GRAIL is seeking a Network Engineer II to join our Platform Engineering organization. Our team designs, builds, and operates the enterprise networking infrastructure that powers GRAIL's laboratories, data centers, cloud platforms, and corporate environments. We are responsible for delivering highly available, secure, and scalable network services across on-premises infrastructure and AWS.
In this role, you will be responsible for engineering, operating, and continuously improving GRAIL's hybrid network infrastructure, including campus, laboratory, data center, WAN, cloud networking, and security platforms. You will work with Juniper and Aruba switching and routing, Palo Alto firewalls, AWS networking, VPN technologies, monitoring platforms, and infrastructure automation to build reliable, scalable, and secure networking solutions.
This is an engineering-focused role rather than a traditional network operations position. We are looking for someone who enjoys designing scalable infrastructure, automating repetitive tasks, improving platform reliability, and partnering across engineering teams to deliver secure and resilient networking services.
You will collaborate closely with Platform Engineering, Cloud Engineering, Security, Infrastructure, and application teams to support business-critical services while driving operational excellence through automation, observability, and modern networking practices.
This role is based in Durham, North Carolina (RTP) and requires regular on-site presence to support laboratory and data center infrastructure. This is an onsite position that requires on call and overtime flexibility.
Responsibilities
Design, implement, and support enterprise network infrastructure across campus, laboratory, data center, manufacturing, and AWS cloud environments.
Deploy, maintain, and troubleshoot Juniper and Aruba switching and routing infrastructure, including Layer 2/Layer 3 networking, VLANs, routing protocols, high availability, and modern data center networking technologies.
Configure, maintain, and optimize Palo Alto Networks firewalls, security policies, NAT, VPNs, GlobalProtect, URL filtering, and related security services.
Design, implement, and support AWS networking services including VPCs, Transit Gateway, Route Tables, Security Groups, Network ACLs, Site-to-Site VPNs, Direct Connect integrations, and hybrid connectivity.
Develop infrastructure automation using Python, Ansible, Terraform, PowerShell, or similar technologies to improve provisioning, configuration management, operational consistency, and compliance.
Build and maintain network monitoring, alerting, dashboards, and operational visibility using New Relic and other enterprise monitoring platforms.
Investigate and resolve complex routing, switching, firewall, VPN, cloud networking, DNS, DHCP, and connectivity issues across hybrid environments.
Partner with Platform Engineering, Cloud Engineering, Security, Infrastructure, and application teams to support new infrastructure deployments, cloud migrations, and strategic platform initiatives.
Participate in infrastructure lifecycle management, including hardware refreshes, software upgrades, patching, disaster recovery planning, and configuration standardization.
Develop and maintain technical documentation, network diagrams, operational runbooks, and engineering standards.
Participate in an on-call rotation supporting production infrastructure as required.
Leverage modern AI-assisted engineering tools responsibly to improve troubleshooting, automation development, documentation, and operational efficiency.
These responsibilities summarize the role's primary responsibilities and are not an exhaustive list. They may change at the company's discretion.
Required Qualifications
- 4+ years of experience designing, implementing, and supporting enterprise network infrastructure.
- 3+ years of hands-on experience with Juniper and/or Aruba enterprise networking platforms, including switching, routing, and network troubleshooting.
- 3+ years of experience managing Palo Alto Networks firewalls, including security policies, NAT, VPNs, GlobalProtect, and threat prevention.
- 2+ years of hands-on experience with AWS networking services, including VPCs, Transit Gateway, Route Tables, Security Groups, Network ACLs, Site-to-Site VPNs, and hybrid cloud networking.
- Experience supporting enterprise routing and switching technologies including BGP, OSPF, VLANs, STP, LACP, VRRP, and Layer 2/Layer 3 troubleshooting.
- Experience developing infrastructure automation using Python, Ansible, Terraform, PowerShell, or similar scripting and Infrastructure as Code tools.
- Experience implementing and supporting network monitoring and observability platforms such as New Relic, SolarWinds, Datadog or equivalent.
- Strong troubleshooting skills across networking, cloud connectivity, VPNs, firewalls, DNS, DHCP, enterprise infrastructure, and network security.
- Experience working in Linux and Windows enterprise environments.
- Bachelor's degree in Computer Science, Information Technology, Engineering, or equivalent practical experience.
- Willingness to participate in an on-call rotation supporting production infrastructure as required.
Preferred Qualifications
- Experience supporting hybrid cloud infrastructure across AWS and enterprise data centers.
- Experience with EVPN/VXLAN architectures and modern data center networking.
- Experience with AWS Direct Connect and hybrid networking architectures.
- Experience supporting Aruba CX switching platforms and Aruba Central.
- Experience managing enterprise VPN solutions including GlobalProtect.
- Experience implementing Infrastructure as Code using Terraform.
- Experience with Git-based version control and CI/CD pipelines for infrastructure automation.
- Experience supporting VMware vSphere environments and virtualization networking.
- Knowledge of DNS, DHCP, Active Directory, PKI, RADIUS, and enterprise authentication services.
- Experience supporting laboratory, biotechnology, healthcare, manufacturing, or regulated environments.
- Juniper (JNCIS/JNCIP), Aruba (ACSA/ACSP), Palo Alto (PCNSA/PCNSE), AWS Associate, or equivalent industry certifications.
- Strong written and verbal communication skills with the ability to collaborate across Platform Engineering, Cloud Engineering, Security, Infrastructure, and application teams.
- Experience mentoring junior engineers and driving operational improvements through automation and engineering best practices.
- Comfortable using modern AI-assisted engineering tools while applying sound engineering judgment and security best practices.
Skills Required
- 4+ years of experience designing, implementing, and supporting enterprise network infrastructure.
- 3+ years hands-on experience with Juniper and/or Aruba enterprise networking platforms (switching, routing, troubleshooting).
- 3+ years experience managing Palo Alto Networks firewalls (security policies, NAT, VPNs, GlobalProtect, threat prevention).
- 2+ years hands-on experience with AWS networking services (VPCs, Transit Gateway, Route Tables, Security Groups, Network ACLs, Site-to-Site VPNs, hybrid networking).
- Experience supporting enterprise routing and switching technologies including BGP, OSPF, VLANs, STP, LACP, VRRP, and Layer 2/Layer 3 troubleshooting.
- Experience developing infrastructure automation using Python, Ansible, Terraform, PowerShell, or similar tools.
- Experience implementing and supporting network monitoring and observability platforms such as New Relic, SolarWinds, Datadog, or equivalent.
- Strong troubleshooting skills across networking, cloud connectivity, VPNs, firewalls, DNS, DHCP, and enterprise infrastructure.
- Experience working in Linux and Windows enterprise environments.
- Bachelor's degree in Computer Science, Information Technology, Engineering, or equivalent practical experience.
- Willingness to participate in an on-call rotation supporting production infrastructure as required.
- Regular on-site presence in Durham, North Carolina (RTP) to support laboratory and data center infrastructure; ability to work overtime as needed.
- Experience supporting hybrid cloud infrastructure across AWS and enterprise data centers.
- Experience with EVPN/VXLAN architectures and modern data center networking.
- Experience with AWS Direct Connect and hybrid networking architectures.
- Experience supporting Aruba CX switching platforms and Aruba Central.
- Experience managing enterprise VPN solutions including GlobalProtect.
- Experience implementing Infrastructure as Code using Terraform.
- Experience with Git-based version control and CI/CD pipelines for infrastructure automation.
- Experience supporting VMware vSphere environments and virtualization networking.
- Knowledge of DNS, DHCP, Active Directory, PKI, RADIUS, and enterprise authentication services.
- Experience supporting laboratory, biotechnology, healthcare, manufacturing, or regulated environments.
- Industry certifications such as Juniper (JNCIS/JNCIP), Aruba (ACSA/ACSP), Palo Alto (PCNSA/PCNSE), AWS Associate, or equivalent.
- Experience mentoring junior engineers and driving operational improvements through automation and engineering best practices.
What the Team is Saying
.JPG)
.JPG)
What We Do
GRAIL is a healthcare company whose mission is to detect cancer early, when it can be cured. GRAIL is using the power of high-intensity sequencing, population-scale clinical studies, and state-of-the-art computer science and data science to enhance the scientific understanding of cancer biology, and to develop and commercialize pioneering products.
Why Work With Us
Everything we do is guided by our mission to detect cancer early, when it can be cured. It’s the reason we’re here, and it’s no small task. The right people make all the difference. That’s why we’re looking for those who strive to share their knowledge, contribute their skills, inspire each other and commit to something bigger than themselves.
Gallery
GRAIL Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
GRAIL has a variety of work types depending on the roles. Some roles are onsite like a lab role, some are fully remote like our Galleri Sales Consultant roles. Others are hybrid with 2-3 days onsite. Typically Tuesday and Thursday.
.png)
