Senior Network Engineer
About The Position
Vail Resorts is seeking a Senior Network Engineer to design, secure, and automate networks supporting cloud platforms, enterprise data centers, and modern applications. The hands-on role focuses primarily on Microsoft Azure networking, network security, Kubernetes networking, and infrastructure automation, with working knowledge of AWS and GCP and a limited supporting component of traditional enterprise networking. Approximately 80–90% of the role is dedicated to cloud networking, data center network security, Kubernetes, and automation. This year-round, full-time position collaborates with cloud, infrastructure, cybersecurity, application, and field technology teams. It includes leading complex incident analysis, maintaining technical documentation and standards, and mentoring engineers. The work environment is hybrid for employees within 50 miles of the Broomfield office, with on-site work Tuesday through Thursday and flexibility to work off-site Monday and Friday. Employees outside commuting distance may work remotely from specified locations in Canada and the United States, subject to company policy.
Requirements
- Seven or more years of experience in network engineering, cloud networking, or network security engineering, or equivalent demonstrated expertise.
- Advanced Azure networking expertise, including hybrid connectivity, cloud routing, ExpressRoute, private connectivity, DNS architecture, and segmentation.
- Working knowledge of AWS and GCP networking, with practical experience designing or supporting connectivity in at least one of these platforms.
- Strong TCP/IP, BGP, VPN, NAT, DNS, load balancing, and network security fundamentals, with the ability to troubleshoot complex hybrid environments.
- Hands-on experience with enterprise next-generation firewalls and familiarity with Check Point; understanding of SASE, Zero Trust, microsegmentation, and workload isolation.
- Practical Kubernetes networking expertise covering CNI, ingress, service networking, network policies, and application connectivity troubleshooting.
- Hands-on Terraform experience and proficiency in Python scripting and REST API automation; ability to maintain reusable, version-controlled infrastructure code.
- Strong communication, documentation, and analytical skills; ability to lead technical work independently, manage priorities, and collaborate across teams.
- At least 18 years of age.
Nice To Haves
- Direct experience with Check Point security gateways and management platforms, Cato SASE, and Zero Networks microsegmentation; Check Point Maestro experience is a plus.
- Experience with Azure Virtual WAN, AKS, AWS Transit Gateway, AWS VPC networking, and GCP VPC networking.
- Experience with Cilium, Calico, or similar Kubernetes networking technologies; Git-based CI/CD, Ansible, or other automation frameworks.
- Familiarity with Nutanix AHV, VMware, software-defined data center networking, network observability, telemetry, and automated configuration validation.
- Familiarity with Extreme Networks and Cisco routing and switching as supporting skills.
- Relevant certifications in Azure networking, Check Point, Terraform, or enterprise networking.
Responsibilities
- Design and operate secure, resilient Azure networks, including VNets, routing, ExpressRoute, VPN Gateway, private endpoints, DNS, Azure Firewall, and load balancing.
- Engineer connectivity across Azure, AWS, GCP, and data centers; troubleshoot routing, name resolution, segmentation, and application connectivity in hybrid environments.
- Design and troubleshoot Kubernetes networking, including AKS, container network interfaces (CNI), ingress, service connectivity, and network policies.
- Build network resilience into architecture and change plans to support disaster recovery, business continuity, and infrastructure modernization.
- Engineer and maintain Check Point firewall policies and security controls for cloud and data center workloads, including access rules, NAT, and secure connectivity.
- Support and optimize Cato SASE for secure access, cloud connectivity, and consistent network security policy.
- Implement Zero Networks microsegmentation to isolate workloads and reduce lateral movement; partner with cybersecurity teams to apply Zero Trust and least-privilege access.
- Secure virtualized data center networks and workload traffic, coordinating routing, segmentation, and load balancing with infrastructure teams.
- Build reusable Terraform modules and Python/API automation for network provisioning, configuration, policy management, and validation.
- Use Git and CI/CD workflows to deliver repeatable, reviewed deployments and enable self-service infrastructure provisioning with appropriate controls.
- Lead complex incident analysis, document root causes, and implement lasting corrective actions; maintain architecture diagrams, standards, and operational procedures.
- Collaborate with cloud, infrastructure, cybersecurity, application, and field technology teams; mentor engineers and provide limited support for traditional networking when needed.
Benefits
- Free employee ski passes and discounted lift tickets for friends and family, plus free ski lessons.
- Employee discounts on lodging, food, gear, and mountain shuttles.
- 401(k) retirement plan.
- Employee Assistance Program.
- Training and professional development.
- Health insurance, including medical, dental, and vision plans; eligibility for seasonal employees is after working 500 hours.
- Free ski passes for dependents.
- Critical illness and accident plans.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
