Infrastructure Engineer (SRE)
Harvey Nash
East Lansing, United States of America
2 days ago
Role details
Contract type
Permanent contract Employment type
Full-time (> 32 hours) Working hours
Regular working hours Languages
English Experience level
Senior Compensation
$ 115KJob location
East Lansing, United States of America
Tech stack
JIRA
Azure
Border Gateway Protocol
Network Operating System (NOS)
Linux
Github
Subnetting
Network Security
Shell
Windows Server
Network Configuration and Change Management
Network Architecture
Routing
Network Virtualization
Open Shortest Path First
Ansible
Zero Trust Network Access
Virtual Local Area Networks
Virtualization Technology
Wide Area Networks
Wireless Networks
Computer Network Operations
Git Flow
Information Technology
Cloudflare
Terraform
VMware
Job description
- We are looking for a Senior Infrastructure Engineer - Site Reliability Engineering with deep networking expertise to join the team responsible for the reliability, availability, and performance of hybrid infrastructure.
- Our environment spans on-premises VMware infrastructure, Azure, enterprise storage and backup platforms, networking, and CI/CD tooling, and we are in the middle of a multi-year migration of on-premises workloads to Azure.
- This is an SRE role with a focus in networking. Your deepest expertise will be in networking, and you will be one of the team's go-to people for network operations, perimeter security, and the network side of our cloud migration.
- Like every SRE on the team, you will also carry broader responsibilities: on-call, project work, automation, and troubleshooting across the full environment.
- Our network is managed as code and operated as one part of a larger interconnected system, and the role reflects that.
What You'll Do
- Own the day-to-day operational health of switching, routing, wireless, and perimeter infrastructure
- Design, implement, and maintain firewall policy through established change management
- Administer zero trust and remote access platforms
- Support the network side of our Azure migration: hybrid connectivity, virtual network design input, network security group and gateway implementation
- Manage network configuration through automation and configuration-as-code rather than device-by-device changes
- Serve as a primary resource when incidents have a network dimension, including ruling the network in or out quickly so the team can chase the real problem
- Maintain infrastructure health beyond the network in areas you take on: monitoring, capacity trending, performance
- Implement changes through Infrastructure as Code and CI/CD pipelines using Ansible, Terraform, and GitHub Actions
- Plan and track your work in Jira; contribute to estimates and technical feasibility discussions
- Participate in a weekly round-robin on-call rotation covering the full environment
- Remediate security findings within established timelines and support audit activities with documentation and evidence
- Follow change management procedures and keep configuration documentation accurate
Requirements
- 7+ years of IT experience, including at least 2 years focused on network engineering or network operations with production ownership
Deep, demonstrable expertise in:
- Routing and switching (L2/L3, VLANs, BGP, OSPF, WAN/ISP connectivity)
- Perimeter firewalls: policy design, NAT, segmentation, and safe rule lifecycle management
- Azure networking: virtual networks, subnets, network security groups, NAT gateways, VNet integration, and hybrid connectivity
- Hands-on experience managing network infrastructure through Infrastructure as Code and automation: Ansible, Terraform, Git-based workflows. This is how we operate our network day to day.
- Comfort with open networking standards and platforms; much of our network runs on Linux-based network operating systems, and comfort at a Linux shell is expected
- Working knowledge across the broader stack, including:
- Linux and Windows Server administration
- Azure beyond networking (resource deployment basics)
- Virtualization concepts (VMware)
- Sound judgment under pressure: you know when to act, when to escalate, and how to form an opinion before you do
- Clear written communication; our change management and incident processes depend on it
- Comfort operating in an environment where many systems are business-critical, not just the obvious ones
Nice to Have
- Experience with zero trust network access platforms (Cloudflare, Microsoft Global Secure Access, or similar)
- Experience with open or disaggregated network operating systems (SONiC, VyOS, TNSR, or similar)
- Financial services or other regulated-industry experience
- Experience supporting cloud migrations from the network side
- Wireless networking experience (controller-based or cloud-managed)
Benefits & conditions
A reasonable, good faith estimate of the minimum and maximum base salary for this position is $90k-$115k . This position will also include a discretionary bonus that generally will be depending on a variety of factors. Employee benefits will also be available, and details are available like Pension/401K/ Paid Vacation/ Life, Medical & Dental insurance etc., Medical coverage Dental coverage Vision coverage 401(k) retirement plan