Senior Network Engineer II - Infra & Cloud Networking

BlinkRx; St. Louis (MO); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Blink Health is seeking a Senior Network Engineer II to own our hybrid network across office, distributed sites, and AWS cloud. You will manage Meraki switches, Palo Alto firewalls, Starlink connectivity, and VPNs; design office networks, optimize wireless, and ensure secure remote access.

You’ll automate with Terraform, Terragrunt, and CI/CD pipelines, and lead incident response. Ideal candidates have 8+ years of network engineering, strong AWS networking skills, and expertise in BGP/OSPF, DNS,

Qualifications

• 8+ years of progressively senior network engineering experience, with deep hands-on ownership of physical network infrastructure (switching, routing, wireless, firewalls).
• 5+ years of experience administering enterprise wireless and switching platforms, preferably Cisco Meraki, including Dashboard operations, switch stacks, VLAN design, and RF tuning.
• Hands-on Palo Alto firewall experience including security policy design, NAT, IPSec/SSL VPN, and centralized management through Panorama. Familiarity with Strata Cloud Manager is a plus.
• Expert-level knowledge of enterprise network protocols: BGP, OSPF, STP, VLANs, IPSec, DNS, SNMP, DHCP — and the ability to troubleshoot each one from the command line.
• Strong AWS networking experience: VPC architecture, Transit Gateway, Direct Connect, Site-to-Site VPN, Security Groups, Route 53, and VPC peering. Ability to design and operate a multi-VPC environment connected to physical sites.
• Proficiency in Terraform for production network infrastructure. Experience with Terragrunt, CloudFormation, or Ansible is a plus.
• Methodical, command-line-first troubleshooting: you read packet captures, you live in tcpdump and traceroute, and you can find the needle across the whole stack
• Solid Linux fundamentals — you're comfortable in a shell and understand how the operating system interacts with the network
• Microservices and Kubernetes networking awareness — you can troubleshoot service-to-service connectivity, DNS, ingress, and routing in container-based environments
• Strong incident ownership — you have led at least one major production network outage from detection through root cause to long-term fix
• Strong written and verbal communication for documentation, stakeholder updates, and post-incident reviews

Responsibilities

• Manage, monitor, and maintain our office, site, and distributed network infrastructure — Meraki switches and wireless access points, Palo Alto firewalls, Starlink links, ISP connections, and site-to-site VPN
• Design and deploy office and site networks: switching, routing, VLAN segmentation, wireless coverage, and secure remote connectivity
• Tune wireless deployments — perform RF planning, capacity modeling, channel optimization, and troubleshoot roaming and interference issues
• Configure and harden Palo Alto firewalls and VPN — security policies, NAT, IPSec tunnels, Global Protect, and Panorama-based centralized management
• Troubleshoot complex Layer 1 through Layer 7 issues across the physical and logical stack using packet captures (Wireshark, tcpdump), ThousandEyes, Fiddler, nmap, and other diagnostic tools
• Maintain monitoring and alerting via PRTG, Nagios, Grafana, New Relic, and ThousandEyes
• Serve as the technical escalation point for network incidents — own production outages from first alert through root cause and post-incident improvements
• Participate in on-call rotation
• Maintain our multi-VPC AWS environment: VPCs, subnets, route tables, Security Groups, NACLs, and VPC peering
• Operate Transit Gateway, Direct Connect, and Site-to-Site VPN connectivity between AWS and our physical sites
• Manage Route 53 public and private zones, DNS forwarders, and hybrid name resolution
• Support and tune AWS Load Balancers (ALB, NLB) for application teams
• Troubleshoot connectivity issues spanning AWS, on-prem, and Kubernetes-based microservices environments
• Use Terraform (and Terragrunt where applicable) to deploy and manage networking resources — VPCs, firewall rules, DNS, routing, and Security Groups
• Contribute to and maintain CI/CD pipelines for network changes through GitHub workflows, peer review, and automated validation
• Build tools and scripts (Python, Bash) to automate repetitive operational work and reduce toil
• Prevent configuration drift through code-first network management
• Configure, harden, and patch network devices and services aligned with security best practices
• Monitor security alerts, investigate incidents, and coordinate with the security team on remediation
• Validate firewall changes for least-privilege and operational impact before production deployment
• Maintain network documentation, topology diagrams, runbooks, and change records
• Partner with engineering teams to troubleshoot network design and connectivity in AWS and Kubernetes-based microservices environments
• Provide technical consulting on network architecture decisions
• Communicate clearly with technical and non-technical stakeholders during incidents, changes, and planned maintenance
• Work with IT leadership to evaluate new products, vendor roadmaps, and infrastructure investments
• Backup the systems engineering team for Windows and Linux server administration when network issues overlap with server or application behavior

Skills

Meraki

Palo Alto

AWS Networking

BGP

OSPF

VLANs

IPSec

DNS

SNMP

Kubernetes networking

Linux fundamentals

Incident ownership

Security best practices

Networking protocols

Tools

Terraform

Terragrunt

CloudFormation

Ansible

Wireshark

Job description

Blink Health is seeking a Senior Network Engineer II to own our hybrid network across office, distributed sites, and AWS cloud. You will manage Meraki switches, Palo Alto firewalls, Starlink connectivity, and VPNs; design office networks, optimize wireless, and ensure secure remote access.

You’ll automate with Terraform, Terragrunt, and CI/CD pipelines, and lead incident response. Ideal candidates have 8+ years of network engineering, strong AWS networking skills, and expertise in BGP/OSPF, DNS,