Sr. IP Network Engineer

Bandwidth.com; Raleigh (NC); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Medical, Vision & Dental coverage

4 weeks PTO

PTO embargo policy

Mahalo moments time off

Nutritionist consultations

Job summary

Bandwidth is seeking a Sr. IP Network Engineer to design, operate, and improve its global IP network. You will own datacenter fabrics, WAN routing, and firewall security, driving automation with Python/Ansible to keep the network reliable at scale.

The role emphasizes hands-on experience with VxLAN/EVPN, Palo Alto Panorama, and BGP EVPN control planes, with collaboration across Engineering and Operations.

Qualifications

• Bachelor’s degree in Computer Science, Network Engineering, or a related technical field or equivalent work experience.
• 10+ years of hands-on experience in service provider network infrastructure roles.
• Hands-on with VxLAN/EVPN datacenter fabrics (leaf-spine, BGP EVPN).
• Production experience with Palo Alto firewalls, including Panorama and zone-based policies.
• Strong knowledge of BGP (iBGP/eBGP), OSPF, and MPLS in production environments.
• Familiarity with Linux CLI and network scripting (Python preferred).
• Ability to lead projects with minimal supervision.

Responsibilities

• Design and operate VxLAN/EVPN datacenter fabrics across multiple PoPs with leaf-spine topology.
• Manage Palo Alto firewall infrastructure, Panorama, and security policy lifecycles.
• Architect and maintain BGP-based WAN routing across Bandwidth’s backbone.
• Troubleshoot complex multi-layer network issues spanning switching, routing, and security.
• Develop and maintain network automation tooling using Python or Ansible.
• Lead proof-of-concept efforts to evaluate emerging network technologies.
• Collaborate with Engineering and Operations to deliver network changes.
• Mentor junior engineers and provide technical leadership on projects.
• Participate in on-call rotations and after-hours maintenance.
• Contribute to runbooks, incident reviews, and vendor relationships.

Skills

VxLAN/EVPN

Palo Alto firewalls

BGP (iBGP/eBGP)

Python

Ansible

Linux

Leaf-Spine architecture

Education

Bachelor’s degree in Computer Science/Network Engineering

Tools

Palo Alto Panorama

NetBox

Job description

Who We Are:

At Bandwidth , we shape how the world connects. We’re the global communications software company and Tier 1 network operator with global reach. The voice, messaging, and emergency services infrastructure behind the brands and apps you use every day.

Because we own the network we build on, the problems you’ll solve here are bigger, more complex, and more impactful. And as communications shifts to AI, we’re the infrastructure layer making it possible.

We call ourselves BANDmates because building something this big takes collaboration, different perspectives, and the freedom to bring your authentic self to the table.

We’re experts who speak like humans. Ready to build what’s next? #JoinTheBand

What We Are Looking For:

The Sr. IP Network Engineer designs, operates, and continuously improves Bandwidth’s global IP network infrastructure. This role owns critical functions across datacenter fabric, WAN routing, and firewall security – and drives the automation initiatives that keep the network reliable at scale. The ideal candidate brings deep hands‑on expertise in VxLAN/EVPN datacenter architectures and Palo Alto firewall platforms, combined with a strong foundation in service provider routing protocols.

What You’ll Do:

• Design and operate VxLAN/EVPN-based datacenter fabrics across multiple Points of Presence (PoPs), including leaf‑spine topology, BGP EVPN control plane, and overlay/underlay integration.
• Manage and maintain Palo Alto firewall infrastructure, including zone‑based policy design, Panorama administration, threat prevention, and security rule lifecycle management.
• Architect and maintain BGP‑based WAN routing across Bandwidth’s backbone network, including iBGP/eBGP policy, route manipulation, and prefix management.
• Troubleshoot complex, multi‑layer network issues spanning switching, routing, and security infrastructure.
• Develop and maintain network automation tooling – including device provisioning, configuration management, and event‑driven remediation – using Python, Ansible, or similar frameworks.
• Evaluate emerging network technologies and lead proof‑of‑concept efforts to drive platform improvements.
• Collaborate with cross‑functional Engineering and Operations teams to deliver network changes and infrastructure projects.
• Mentor junior network engineers and provide technical leadership on complex projects.
• Participate in on‑call rotation and perform scheduled after‑hours maintenance as required.
• Contribute to network documentation, runbooks, and post‑incident reviews (RFOs).
• Support vendor relationships and assist with hardware procurement evaluation.

What You Need:

• Education:

• Bachelor’s degree in Computer Science, Network Engineering, or a related technical field; or equivalent work experience.

• Experience:

• 10+ years of hands‑on experience in service provider network infrastructure roles.

• Demonstrated production experience with VxLAN/EVPN datacenter fabrics (leaf‑spine architecture, BGP EVPN control plane).

• Demonstrated production experience with Palo Alto Networks firewalls, including Panorama and zone‑based security policy.

• Knowledge:

• Expert‑level understanding of BGP (iBGP/eBGP), OSPF, and MPLS in production environments.

• Strong understanding of datacenter networking concepts: VxLAN, EVPN, VPCs, and Spanning Tree.

• Familiarity with Linux operating systems and command‑line tooling.

• Skills:

• Proficiency in at least one scripting or programming language (Python preferred) for network automation tasks.

• Strong written and verbal communication skills; ability to produce clear technical documentation.

• Ability to work independently and lead project work with minimal supervision.

Bonus Points:

• Education:

• Industry certifications: CCIE (R&S or Data Center), JNCIE, PCNSE, or equivalent.

• Experience:

• Experience with Cisco ASR/NCS (IOS‑XR) and/or Juniper MX/SRX platforms.

• Experience with ACI, NSX, or other SDN/overlay controller platforms.

• Exposure to AI‑assisted network operations tooling or observability platforms

• Knowledge:

• Expert level datacenter fabric experience

• Skills:

• Experience with infrastructure‑as‑code practices (Ansible, Terraform, or similar).

• Familiarity with network source‑of‑truth platforms such as NetBox.

The Whole Person Promise:

• 100% company-paid Medical, Vision, & Dental coverage for you and your family with low deductibles and low out-of-pocket expenses.
• All new hires receive four weeks of PTO.
• PTO Embargo. When you take time off (of any kind!) you’re embargoed from working. Bandmates and managers are not allowed to interrupt your PTO – not even with email.
• Additional PTO can be earned throughout the year through volunteer hours and Bandwidth challenges.
• “Mahalo moments” program grants additional time off for life’s most important moments like graduations, buying a first home, getting married, wedding anniversaries (every five years), and the birth of a grandchild.
• 90‑Minute Workout Lunches and unlimited meetings with our very own nutritionist.

Applicant Privacy Notice