Senior Network Engineer

Anduril-1; Costa Mesa (CA); On-site; USD 146,000 - 194,000; Full time

Job summary

Anduril Industries is seeking a Senior Network Infrastructure Engineer to join the Core Network Engineering team in Costa Mesa, CA. You will own core routing, WAN/backbone transport, multi-cloud interconnects, and edge security systems, partnering with a dedicated automation engineer to standardize configurations and integrate multi-vendor environments.

You will mentor junior engineers, handle high-capacity carrier transport, implement telemetry dashboards, and support architecture reviews

Qualifications

• 8+ years of hands-on experience designing, scaling, and maintaining complex multi-vendor enterprise, backbone, and campus production networks.
• Deep operational mastery of BGP (path selection, community manipulation, convergence optimization) and OSPF.
• Experience deploying and troubleshooting EVPN-VXLAN fabrics.
• Proven experience designing multi-tenant network architectures (VRFs, dynamic segmentation, macro- and micro-segmentation).
• Expert-level packet analysis skills (tcpdump, Wireshark) for diagnosing transit issues.
• Experience with carriers/telecom to scope, order, cross-connect, turn up, and test high-bandwidth transport circuits (10G/100G Waves, dark fiber, DIAs).
• Proven track record provisioning and troubleshooting cloud-native networking components (AWS Direct Connect, Azure ExpressRoute, GCP Interconnect).
• Strong programmatic mindset with Python; familiarity with automation ecosystems (Nornir, Jinja2, Netmiko) and REST APIs.

Responsibilities

• Design, scale, and maintain resilient campus, datacenter, and field-test networks across Arista and Cisco platforms.
• Architect WAN backbone with carrier circuits, capacity planning, and optical transport.
• Design and maintain hybrid-cloud transit networks across AWS, Azure, and GCP with direct interconnects and VNet/Transit Hub architectures.
• Develop scalable network standards, reference architectures, and implementation patterns.
• Participate in architecture reviews and provide direction for complex network initiatives.
• Drive Network-as-Code with Python and related tooling; integrate with automation pipelines.
• Collaborate with Wireless/RF engineers on campus and field Wi‑Fi deployments and 802.1X authentication.
• Implement and audit security policies and site-to-site IPsec tunnels using NGFWs managed via Panorama.
• Elevate telemetry with Grafana/Prometheus and streaming logs to reduce MTTR and improve alerting.
• Serve as escalation point for Tier-3 network issues and mentor junior staff.
• Support runbooks, architectural reviews, and pairing sessions to lift the broader IT/Infrastructure teams.

Skills

Advanced routing & switching

BGP & OSPF

EVPN-VXLAN fabrics

Multi-tenant network design

Packet analysis (tcpdump/Wireshark)

Cloud networking (AWS/Azure/GCP)

Python basics

REST APIs / Netmiko / Nornir / Jinja2

Git workflows

Tools

Nornir

Jinja2

Netmiko

Grafana

Prometheus

Job description

Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology. By bringing the expertise, technology, and business model of the 21st century’s most innovative companies to the defense industry, Anduril is changing how military systems are designed, built and sold. Anduril’s family of systems is powered by Lattice OS, an AI-powered operating system that turns thousands of data streams into a realtime, 3D command and control center. As the world enters an era of strategic competition, Anduril is committed to bringing cutting-edge autonomy, AI, computer vision, sensor fusion, and networking technology to the military in months, not years.

ABOUT THE ROLE

We are seeking a Senior Network Infrastructure Engineer to join our Core Network Engineering team. You will be joining an established, collaborative group of four engineers (1 Staff Engineer, 1 Senior Network Engineer, 1 Dedicated Wireless/RF Engineer, and 1 Network Engineer). In this role, you will be a pillar for our core routing, switching, WAN/backbone transport, multi-cloud interconnects, and edge security systems. Rather than building automation frameworks from scratch, you will partner closely with our dedicated Senior Network Automation Engineer to identify programmatic bottlenecks, standardize configurations, and integrate our multi-vendor ecosystem into our automation pipelines. You will be instrumental in consulting directly with internal business lines—spanning hardware engineering, software development, advanced manufacturing, and flight-test operations—to translate unconventional technical constraints into robust, secure, and multi-tenant network designs. Additionally, you will own the delivery of high-capacity carrier transport (wave circuits, dark fiber), provision multi-cloud networking (AWS, Azure, GCP), elevate operational observability, mentor junior engineers, and serve as an escalation point for complex Tier-3 network issues.

WHAT YOU’LL DO

• Design, scale, and maintain resilient campus, datacenter, and field-test networks utilizing both traditional three-tier and EVPN-VXLAN fabric designs across Arista (EOS) and Cisco (Catalyst/Nexus) platforms.
• Architect, scale, and maintain our corporate and datacenter WAN backbone—owning carrier circuit delivery, capacity planning, and turn-up for optical waves, dark fiber, and DIA across colocation and telecom providers.
• Design, provision, and maintain resilient hybrid-cloud transit networks across AWS, Azure, and GCP. Implement and manage dedicated interconnects (AWS Direct Connect, Azure ExpressRoute, Google Cloud Interconnect), Transit Gateways/VNet Hubs, dynamic BGP peering, and cloud-native routing architectures.
• Develop scalable network standards, reference architectures, and implementation patterns.
• Participate in architecture reviews and provide technical direction for complex network initiatives.
• Partner with our Senior Network Automation Engineer to drive Network-as-Code workflows—leveraging your foundational knowledge of Python, Nornir, and Jinja2 to define data models, draft templates, and shape API integrations.
• Partner with our dedicated Wireless/RF Engineer to design, deploy, and maintain robust campus-wide and field Wi-Fi deployments leveraging Aruba and Juniper Mist platforms, focusing on enterprise 802.1X/EAP-TLS authentication and client performance optimization.
• Implement, audit, and manage Layer 3–7 security policies, microsegmentation strategies, and site-to-site IPsec tunnels utilizing Palo Alto Networks NGFWs managed globally via Panorama.
• Elevate our telemetry stack beyond traditional SNMP polling. Implement deep-visibility tooling, flow analysis, and streaming telemetry dashboards (Grafana, Prometheus, Syslog) to proactively detect degradation, reduce MTTR, and improve alerting fidelity.
• Act as a final point of technical escalation for critical, intermittent, or high-blast-radius network anomalies. Lead rigorous post-mortem reviews and participate in a shared, multi-engineer Tier-3 on-call rotation.
• Actively support, coach, and level-up junior systems administrators and network engineers across the broader IT and Infrastructure organizations through runbook authoring, architectural reviews, and pairing sessions.

REQUIRED QUALIFICATIONS

• 8+ years of hands-on experience designing, scaling, and maintaining complex multi-vendor enterprise, backbone, and campus production networks.
• Advanced Routing, Switching & Multi-Tenancy:
• Deep operational mastery of BGP (path selection, community manipulation, convergence optimization) and OSPF.
• Demonstrated production experience deploying and troubleshooting EVPN-VXLAN fabrics.
• Proven experience designing multi-tenant network architectures (VRFs, dynamic segmentation, macro- and micro-segmentation).
• Expert-level packet analysis skills (tcpdump, Wireshark) for diagnosing subtle transit failures, MTU/fragmentation mismatches, and asymmetric routing.
• Experience working directly with carriers and telecom providers to scope, order, cross-connect, turn up, and test high-bandwidth transport circuits (10G/100G Waves, dark fiber, DIAs).
• Proven track record provisioning and troubleshooting cloud-native networking components and dedicated connectivity (AWS Direct Connect, Azure ExpressRoute, GCP Cloud Interconnect, VPC/VNet peering, Transit Gateways).
• A strong programmatic mindset with the ability to read, review, and write foundational Python.
• Working familiarity with automation ecosystems (Nornir, Jinja2, Netmiko) and REST APIs sufficient to collaborate effectively with dedicated automation software engineers.
• Comfort with Git workflows for managing configuration versions and operational changes.
• Multi-Vendor Hardware Mastery: Expert-level configuration, architecture, and troubleshooting experience across:
• Cisco Systems: Catalyst 9k series (IOS-XE) and Nexus switches (NX-OS).
• Palo Alto Networks: NGFW appliances, Panorama, App-ID, User-ID, and GlobalProtect.
• Enterprise Wireless: (Juniper Mist & Aruba) Mist Cloud, Aruba AirWave/Conductor, ClearPass/RADIUS integration, dynamic packet captures, and high-density 802.1X designs.
• High-Touch Cross-Functional Communication: Exceptional ability to translate non-standard business and physical engineering requirements into pragmatic, resilient network architectures.
• Operational Excellence: Willingness to support a weekly Tier-3 on-call rotation and travel periodically to remote field sites, test facilities, or manufacturing sites when hands-on senior engineering is required.
• Eligible to obtain and maintain an active U.S. Secret security clearance

PREFERRED QUALIFICATIONS

• Senior or Expert-level industry certifications (CCNP/CCIE, JNCIP/JNCIE, PCNSE, or Arista ACE).
• Certifications in public cloud networking (e.g., AWS Certified Advanced Networking - Specialty, Azure Network Engineer Associate).
• Experience operating within regulated or compliance-driven environments (e.g., ITAR, EAR, NIST 800-171, CMMC).
• Experience with Network Source-of-Truth platforms (NetBox, Nautobot).
• Hands-on experience with modern observability platforms (Telegraf, InfluxDB, Prometheus, Grafana, OpenConfig/gNMI).

US Salary Range

$146,000 - $194,000 USD

The salary range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. Highly competitive equity grants are included in the majority of full time offers; and are considered part of Anduril's total compensation package. Additionally, Anduril offers top-tier benefits for full-time employees, including:

At Anduril, we invest in our people. Our comprehensive, competitive benefits package (available at little to no cost to employees) ensures you’re supported in health, recovery, and whatever comes next. For more information, Explore Our Benefits .