Sr. Network Engineer (Hybrid)

Belk; Charlotte (NC); Hybrid; USD 110,000 - 170,000; Full time

Job summary

Belk is seeking a Senior Network Engineer to design, implement, and support the global network, including multi-cloud and on-premises ecosystems. You will lead high-level projects, ensure security and performance, and mentor junior staff.

The role emphasizes SASE/Zero Trust, firewall architecture, and IaC-driven automation, with hands-on experience across AWS, Azure, and GCP. Hybrid work arrangement with on-site days specified.

Qualifications

• Requires a Bachelor’s degree in computer science or related field or equivalent experience.
• 10+ years of relevant experience preferred.
• Experience in retail environments is a plus.
• Strong knowledge of Next-Generation firewalls and rule management.
• Experience with routing and switching, Cisco Nexus switches, and Nexus technology.
• Hands-on experience with Azure, AWS, and Google Cloud Platform in enterprise networks.
• Experience delivering large-scale network and security projects.

Responsibilities

• Provides leadership and architectural guidance to design, document, and enforce global network standards.
• Designs and maintains enterprise-grade firewall architectures (Palo Alto, Fortinet).
• Implements SASE and Zero Trust with Prisma Access (ZTNA).
• Administers Palo Alto firewalls in cloud and hybrid environments.
• Maintains high-availability data center networks using Cisco Nexus and routing protocols.
• Updates firewall rules, patch management, and security compliance.
• Manages secure multi-cloud interconnectivity and cloud-native network services.
• Configures network services across AWS, Azure, and GCP.
• Oversees content delivery and edge security with CloudFront.
• Develops IaC scripts (Terraform, Ansible, Python) to streamline operations.
• Performs RCA and advanced troubleshooting; engages vendors as needed.
• Supports 24/7 network operations across onshore-offshore teams.

Skills

Network architecture

Palo Alto firewalls

SASE & Zero Trust

Cloud networking (AWS/Azure/GCP)

Terraform/Ansible/Python

Cisco Nexus

Routing protocols (BGP/OSPF)

Documentation & runbooks

Education

Bachelor’s degree in computer science or related field

Tools

Terraform

Ansible

Python

AWS

Azure

GCP

Cisco Nexus

Job description

This is a hybrid position and is onsite Tuesday - Thursday.

The Senior Network Engineer takes responsibility for major designs, installation, configuration, implementation, and support of all aspects of the network environment, providing technical guidance and oversight and acting as a point of escalation and technical expert.

Essential Functions:

• Provides strategic leadership, technical expertise, and architectural advice to design, document, and enforce global network standards, policies, and procedures across all enterprise assets.
• Designs, implements, and optimizes enterprise-grade firewall architectures, specifically leveraging Palo Alto Networks and Fortinet to safeguard edge, data center, and perimeter security.
• Designs and implements Secure Access Service Edge (SASE) and Zero Trust frameworks, with deep technical expertise in Palo Alto Prisma Access (ZTNA).
• Administrate and maintain Palo alto virtual firewalls in AWS, Azure and GCP
• Designs, deploys, and maintains high-availability data center networks using Cisco Nexus and advanced routing protocols (BGP, OSPF)
• Administers and maintains enterprise firewall infrastructure (Palo Alto and Fortinet), ensuring rigorous patch management, rule base optimization, and compliance alignment.
• Implements and manages secure, high-performance hybrid network interconnectivity between on-premises datacenters and multi-cloud environments.
• Implement robust security measures to protect multi-cloud infrastructure, including cloud firewalls, and network identity/access controls.
• Configures and manages native and third-party network services across multi-cloud infrastructure, including Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP).
• Administers global content delivery and traffic routing architectures using Amazon CloudFront to optimize application performance, latency, and edge security.
• Evaluates and upgrades cloud-based network systems to continuously improve operational efficiency, performance, cost-effectiveness, and alignment with business requirements.
• Installs, configures, modernizes, and provides full lifecycle support for core network hardware, virtual appliances, and software systems.
• Conducts multi-level pre-production testing and validation prior to the release of new or upgraded network systems, products, or services.
• Develops automation scripts and Infrastructure as Code (IaC) programs (e.g., Terraform, Ansible, Python) to streamline manual network operations, deployment tasks, and configuration management.
• Analyzes network system performance and performs preventative maintenance to guarantee maximum uptime according to Operating Level Agreements (OLAs) and SLAs.
• Performs deep-dive root cause analysis (RCA), leads advanced troubleshooting for complex infrastructure problems, and implements permanent remediations.
• Manages technical escalations and coordinates with appropriate third-party vendors and carriers when necessary to resolve high-priority incidents.
• Navigates and leverages the intricacies of combined onshore-offshore support models to ensure seamless, 24/7 network operational coverage.
• Take full ownership and end-of-end responsibility for enterprise network installations, migrations, and deployment projects.
• Drafts, reviews, and maintains high-quality procedural documentation, network diagrams, and operational runbooks for the network support team.
• Demonstrates foundational knowledge of remote site connectivity, with a readiness to learn, configure, and support enterprise SD-WAN deployments as part of the broader network ecosystem.

Education & Experience:

• Bachelor’s degree in computer science or related field or equivalent combination of industry related professional experience and education
• 8-10 years of experience
• Experience with retail environments is preferred
• Working expertise with Next Generation firewall management and rule management
• Working expertise with routing and switching technologies - Deep knowledge of Cisco routing protocols and Nexus switches
• Working knowledge of security strategies and practices
• Working knowledge/experience with Azure, AWS and Google Cloud Platform
• Working knowledge in enterprise network environments
• Experience with large scale network and security project implementations

Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Belk will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa).