Sr. Network Engineer and SRE

TechDigital Group; Chicago (IL); On-site; USD 140,000 - 180,000; Full time

Job summary

TechDigital Group is seeking an IRE Network Engineer to design, implement, and operate resilient, secure network infrastructure across on-prem, private cloud, AWS, and Azure in a demanding enterprise setting.

You will automate provisioning with Terraform, develop scripts, and lead segmentation initiatives. You’ll work with security and ops teams on recovery networks and comprehensive observability to ensure performance and resilience.

Qualifications

• Bachelor's degree or equivalent experience in CS/IT/Engineering.
• 8+ years enterprise network engineering experience.
• 5+ years supporting hybrid cloud networking.
• 3+ years Terraform Infrastructure as Code experience.
• Strong experience with Python, PowerShell, or Bash scripting.
• Extensive experience with enterprise routing and switching.
• Experience implementing software-defined networking (SDN).
• Hands-on experience designing network isolation and secure segmented environments.
• Experience implementing micro-segmentation in enterprise environments.
• Strong understanding of Zero Trust networking principles.
• Experience supporting mission-critical enterprise platforms.

Responsibilities

• Design, implement, and support enterprise network infrastructure across on-premises data centers, private clouds, AWS and Azure.
• Engineer resilient Layer 2/Layer 3 architectures including routing, switching, BGP, OSPF, VXLAN/EVPN, SDN.
• Lead IaC with Terraform; build modular deployment patterns and automate provisioning.
• Develop automation in Python, PowerShell, Bash and REST APIs; integrate into CI/CD pipelines.
• Design network isolation strategies and secure enclave environments (IRE) and recovery networks.
• Implement micro-segmentation using VMware NSX, Illumio, Cisco Secure Workload and cloud security groups.
• Engineer cloud networking (VPCs, Transit Gateway, Direct Connect; Azure VNets, ExpressRoute, NSGs, Load Balancer).
• Collaborate on security engineering: Zero Trust, NAC, secure remote connectivity, firewalls, IDS/IPS, DDoS protection, encryption in transit.
• Support resiliency engineering with high availability, disaster recovery, active-active/passive architectures and automated failover.
• Build observability with ThousandEyes, SolarWinds, Dynatrace, Splunk, Grafana, Prometheus; dashboards and alerts.

Skills

Enterprise networking

Hybrid cloud

Terraform IaC

Python scripting

PowerShell scripting

Bash scripting

SDN

Network isolation

Micro-segmentation

Zero Trust

Disaster Recovery

Secure environments

Routing & Switching

Education

Bachelor's degree or equivalent

Tools

Terraform

VMware NSX

Illumio

Cisco Secure Workload

Cloud security groups

Azure NSGs

AWS Security Groups

Network ACLs

Job description

Job Description: IRE Network Engineer Position Title: IRE Network Engineer

Key Responsibilities

Enterprise Network Engineering

• Design, implement, and support highly available enterprise network infrastructure across:
  • On-premises data centers
  • Private cloud platforms
  • AWS
  • Microsoft Azure
• Engineer resilient Layer 2/Layer 3 network architectures including:
  • Routing
  • Switching
  • BGP
  • OSPF
  • VXLAN/EVPN
  • SDN technologies
• Design network architectures supporting critical enterprise resiliency and disaster recovery.

Infrastructure Automation

• Build Infrastructure as Code (IaC) solutions using Terraform.
• Develop reusable Terraform modules and standardized deployment patterns.
• Automate network provisioning and configuration management.
• Integrate automation into Git-based CI/CD pipelines.
• Eliminate manual networking activities through automation-first engineering.

Scripting & Automation

Develop automation using:

• Python
• PowerShell
• Bash
• REST APIs

Automate:

• Network provisioning
• Configuration validation
• Compliance verification
• Drift detection
• Operational reporting
• Health monitoring

Network Isolation & Segmentation

Lead enterprise initiatives involving:

• Network isolation strategies
• Secure enclave design
• Air-gapped environments
• Isolated Recovery Environments (IRE)
• Secure management networks
• Recovery network architectures

Design secure separation between:

• Production
• Non-production
• Recovery environments
• Cyber Recovery environments
• Management networks

Micro-Segmentation

Design and implement enterprise micro-segmentation utilizing technologies such as:

• VMware NSX
• Illumio
• Cisco Secure Workload (formerly Tetration)
• Cloud-native security groups
• Azure Network Security Groups
• AWS Security Groups
• Network ACLs

Responsibilities include:

• East-West traffic control
• Zero Trust network architectures
• Least-privilege network access
• Dynamic policy enforcement
• Application dependency mapping

Cloud Networking

Engineer networking solutions across:

• AWS
  • VPCs
  • Transit Gateway
  • Direct Connect
  • Route Tables
  • PrivateLink
  • Network Firewall
• Azure
  • VNets
  • ExpressRoute
  • Virtual WAN
  • Azure Firewall
  • NSGs
  • Application Gateway
  • Azure Load Balancer

Security Engineering

Collaborate with Cyber Security to implement:

• Zero Trust networking
• Network Access Control
• Secure remote connectivity
• Firewall architecture
• IDS/IPS
• DDoS protection
• Secure DNS
• Certificate management
• Encryption in transit

Resiliency Engineering

Design networking solutions supporting:

• High Availability
• Disaster Recovery
• Active-Active architectures
• Active-Passive architectures
• Multi-region cloud deployments
• Automated failover
• Resilient routing
• Critical application recovery

Monitoring & Observability

Implement enterprise network observability using tools such as:

• ThousandEyes
• SolarWinds
• Dynatrace
• Splunk
• Grafana
• Prometheus
• Cloud-native monitoring solutions

Develop dashboards, KPIs, and automated alerting for proactive network operations.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or equivalent experience.
• 8+ years of enterprise network engineering experience.
• 5+ years supporting hybrid cloud networking.
• 3+ years of Terraform Infrastructure as Code experience.
• Strong experience with Python, PowerShell, or Bash scripting.
• Extensive experience with enterprise routing and switching.
• Experience implementing software-defined networking (SDN).
• Hands-on experience designing network isolation and secure segmented environments.
• Experience implementing micro-segmentation in enterprise environments.
• Strong understanding of Zero Trust networking principles.
• Experience supporting mission-critical enterprise platforms.

Preferred Qualifications

• Experience in large financial institutions or other highly regulated industries.
• Experience supporting hybrid multi-cloud environments.
• Knowledge of Kubernetes/OpenShift networking.
• Experience with VMware NSX or Cisco ACI.
• Familiarity with GitHub, GitLab, or Azure DevOps pipelines.
• Experience with disaster recovery and cyber recovery networking.
• Knowledge of Infrastructure as Code governance and policy-as-code.
• Experience with immutable infrastructure and resilient network architectures.

Preferred Certifications

• CCNP Enterprise or CCIE
• AWS Advanced Networking – Specialty
• Microsoft Azure Network Engineer Associate (AZ-700)
• HashiCorp Terraform Associate
• VMware VCP-NV (NSX)
• Palo Alto PCNSE
• CISSP (preferred)

Key Competencies

• Enterprise network architecture
• Hybrid cloud networking
• Infrastructure as Code (Terraform)
• Python, PowerShell, and Bash scripting
• Network automation
• Zero Trust architecture
• Network isolation
• Micro-segmentation
• Cloud networking (AWS & Azure)
• SDN technologies
• Enterprise resiliency
• Disaster Recovery networking
• Cyber Recovery networking
• Infrastructure security
• CI/CD integration
• Cross-functional leadership
• Excellent communication and executive presentation skills