Network Engineer II - Hybrid AZ

Best Western; Phoenix (AZ); Hybrid; USD 100,000 - 150,000; Full time

Benefits offered by this job

Medical/Dental/Vision insurance

401K company match

Paid holidays

Employee discounts

Job summary

Best Western is seeking a Network Engineer II to support, improve, and modernize enterprise network services across a hybrid cloud environment. This role focuses on planning and implementing network changes, ensuring secure connectivity for users and applications, and maintaining performance across data centre, cloud, branch, and remote access.

The position requires hands-on experience with routing, switching, firewall, VPN/ZTNA, and cloud networking.

Qualifications

• Bachelor’s degree in Computer Science, IT, or related field.
• 4+ years hands-on enterprise networking experience.
• Experience with BGP/OSPF/EIGRP routing protocols.
• Experience with Fortinet/Palo Alto/AWS Managed Firewall platforms.
• Cloud networking concepts and services familiarity.
• Experience with dataDog/Splunk or similar observability tools.

Responsibilities

• Design and support enterprise network solutions across hybrid cloud, data center, branch, and remote access environments.
• Plan, test, and execute network changes prioritizing availability, security, and performance.
• Configure and troubleshoot routing, switching, firewall, VPN, and ZTNA technologies.
• Support cloud networking services such as AWS VPCs, security groups, load balancers, and Direct Connect.
• Manage firewall policies and security configurations in line with compliance.
• Document network standards and operational procedures.

Skills

Enterprise networking

Routing & switching

VPN/ZTNA

Cloud networking

IaC / automation

Collaboration

Education

Bachelor’s degree in Computer Science / IT

Tools

Terraform

CloudFormation

Ansible

Chef

Fortinet

Palo Alto

AWS Direct Connect

Cloudflare

Job description

Join BWH Hotels – Where Passion Meets Purpose

At BWH® Hotels, we don't just offer employment opportunities, we create opportunities to be part of something extraordinary. As a global leader in hospitality for nearly 80 years, our vision is to inspire travel through unique experiences. Joining our corporate team means becoming part of a dynamic and inclusive community that values innovation, collaboration, and making a meaningful impact in the travel industry.

Headquartered in Phoenix, Arizona, BWH Hotels boasts a powerful portfolio of 18 brands, including WorldHotels™, Best Western® Hotels & Resorts, and SureStay Hotels®, with approximately 4,300 hotels in over 100 countries. We take pride in our top-ranking employee engagement scores and foster a workplace culture where your contributions truly matter. Join us and be part of a team that's shaping the future of hospitality!

Job Purpose

The Network Engineer II supports, improves, and helps modernize enterprise network services across a hybrid cloud environment. This role is responsible for planning and implementing network changes, supporting secure connectivity for users and applications, and helping ensure reliable performance across data centre, cloud, branch, and remote access environments.

This position requires strong hands‑on enterprise networking experience, including routing, switching, firewall administration, VPN/ZTNA technologies, and cloud networking. The ideal candidate is comfortable owning work from planning through implementation, working with infrastructure and application teams, and using automation and infrastructure-as-code practices to improve consistency, reliability, and speed of delivery.

Key Responsibilities

• Design, implement, and support enterprise network solutions across hybrid cloud, data center, branch, and remote access environments.
• Plan, test, and execute network changes with a focus on availability, security, performance, and minimal user impact.
• Configure and troubleshoot routing, switching, firewall, VPN, and ZTNA technologies.
• Support cloud networking services, including AWS networking components such as VPCs, security groups, load balancers, and Direct Connect.
• Manage next-generation firewall policies, configuration standards, and rule changes in alignment with security and compliance requirements.
• Partner with application, cloud, security, and infrastructure teams to support reliable application connectivity and integration.
• Use infrastructure-as-code and automation tools such as Terraform, CloudFormation, Ansible, Chef, or similar technologies to deploy and manage network services.
• Monitor network performance, investigate issues, and participate in incident response and root cause analysis.
• Create and maintain network diagrams, standards, configuration documentation, and operational procedures.
• Support environments subject to PCI or similar compliance requirements.
• Identify opportunities to improve resiliency, automation, monitoring, security, and operational efficiency.
• Participate in project delivery and operational support activities as needed.

Preferred Experience and Education

• Minimum of 4 years of hands‑on experience in enterprise networking.
• Strong working knowledge of routing, switching, firewalls, VPN, and secure access technologies.
• Experience troubleshooting and supporting routing protocols such as BGP, OSPF, or EIGRP.
• Experience supporting or managing next-generation firewall platforms such as Fortinet, Palo Alto, AWS Managed Firewall, or similar solutions.
• Working knowledge of cloud networking concepts and services.
• Experience with network monitoring, logging, or observability tools such as DataDog, Splunk, or similar platforms.
• Ability to plan and execute network changes with appropriate testing, documentation, communication, and rollback planning.
• Strong troubleshooting skills and the ability to work across technical teams to resolve complex issues.
• Bachelor’s degree in Computer Science, Information Technology, or a related field, or an equivalent combination of education and experience.

Required Knowledge and Skills

• Experience with AWS networking services, including VPCs, application load balancing, network load balancing, security groups, and Direct Connect.
• Experience with Cloudflare networking or security services.
• Experience with Fortinet firewall administration.
• Experience using Terraform, CloudFormation, Ansible, Chef, or similar automation tools.
• Experience designing or supporting networks that meet or exceed PCI compliance requirements.
• Fortinet, AWS, Cloudflare, Cisco, or related networking certifications.

Technical Skills

• Enterprise routing and switching
• BGP, OSPF, EIGRP, VPN, and ZTNA technologies
• Firewall administration and network security controls
• AWS networking services
• Cloudflare networking or security services
• Infrastructure as code and network automation
• Network monitoring, logging, and troubleshooting
• Secure application connectivity
• PCI or regulated network environments
• Network documentation and operational standards

Work Location and Schedule

• This is a hybrid position, requiring onsite presence Mondays, Wednesdays and Fridays at either the Global Operations Center or Headquarters location, with the option to work remotely on Tuesdays and Thursdays. This hybrid model fosters intentional collaboration, teamwork, connection, and productivity, while still providing flexibility and work life balance. The office addresses are 20400 N 29th Avenue, Phoenix, Arizona 85027 and 6201 N 24th Parkway, Phoenix, Arizona 85016

This position is not eligible for immigration sponsorship.

Benefits Summary

for Full-Time Employees

• Medical/Dental/Vision available day one
• Vacation/Sick- accruals start day one
• Paid company holidays and personalholidays to celebrate what’s important to you
• 401K - company contribution and match (U.S.)
• Registered Retirement Savings Plan (RRSP) – company contribution and match (Canada)
• Employee discounts/hotel discounts
• Free financial and health wellness programs
• Tuition Reimbursement

Equal Employment Opportunity

BWH Hotels (the "Company") maintains a policy of equal employment opportunity for all employees and qualified applicants for employment without regard to race (including hair textures and hair styles associated with race), color or pigmentation, religion, religious creed (including religious dress and grooming practices), national origin, ancestry, alienage or citizenship status, caste, age, disability, gender, gender identity or expression, sex, sexual orientation, LGBTQIA+ individuals, height, weight, pregnancy status, childbirth or related medical conditions, genetic information, uniformed service or veteran status, marital status, or any other characteristic protected by applicable federal, state, provincial, or local laws. The Company’s equal employment opportunity policy applies to all aspects of employment with the Company, including, but not limited to, hiring, promotion, transfer, benefits, discipline, and termination.