Senior Network Engineer New New York, NY; Pittsburgh, PA

Blink Health LLc; New York (NY); On-site; USD 150,000 - 190,000; Full time

Job summary

Blink Health in New York, NY is seeking a Senior Network Engineer to own the hybrid network spanning offices, distributed sites, and AWS connectivity. You’ll manage Meraki switches, Palo Alto firewalls, Site-to-Site VPN, and Terraform automation to codify changes.

You will design and operate multi-VPC AWS networking, monitor with tooling, participate in on-call, and collaborate with security and engineering teams to ensure reliable connectivity for our warehouses, offices, and remote sites.

Qualifications

• 8+ years of progressively senior network engineering experience.
• Hands-on ownership of physical network infrastructure including switching, routing, wireless, and firewalls.
• Strong knowledge of BGP, OSPF, VLANs, and firewall design.

Responsibilities

• Manage, monitor, and maintain office, site, and distributed network infrastructure (Meraki, Palo Alto, VPNs).
• Design and deploy office and site networks: switching, routing, VLAN segmentation, wireless coverage, secure remote connectivity.
• Tune wireless deployments and RF planning to optimize coverage and performance.
• Configure and harden Palo Alto firewalls and VPNs with centralized management (Panorama).
• Maintain multi-VPC AWS environment: VPCs, subnets, route tables, Security Groups, NACLs.
• Troubleshoot complex issues from Layer 1 to 7 using packet captures and monitoring tools.
• Own production outages from detection through root cause and post-incident improvements.
• Participate in on-call rotation.

Skills

BGP

OSPF

STP

VLAN design

IPSec

DNS

SNMP

DHCP

AWS networking

Terraform

Kubernetes networking

Linux fundamentals

Incident ownership

Communication

Tools

Meraki

Palo Alto

Panorama

AWS

Job description

Company Overview:

Company Overview: Blink Health is the fastest growing healthcare technology company that builds products to make prescriptions accessible and affordable to everybody. Our two primary products - BlinkRx and Quick Save - remove traditional roadblocks within the current prescription supply chain, resulting in better access to critical medications and improved health outcomes for patients. BlinkRx is the world's first pharma-to-patient cloud that offers a digital concierge service for patients who are prescribed branded medications. Patients benefit from transparent low prices, free home delivery, and world-class support on this first-of-its-kind centralized platform. With BlinkRx, never again will a patient show up at the pharmacy only to discover that they can’t afford their medication, their doctor needs to fill out a form for them, or the pharmacy doesn’t have the medication in stock. We are a highly collaborative team of builders and operators who invent new ways of working in an industry that historically has resisted innovation. Join us!

About the Role

We are looking for a Senior Network Engineer to join our Networking team. In this role, you will be a hands-on owner of our hybrid network - spanning physical office environments, distributed sites, and AWS cloud connectivity. The day-to-day work is rooted in physical infrastructure: Meraki switches and access points, Palo Alto firewalls, Starlink and ISP connectivity, site-to-site VPN, and the routing and switching that keeps our offices, warehouses, and remote sites online.

You will also own the AWS networking layer that connects this physical footprint to our cloud workloads, and you'll automate that work through infrastructure-as-code so changes are repeatable, reviewable, and reliable.

This is a role for an engineer who is genuinely at home in the network stack - someone who can walk into a wiring closet, troubleshoot a misbehaving switch stack, tune a wireless deployment, debug a BGP session, and then go write the Terraform to make sure the next deployment doesn't have the same problem.

What You'll Do

Network Infrastructure

• Manage, monitor, and maintain our office, site, and distributed network infrastructure - Meraki switches and wireless access points, Palo Alto firewalls, Starlink links, ISP connections, and site-to-site VPN
• Design and deploy office and site networks: switching, routing, VLAN segmentation, wireless coverage, and secure remote connectivity
• Tune wireless deployments - perform RF planning, capacity modeling, channel optimization, and troubleshoot roaming and interference issues
• Configure and harden Palo Alto firewalls and VPN - security policies, NAT, IPSec tunnels, Global Protect, and Panorama-based centralized management
• Troubleshoot complex Layer 1 through Layer 7 issues across the physical and logical stack using packet captures (Wireshark, tcpdump), ThousandEyes, Fiddler, nmap, and other diagnostic tools
• Maintain monitoring and alerting via PRTG, Nagios, Grafana, New Relic, and ThousandEyes
• Serve as the technical escalation point for network incidents - own production outages from first alert through root cause and post-incident improvements
• Participate in on-call rotation

Cloud Network Operations

• Maintain our multi-VPC AWS environment: VPCs, subnets, route tables, Security Groups, NACLs, and VPC peering
• Operate Transit Gateway, Direct Connect, and Site-to-Site VPN connectivity between AWS and our physical sites
• Manage Route 53 public and private zones, DNS forwarders, and hybrid name resolution
• Support and tune AWS Load Balancers (ALB, NLB) for application teams
• Troubleshoot connectivity issues spanning AWS, on-prem, and Kubernetes-based microservices environments

Automation and Infrastructure-as-Code

• Use Terraform (and Terragrunt where applicable) to deploy and manage networking resources - VPCs, firewall rules, DNS, routing, and Security Groups
• Contribute to and maintain CI/CD pipelines for network changes through GitHub workflows, peer review, and automated validation
• Build tools and scripts (Python, Bash) to automate repetitive operational work and reduce toil
• Prevent configuration drift through code-first network management

Security and Operational Excellence

• Configure, harden, and patch network devices and services aligned with security best practices
• Monitor security alerts, investigate incidents, and coordinate with the security team on remediation
• Validate firewall changes for least-privilege and operational impact before production deployment
• Maintain network documentation, topology diagrams, runbooks, and change records
• Partner with engineering teams to troubleshoot network design and connectivity in AWS and Kubernetes-based microservices environments
• Communicate clearly with technical and non-technical stakeholders during incidents, changes, and planned maintenance
• Work with IT leadership to evaluate new products, vendor roadmaps, and infrastructure investments
• Backup the systems engineering team for Windows and Linux server administration when network issues overlap with server or application behavior

What You'll Need

Core Requirements

• 8+ years of progressively senior network engineering experience, with deep hands-on ownership of physical network infrastructure (switching, routing, wireless, firewalls)
• 5+ years of experience administering enterprise wireless and switching platforms, preferably Cisco Meraki, including Dashboard operations, switch stacks, VLAN design, and RF tuning
• Hands-on Palo Alto firewall experience including security policy design, NAT, IPSec/SSL VPN, and centralized management through Panorama. Familiarity with Strata Cloud Manager is a plus
• Expert-level knowledge of enterprise network protocols: BGP, OSPF, STP, VLANs, IPSec, DNS, SNMP, DHCP - and the ability to troubleshoot each one from the command line
• Strong AWS networking experience: VPC architecture, Transit Gateway, Direct Connect, Site-to-Site VPN, Security Groups, Route 53, and VPC peering. Ability to design and operate a multi-VPC environment connected to physical sites
• Proficiency in Terraform for production network infrastructure. Experience with Terragrunt, CloudFormation, or Ansible is a plus
• Methodical, command-line-first troubleshooting: you read packet captures, you live in tcpdump and traceroute, and you can find the needle across the whole stack
• Solid Linux fundamentals - you're comfortable in a shell and understand how the operating system interacts with the network
• Microservices and Kubernetes networking awareness - you can troubleshoot service-to-service connectivity, DNS, ingress, and routing in container-based environments
• Strong incident ownership - you have led at least one major production network outage from detection through root cause to long-term fix
• Strong written and verbal communication for documentation, stakeholder updates, and post-incident reviews

Logistics

• Comfortable working in the Eastern Time Zone
• Ability to travel up to 25% to office sites

Why Join Us:
It is rare to have a company that both deeply impacts its customers and is able to provide its services across a massive population. At Blink, we have a huge impact on people when they are most vulnerable: at the intersection of their healthcare and finances. We are also the fastest growing healthcare company in the country and are driving that impact across millions of new patients every year. Our business model not only helps people, but drives economics that allow us to build a generational company. We are a relentlessly learning, constantly curious, and aggressively collaborative cross-functional team dedicated to inventing new ways to improve the lives of our customers.

We are an equal opportunity employer and value diversity of all kinds. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Applicants who provide their phone number and consent to receive text messages may receive SMS or MMS updates from Blink Health regarding their application.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

Blink Health is an Equal Opportunity Employer. We do not discriminate based on race, color, religion, sex, national origin, age, disability, or any other status protected by applicable law.

No legally protected characteristic will be a factor in decisions regarding recruiting or hiring.