Senior Network Engineer
Role details
Job location
Tech stack
Job description
The Senior Network Engineer is the primary technical owner for our enterprise-wide network, bridging the gap between our physical retail footprint and our cloud presence. This role is responsible for the design, security, and continuous improvement of infrastructure across Google Cloud (GCP), Microsoft Azure, and our on-premise locations. As a leader within the NetDevOps team, you will drive the transition from manual configuration to Infrastructure as Code (IaC). This is an "evolution-focused" role: we don't just maintain the network; we improve it through automation and strict observability. Position Details: Work Environment: We are headquartered in the Madison, WI area, but this job may be performed remotely within the United States. If you happen to live near and enjoy coming into the office, we will welcome you too! What You'll Do:
- Platform Ownership: Serve as the Primary Owner for core platforms: Palo Alto Firewalls, Cisco Meraki (SD-WAN), and Cisco Route/Switch.
- Cloud & IaC Requirement: Act as the primary lead for Google Cloud (GCP) and Azure network services. Responsibility includes managing GitHub and Terraform repositories to deploy and maintain network code.
- Infrastructure Design: Architect and deploy enterprise-level network components for Retail Stores and Fulfillment Centers, focusing on ensuring 5-9's uptime for POS and critical operations.
- Security & Compliance: Maintain the security perimeter on Palo Alto Firewalls, performing quarterly ruleset audits and ensuring PCI-DSS compliance across the retail environment.
- Automation Strategy: Build and maintain Ansible playbooks to automate firmware updates, configuration backups, and repetitive operational tasks.
- Observability: Own the Zabbix monitoring platform; ensure "No alert without an owner" by managing templates, integrations, and performance tuning.
- Documentation & "Source of Truth": Maintain NetBox as the single source of truth for the network. Ensure all diagrams (Lucidchart) and runbooks (Notion) are updated within a 3-5 business day SLO.
- Incident Leadership: Lead Sev1/Sev2 incident response and coordinate Post-Incident Reviews (PIRs) within 3 business days of resolution.
- Governance: Actively participate in the Change Advisory Board (CAB) to discuss, and review major infrastructure changes., * Travel is required for less than 10% of company-related meetings, programs, and/or events.
- Sitting is required for 90% of working hours.
- Standing is required for 10% of working hours.
- Continuous arm, hand, and wrist movement (ie: typing)
- Occasional reaching, twisting, and bending.
- Noise level no greater than casual conversation.
- Ability to perform work in cubicle workstations or an office setting.
- Work in temperatures ranging from 65 - 75 degrees.
Final Interview Process: At Duluth Trading Company, we value face-to-face interactions that foster our culture of learning, creativity, and teamwork. Although this will be a remote position, we believe the best way to start a great partnership is with in-person interaction. Therefore, the final interview for the recruiting process will be held on-site at our Mount Horeb, WI office. This visit allows you to see our workspace firsthand, engage directly with your potential teammates, and get a clear picture of our daily operations.
Requirements
Do you have experience in Terraform?, Do you have a Bachelor's degree?, * Experience: 7+ years of relevant work experience in network engineering.
- Technical Requirement: Hands-on professional experience with Google Cloud (GCP) and Terraform (IaC) is required.
- Required Certification: CCNA or similar
- Preferred Certifications: CCNP or PCNSA/PCNSE.
- Education: 4-year degree is preferred.
- Network Stack: Expertise in Palo Alto (Panorama), Cisco Meraki (MX/MR/MS), and classic Cisco IOS/NX/OS.
- Automation: High proficiency in Terraform and GitHub; experience with Ansible is a significant plus.
- Protocols: Advanced knowledge of BGP, OSPF, VLANs, and network segmentation.
- Tooling: Familiarity with NetBox, Unimus, and Zabbix.
- Communication: Ability to provide tier-three support and mentorship to junior engineering and support staff.
- Authorization to work in the United States without sponsorship., * Inspiring Trust
- Adaptability
- Mature Confidence
- Career and Self Development
Benefits & conditions
3.73.7 out of 5 stars United States $100,000 - $125,000 a year - Full-time, Pulled from the full job description
-
AD&D insurance
-
Parental leave
-
Health insurance
-
401(k) matching
-
Paid time off
-
Employee discount
-
Vision insurance, Duluth Headquarters Benefits and Perks Our pursuit of a better way isn't just about our products-it's about our people too. That's why our Dam Good Crew enjoys a comprehensive benefits package, designed to support their well-being and success.
-
Multiple Medical plan options
-
Dental & Vision plans
-
Medical and Dependent Care Flexible Spending Accounts
-
Health Savings Account including company contributions
-
Company paid Life Insurance and AD&D
-
Company paid Short-Term Disability
-
Other various voluntary benefits including: Accident, Critical Illness, Hospital Indemnity, Long-Term Disability and Supplemental Life Insurance
-
401(k) Employer Match
-
Parental Leave
-
Paid holidays: New Year's Day, Martin Luther King Jr. Day, Memorial Day, Juneteenth, Independence Day, Labor Day, Thanksgiving Day, Christmas Eve, Christmas Day
-
Paid Time Off: take it as you need it policy for exempt employees
-
Daily pay available
-
40% Employee Discount
-
Flexible Fridays
-
Onsite fitness center
Position Compensation Outline Compensation Range: $100,000 to $125,000/year This position is eligible to participate in the company bonus program.