Network DevOps Engineer - W2 ONLY
InvestM Technology LLC · San Francisco, CA · 1 mo ago
On-siteEngineeringFull-time
About the role
The position is based in the San Francisco Bay Area and includes participation in an after-hours on-call rotation.
Responsibilities
- Design and build automation that performs network software upgrades, configuration changes, compliance checks, and remediation across on-premises and Azure environments.
- Develop and maintain Python and Terraform codebases that provision, validate, and standardize network configurations, with all code version-controlled in Azure DevOps Repos.
- Build and operate CI/CD pipelines in Azure DevOps that test, validate, and deploy network changes, including automated pre- and post-change checks and rollback workflows.
- Leverage AI development tools, including Claude Code, to generate, refactor, test, and document automation code and operational runbooks.
- Partner with existing network engineers to understand current operational workflows, translate them into automated, code-based processes, and support the team's adoption of new tooling.
- Automate against vendor platforms and APIs, including Cisco Catalyst Center, Cisco Nexus Dashboard, Cisco SD-WAN vManage, Azure Resource Manager, F5, ThousandEyes, and Forward Networks.
- Configure, maintain, and troubleshoot Cisco routing, switching, SD-WAN, firewall (Firepower/FTD), wireless, and F5 load balancing infrastructure across branch and data center sites.
- Deploy and manage ThousandEyes agents and tests to provide end-to-end visibility into WAN, internet, and third-party connectivity, and integrate results into alerting and automation workflows.
- Integrate Forward Networks verification into change workflows for pre-change validation, path analysis, and post-change compliance checks.
- Serve as a tier-2 escalation point for network incidents, performing root cause analysis and driving issues to resolution.
- Execute changes through established change management processes and maintain network documentation, diagrams, and IPAM records.
Requirements
- Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent practical experience.
- 5-10 years of hands-on enterprise DevOps Engineering experience, including recent experience in a network automation or NetDevOps role.
- Production experience with Versa or Cisco SD-WAN, Cisco firewalls (Firepower or FTD), and Cisco wireless (Catalyst 9800 or AireOS controllers).
- Experience with Azure networking, including Virtual Networks, ExpressRoute, Virtual WAN, and Azure Firewall.
- Strong Python development skills, including automating network operations through REST APIs on vendor controllers such as Catalyst Center, Nexus Dashboard, vManage, Azure Resource Manager, and F5.
- Hands-on experience with Azure DevOps, including Repos and YAML Pipelines, to build and run CI/CD for infrastructure changes.
- Experience leveraging AI tools to accelerate productivity, including regular use of AI coding assistants such as Claude Code or GitHub Copilot, with sound judgment about when output requires verification.
- Experience with monitoring and assurance platforms such as ThousandEyes, Cisco Catalyst Center, Cisco Nexus Dashboard, and Forward Networks.
- Working knowledge of Forescout or a comparable network access control platform (Cisco ISE, Aruba ClearPass).
- Strong interpersonal and collaboration skills, with the ability to work closely with network engineers to translate established workflows into code and build support for automation across the team.
- Excellent analytical, documentation, and communication skills.
Qualifications
- Experience building AIOps pipelines, Model Context Protocol (MCP) integrations, or LLM-assisted workflows for network or infrastructure operations.
- Experience working in ITIL-aligned environments with formal change and incident management.