabrics with on-premises and SD-WAN infrastructure.
Design and manage cloud-native virtual network constructs: AWS VPCs and Transit Gateways, Azure VNets and Virtual WAN hubs, OCI VCNs and DRGs, and GCP VPCs and Cloud Routers; implement BGP route propagation, prefix filtering, and route summarization across all platforms.
Apply cloud-native security controls including Security Groups, NACLs, Azure NSGs, OCI Security Lists, and GCP VPC Firewall Rules; enforce zero-trust principles for east-west and north-south cloud traffic flows.
Automate cloud network provisioning and drift detection using Terraform, cloud-native IaC tools (AWS CloudFormation, Azure Bicep, OCI Resource Manager, GCP Deployment Manager), and integrate changes into CI/CD pipelines.
Extend New Relic observability into cloud environments; ingest cloud flow logs, CloudWatch/Azure Monitor/OCI Logging/GCP Cloud Logging data, and build unified dashboards that provide end-to-end visibility from on-premises to cloud workloads.