Sr. IP Network Engineer

Bandwidth Inc.; Raleigh (NC); On-site; USD 180,000 - 250,000; Full time

Benefits offered by this job

Medical, Vision, & Dental coverage for

4 weeks PTO

PTO Embargo policy

Mahalo moments program

Job summary

Bandwidth is seeking a Sr. IP Network Engineer to design, operate, and improve its global IP network infrastructure. You will own datacenter fabrics, WAN routing, and firewall security, driving automation to keep the network reliable at scale.

The ideal candidate has hands-on VxLAN/EVPN and Palo Alto expertise, plus strong skills in BGP, Linux, and network programming to deliver scalable, automated solutions across PoPs.

Qualifications

• Bachelor's degree in Computer Science, Network Engineering, or related field.
• 10+ years of hands-on experience in service provider network infrastructure roles.
• Deep hands-on experience with VxLAN/EVPN datacenter fabrics and Palo Alto firewalls (Panorama).

Responsibilities

• Design and operate VxLAN/EVPN-based datacenter fabrics across PoPs (leaf-spine, BGP EVPN).
• Manage and maintain Palo Alto firewall infrastructure, including Panorama and security policies.
• Architect and maintain BGP-based WAN routing across Bandwidth's backbone network.
• Troubleshoot complex network issues spanning switching, routing, and security.
• Develop and maintain network automation tooling using Python, Ansible, or similar frameworks.
• Evaluate new technologies and lead proof-of-concept efforts.
• Collaborate with Engineering and Operations to deliver network changes.
• Mentor junior network engineers and provide technical leadership.
• Participate in on-call rotation and after-hours maintenance as required.
• Contribute to network documentation, runbooks, and post-incident reviews.
• Support vendor relationships and hardware procurement evaluation.

Skills

VxLAN/EVPN

Palo Alto firewall

BGP routing

Network automation

Python

Ansible

Terraform

Panorama

Linux scripting

Education

Bachelor's degree in Computer Science or Network Engineering

Tools

Panorama

NetBox

Ansible

Terraform

Job description

At Bandwidth, we shape how the world connects. We're the global communications software company and Tier 1 network operator with global reach. The voice, messaging, and emergency services infrastructure behind the brands and apps you use every day.

Because we own the network we build on, the problems you'll solve here are bigger, more complex, and more impactful. And as communications shifts to AI, we're the infrastructure layer making it possible.

We call ourselves BANDmates because building something this big takes collaboration, different perspectives, and the freedom to bring your authentic self to the table.

We're experts who speak like humans. Ready to build what's next? #JoinTheBand

What We Are Looking For:

The Sr. IP Network Engineerdesigns, operates, and continuously improves Bandwidth's global IP network infrastructure. This role owns critical functions across datacenter fabric, WAN routing, and firewall security — and drives the automation initiatives that keep the network reliable at scale. The ideal candidate brings deep hands-on expertise in VxLAN/EVPN datacenter architectures and Palo Alto firewall platforms, combined with a strong foundation in service provider routing protocols.

What You'll Do:

• Design and operate VxLAN/EVPN-based datacenter fabrics across multiple Points of Presence (PoPs), including leaf-spine topology, BGP EVPN control plane, and overlay/underlay integration.
• Manage and maintain Palo Alto firewall infrastructure, including zone-based policy design, Panorama administration, threat prevention, and security rule lifecycle management.
• Architect and maintain BGP-based WAN routing across Bandwidth's backbone network, including iBGP/eBGP policy, route manipulation, and prefix management.
• Troubleshoot complex, multi-layer network issues spanning switching, routing, and security infrastructure.
• Develop and maintain network automation tooling — including device provisioning, configuration management, and event-driven remediation — using Python, Ansible, or similar frameworks.
• Evaluate emerging network technologies and lead proof-of-concept efforts to drive platform improvements.
• Collaborate with cross-functional Engineering and Operations teams to deliver network changes and infrastructure projects.
• Mentor junior network engineers and provide technical leadership on complex projects.
• Participate in on-call rotation and perform scheduled after-hours maintenance as required.
• Contribute to network documentation, runbooks, and post-incident reviews (RFOs).
• Support vendor relationships and assist with hardware procurement evaluation.

What You Need:

• Education:
  • Bachelor's degree in Computer Science, Network Engineering, or a related technical field; or equivalent work experience.
• Experience:
  • 10+ years of hands-on experience in service provider network infrastructure roles.
  • Demonstrated production experience with VxLAN/EVPN datacenter fabrics (leaf-spine architecture, BGP EVPN control plane).
  • Demonstrated production experience with Palo Alto Networks firewalls, including Panorama and zone-based security policy.
• Knowledge:
  • Expert-level understanding of BGP (iBGP/eBGP), OSPF, and MPLS in production environments.
  • Strong understanding of datacenter networking concepts: VxLAN, EVPN, VPCs, and Spanning Tree.
  • Familiarity with Linux operating systems and command-line tooling.
• Skills:
  • Proficiency in at least one scripting or programming language (Python preferred) for network automation tasks.
  • Strong written and verbal communication skills; ability to produce clear technical documentation.
  • Ability to work independently and lead project work with minimal supervision.

Bonus Points:

• Education:
  • Industry certifications: CCIE (R&S or Data Center), JNCIE, PCNSE, or equivalent.
• Experience:
  • Experience with Cisco ASR/NCS (IOS-XR) and/or Juniper MX/SRX platforms.
  • Experience with ACI, NSX, or other SDN/overlay controller platforms.
  • Exposure to AI-assisted network operations tooling or observability platforms
• Knowledge:
  • Expert level datacenter fabric experience
• Skills:
  • Experience with infrastructure-as-code practices (Ansible, Terraform, or similar).
  • Familiarity with network source-of-truth platforms such as NetBox.

The Whole Person Promise:

At Bandwidth, we’re pretty proud of our corporate culture, which is rooted in our “Whole Person Promise.” We promise all employees that they can have meaningful work AND a full life, and we provide a work environment geared toward enriching your body, mind, and spirit. How do we do that? Well…

• 100% company-paid Medical, Vision, & Dental coverage for you and your family with low deductibles and low out-of-pocket expenses.
• All new hires receive four weeks of PTO.
• PTO Embargo. When you take time off (of any kind!) you’re embargoed from working. Bandmates and managers are not allowed to interrupt your PTO – not even with email.
• Additional PTO can be earned throughout the year through volunteer hours and Bandwidth challenges.
• “Mahalo moments” program grants additional time off for life’s most important moments like graduations, buying a first home, getting married, wedding anniversaries (every five years), and the birth of a grandchild.
• 90-Minute Workout Lunches and unlimited meetings with our very own nutritionist.