Network Engineer II - Hybrid AZ

Job Purpose

The Network Engineer II supports, improves, and helps modernize enterprise network services across a hybrid cloud environment. This role is responsible for planning and implementing network changes, supporting secure connectivity for users and applications, and helping ensure reliable performance across data center, cloud, branch, and remote access environments.

This position requires strong hands-on enterprise networking experience, including routing, switching, firewall administration, VPN/ZTNA technologies, and cloud networking. The ideal candidate is comfortable owning work from planning through implementation, working with infrastructure and application teams, and using automation and infrastructure-as-code practices to improve consistency, reliability, and speed of delivery.

Key Responsibilities

• Design, implement, and support enterprise network solutions across hybrid cloud, data center, branch, and remote access environments.
• Plan, test, and execute network changes with a focus on availability, security, performance, and minimal user impact.
• Configure and troubleshoot routing, switching, firewall, VPN, and ZTNA technologies.
• Support cloud networking services, including AWS networking components such as VPCs, security groups, load balancers, and Direct Connect.
• Manage next-generation firewall policies, configuration standards, and rule changes in alignment with security and compliance requirements.
• Partner with application, cloud, security, and infrastructure teams to support reliable application connectivity and integration.
• Use infrastructure-as-code and automation tools such as Terraform, CloudFormation, Ansible, Chef, or similar technologies to deploy and manage network services.
• Monitor network performance, investigate issues, and participate in incident response and root cause analysis.
• Create and maintain network diagrams, standards, configuration documentation, and operational procedures.
• Support environments subject to PCI or similar compliance requirements.
• Identify opportunities to improve resiliency, automation, monitoring, security, and operational efficiency.
• Participate in project delivery and operational support activities as needed.

Preferred Experience and Education

• Minimum of 4 years of hands-on experience in enterprise networking.
• Strong working knowledge of routing, switching, firewalls, VPN, and secure access technologies.
• Experience troubleshooting and supporting routing protocols such as BGP, OSPF, or EIGRP.
• Experience supporting or managing next-generation firewall platforms such as Fortinet, Palo Alto, AWS Managed Firewall, or similar solutions.
• Working knowledge of cloud networking concepts and services.
• Experience with network monitoring, logging, or observability tools such as DataDog, Splunk, or similar platforms.
• Ability to plan and execute network changes with appropriate testing, documentation, communication, and rollback planning.
• Strong troubleshooting skills and the ability to work across technical teams to resolve complex issues.
• Bachelor’s degree in Computer Science, Information Technology, or a related field, or an equivalent combination of education and experience.

Required Knowledge and Skills

• Experience with AWS networking services, including VPCs, application load balancing, network load balancing, security groups, and Direct Connect.
• Experience with Cloudflare networking or security services.
• Experience with Fortinet firewall administration.
• Experience using Terraform, CloudFormation, Ansible, Chef, or similar automation tools.
• Experience designing or supporting networks that meet or exceed PCI compliance requirements.
• Fortinet, AWS, Cloudflare, Cisco, or related networking certifications.

Technical Skills

• Enterprise routing and switching
• BGP, OSPF, EIGRP, VPN, and ZTNA technologies
• Firewall administration and network security controls
• AWS networking services
• Cloudflare networking or security services
• Infrastructure as code and network automation
• Network monitoring, logging, and troubleshooting
• Secure application connectivity
• PCI or regulated network environments
• Network documentation and operational standards

Work Location and Schedule

• This is a hybrid position, requiring onsite presence Mondays, Wednesdays and Fridays at either the Global Operations Center or Headquarters location, with the option to work remotely on Tuesdays and Thursdays.  This hybrid model fosters intentional collaboration, teamwork, connection, and productivity, while still providing flexibility and work life balance.  The office addresses are 20400 N 29th Avenue, Phoenix, Arizona 85027 and 6201 N 24th Parkway, Phoenix, Arizona 85016