Sr. IP Network Engineer
The Sr. IP Network Engineer designs, operates, and continuously improves Bandwidth's global IP network infrastructure. This role owns critical functions across datacenter fabric, WAN routing, and firewall security — and drives the automation initiatives that keep the network reliable at scale. The ideal candidate brings deep hands-on expertise in VxLAN/EVPN datacenter architectures and Palo Alto firewall platforms, combined with a strong foundation in service provider routing protocols.
What You'll Do:
Design and operate VxLAN/EVPN-based datacenter fabrics across multiple Points of Presence (PoPs), including leaf-spine topology, BGP EVPN control plane, and overlay/underlay integration.
Manage and maintain Palo Alto firewall infrastructure, including zone-based policy design, Panorama administration, threat prevention, and security rule lifecycle management.
Architect and maintain BGP-based WAN routing across Bandwidth's backbone network, including iBGP/eBGP policy, route manipulation, and prefix management.
Troubleshoot complex, multi-layer network issues spanning switching, routing, and security infrastructure.
Develop and maintain network automation tooling — including device provisioning, configuration management, and event-driven remediation — using Python, Ansible, or similar frameworks.
Evaluate emerging network technologies and lead proof-of-concept efforts to drive platform improvements.
Collaborate with cross-functional Engineering and Operations teams to deliver network changes and infrastructure projects.
Mentor junior network engineers and provide technical leadership on complex projects.
Participate in on-call rotation and perform scheduled after-hours maintenance as required.
Contribute to network documentation, runbooks, and post-incident reviews (RFOs).
Support vendor relationships and assist with hardware procurement evaluation.
What You Need:
Education:
Bachelor's degree in Computer Science, Network Engineering, or a related technical field; or equivalent work experience.
Experience:
10+ years of hands-on experience in service provider network infrastructure roles.
Demonstrated production experience with VxLAN/EVPN datacenter fabrics (leaf-spine architecture, BGP EVPN control plane).
Demonstrated production experience with Palo Alto Networks firewalls, including Panorama and zone-based security policy.
Knowledge:
Expert-level understanding of BGP (iBGP/eBGP), OSPF, and MPLS in production environments.
Strong understanding of datacenter networking concepts: VxLAN, EVPN, VPCs, and Spanning Tree.
Familiarity with Linux operating systems and command-line tooling.
Skills:
Proficiency in at least one scripting or programming language (Python preferred) for network automation tasks.
Strong written and verbal communication skills; ability to produce clear technical documentation.
Ability to work independently and lead project work with minimal supervision.
Bonus Points:
Education:
Industry certifications: CCIE (R&S or Data Center), JNCIE, PCNSE, or equivalent.
Experience:
Experience with Cisco ASR/NCS (IOS-XR) and/or Juniper MX/SRX platforms.
Experience with ACI, NSX, or other SDN/overlay controller platforms.
Exposure to AI-assisted network operations tooling or observability platforms
Knowledge:
Expert level datacenter fabric experience
Skills:
Experience with infrastructure-as-code practices (Ansible, Terraform, or similar).
Familiarity with network source-of-truth platforms such as NetBox.