Senior Staff Network Engineer

PacBio•Menlo Park, CA

2d•$170,400 - $255,600•Onsite

About The Position

The Senior Staff Network Engineer is the senior technical authority for PacBio’s enterprise, lab, manufacturing, data center, and cloud networks. This individual contributor owns network architecture, long-term reliability, and technical standards across sites; enables high-throughput movement of sequencing data; strengthens segmentation and security for regulated environments; and advances network automation. The role provides technical leadership across IT, Information Security, Engineering, R&D, Manufacturing, Quality, and external partners. The role is expected to be onsite approximately 80% of the time. The employee may be required to visit and work at PacBio locations as necessary for the proper performance of their duties. All listed tasks and responsibilities are essential functions, though business conditions may require reasonable accommodations for additional tasks and responsibilities.

Requirements

10+ years of network engineering experience, including 3+ years owning architecture in a multi-site enterprise.
Bachelor’s degree in computer science, engineering, a related field, or equivalent practical experience.
Advanced routing and switching expertise (BGP, OSPF, VLANs, VRFs, LAG/MLAG, spanning tree, QoS) using Cisco, Arista, or Juniper.
Experience with data center spine-and-leaf architecture, EVPN-VXLAN, colocation cross-connects, and carrier/cloud interconnects.
Demonstrated experience troubleshooting enterprise Wi-Fi performance and managing ISP/carrier services, circuit reliability, and vendor escalations.
Hands-on experience with next-generation firewalls (Palo Alto Networks or Fortinet), VPN, network segmentation, and zero-trust network access.
Experience with identity-integrated network access using Okta and enterprise wireless and SD-WAN solutions.
Experience with AWS networking (Direct Connect, Transit Gateway, VPC design, hybrid routing).
Network monitoring and logging expertise (SNMP, telemetry, NetFlow/sFlow, syslog) and SIEM integration.
Scripting and automation using Python and Ansible, with Git-based workflows.
Strong troubleshooting, packet analysis, technical documentation, and cross-functional project leadership.
Excellent interpersonal, written, and verbal communication skills.
Current authorization to work in the United States without the need for present or future sponsorship.

Nice To Haves

CCNP/CCIE, JNCIP/JNCIE, PCNSE, or AWS Advanced Networking certification.
Experience in biotechnology, life sciences, medical devices, or regulated environments (GxP/ISO 13485).
HPC/genomics data networking, 25/100 GbE, jumbo frames, RDMA, and research storage.
OT/ICS segmentation, ZTNA/SASE platforms, and NAC tools such as Cisco ISE or Aruba ClearPass.
Terraform, NetBox, or similar source-of-truth tools, and network observability platforms.
Azure networking, international site deployments, or M&A network integrations.

Responsibilities

Own the multi-year network roadmap for LAN, WAN/SD-WAN, wireless, data centers, colocation, and cloud connectivity.
Design resilient, high-throughput network paths from sequencing instruments to on-premises storage and AWS/Azure compute, addressing capacity and performance bottlenecks.
Architect data center and colocation networks, including spine-and-leaf designs and redundant LAG/MLAG server, storage, and uplink connectivity.
Define network standards for hardware, topology, addressing, BGP/OSPF routing, DNS, IPAM, and reference designs.
Lead hybrid-cloud networking designs, including AWS Direct Connect, Transit Gateway, VPCs, and relevant Azure connectivity.
Serve as the senior escalation point for complex incidents; lead root-cause analysis, post-incident reviews, observability, availability objectives, and capacity planning.
Plan network lifecycle refreshes, site and colocation build-outs, and laboratory/data center moves with minimal business disruption.
Own enterprise Wi-Fi performance and reliability across corporate, laboratory, and manufacturing facilities, including coverage, capacity, roaming, interference, authentication, monitoring, and wireless optimization.
Manage technical performance of ISPs and network carriers, including circuit inventories, utilization, service levels, outage escalations, redundancy, and connectivity improvements; partner with IT leadership on renewals and cost optimization.
Partner with Information Security on Palo Alto Networks and other firewall policies, network segmentation, NAC/802.1X, and identity-integrated zero-trust access.
Segment instrument, operational technology, and manufacturing networks; support validated-system change controls, audits, and ISO/SOX evidence.
Integrate network and firewall logs with security monitoring and incident investigations.
Advance network-as-code, configuration management, source control, and automated compliance using Python, Ansible, Terraform, and vendor APIs.
Mentor engineers, review technical designs, assess vendors and MSPs, and communicate technical risks and investments to stakeholders.