Senior Network Engineer

Duluth Trading Company

11d•$110,000 - $125,000•Remote

About The Position

The Senior Network Engineer is the primary technical owner for our enterprise-wide network, bridging the gap between our physical retail footprint and our cloud presence. This role is responsible for the design, security, and continuous improvement of infrastructure across Google Cloud (GCP), Microsoft Azure, and our on-premise locations. As a leader within the NetDevOps team, you will drive the transition from manual configuration to Infrastructure as Code (IaC). This is an "evolution-focused" role: we don't just maintain the network; we improve it through automation and strict observability.

Requirements

Experience: 7+ years of relevant work experience in network engineering.
Technical Requirement: Hands-on professional experience with Google Cloud (GCP) and Terraform (IaC) is required.
Required Certification: CCNA or similar
Network Stack: Expertise in Palo Alto (Panorama), Cisco Meraki (MX/MR/MS), and classic Cisco IOS/NX/OS.
Automation: High proficiency in Terraform and GitHub; experience with Ansible is a significant plus.
Protocols: Advanced knowledge of BGP, OSPF, VLANs, and network segmentation.
Tooling: Familiarity with NetBox, Unimus, and Zabbix.
Communication: Ability to provide tier-three support and mentorship to junior engineering and support staff.
Authorization to work in the United States without sponsorship.

Nice To Haves

Preferred Certifications: CCNP or PCNSA/PCNSE.
Education: 4-year degree is preferred.

Responsibilities

Platform Ownership: Serve as the Primary Owner for core platforms: Palo Alto Firewalls, Cisco Meraki (SD-WAN), and Cisco Route/Switch.
Cloud & IaC Requirement: Act as the primary lead for Google Cloud (GCP) and Azure network services. Responsibility includes managing GitHub and Terraform repositories to deploy and maintain network code.
Infrastructure Design: Architect and deploy enterprise-level network components for Retail Stores and Fulfillment Centers, focusing on ensuring 5-9’s uptime for POS and critical operations.
Security & Compliance: Maintain the security perimeter on Palo Alto Firewalls, performing quarterly ruleset audits and ensuring PCI-DSS compliance across the retail environment.
Automation Strategy: Build and maintain Ansible playbooks to automate firmware updates, configuration backups, and repetitive operational tasks.
Observability: Own the Zabbix monitoring platform; ensure "No alert without an owner" by managing templates, integrations, and performance tuning.
Documentation & "Source of Truth": Maintain NetBox as the single source of truth for the network. Ensure all diagrams (Lucidchart) and runbooks (Notion) are updated within a 3-5 business day SLO.
Incident Leadership: Lead Sev1/Sev2 incident response and coordinate Post-Incident Reviews (PIRs) within 3 business days of resolution.
Governance: Actively participate in the Change Advisory Board (CAB) to discuss, and review major infrastructure changes.

Benefits

Multiple Medical plan options
Dental & Vision plans
Medical and Dependent Care Flexible Spending Accounts
Health Savings Account including company contributions
Company paid Life Insurance and AD&D
Company paid Short-Term Disability
Other various voluntary benefits including: Accident, Critical Illness, Hospital Indemnity, Long-Term Disability and Supplemental Life Insurance
401(k) Employer Match
Parental Leave
Paid holidays: New Year’s Day, Martin Luther King Jr. Day, Memorial Day, Juneteenth, Independence Day, Labor Day, Thanksgiving Day, Christmas Eve, Christmas Day
Paid Time Off: take it as you need it policy for exempt employees
Daily pay available
40% Employee Discount
Flexible Fridays
Onsite fitness center