Network Engineer - #4532

About the role

GRAIL is seeking a Network Engineer to join our Platform Engineering organization. This role is based in Durham, North Carolina (RTP) and requires regular on-site presence to support laboratory and data center infrastructure.

Responsibilities

• Design, implement, and support enterprise network infrastructure across campus, laboratory, data center, manufacturing, and AWS cloud environments.
• Deploy, maintain, and troubleshoot Juniper and Aruba switching and routing infrastructure, including Layer 2/Layer 3 networking, VLANs, routing protocols, high availability, and modern data center networking technologies.
• Configure, maintain, and optimize Palo Alto Networks firewalls, security policies, NAT, VPNs, GlobalProtect, URL filtering, and related security services.
• Design, implement, and support AWS networking services including VPCs, Transit Gateway, Route Tables, Security Groups, Network ACLs, Site-to-Site VPNs, Direct Connect integrations, and hybrid connectivity.
• Develop infrastructure automation using Python, Ansible, Terraform, PowerShell, or similar technologies to improve provisioning, configuration management, operational consistency, and compliance.
• Build and maintain network monitoring, alerting, dashboards, and operational visibility using New Relic and other enterprise monitoring platforms.
• Investigate and resolve complex routing, switching, firewall, VPN, cloud networking, DNS, DHCP, and connectivity issues across hybrid environments.
• Partner with Platform Engineering, Cloud Engineering, Security, Infrastructure, and application teams to support new infrastructure deployments, cloud migrations, and strategic platform initiatives.
• Participate in infrastructure lifecycle management, including hardware refreshes, software upgrades, patching, disaster recovery planning, and configuration standardization.
• Develop and maintain technical documentation, network diagrams, operational runbooks, and engineering standards.
• Participate in an on-call rotation supporting production infrastructure as required.
• Leverage modern AI-assisted engineering tools responsibly to improve troubleshooting, automation development, documentation, and operational efficiency.

Requirements

• 4+ years of experience designing, implementing, and supporting enterprise network infrastructure.
• 3+ years of hands-on experience with Juniper and/or Aruba enterprise networking platforms, including switching, routing, and network troubleshooting.
• 3+ years of experience managing Palo Alto Networks firewalls, including security policies, NAT, VPNs, GlobalProtect, and threat prevention.
• 2+ years of hands-on experience with AWS networking services, including VPCs, Transit Gateway, Route Tables, Security Groups, Network ACLs, Site-to-Site VPNs, and hybrid cloud networking.
• Experience supporting enterprise routing and switching technologies including BGP, OSPF, VLANs, STP, LACP, VRRP, and Layer 2/Layer 3 troubleshooting.
• Experience developing infrastructure automation using Python, Ansible, Terraform, PowerShell, or similar scripting and Infrastructure as Code tools.
• Experience implementing and supporting network monitoring and observability platforms such as New Relic, SolarWinds, Datadog or equivalent.
• Strong troubleshooting skills across networking, cloud connectivity, VPNs, firewalls, DNS, DHCP, enterprise infrastructure, and network security.
• Experience working in Linux and Windows enterprise environments.
• Bachelor's degree in Computer Science, Information Technology, Engineering, or equivalent practical experience.
• Willingness to participate in an on-call rotation supporting production infrastructure as required.

Preferred Qualifications

• Experience supporting hybrid cloud infrastructure across AWS and enterprise data centers.
• Experience with EVPN/VXLAN architectures and modern data center networking.
• Experience with AWS Direct Connect and hybrid networking architectures.
• Experience supporting Aruba CX switching platforms and Aruba Central.
• Experience managing enterprise VPN solutions including GlobalProtect.
• Experience implementing Infrastructure as Code using Terraform.
• Experience with Git-based version control and CI/CD pipelines for infrastructure automation.
• Experience supporting VMware vSphere environments and virtualization networking.
• Knowledge of DNS, DHCP, Active Directory, PKI, RADIUS, and enterprise authentication services.
• Experience supporting laboratory, biotechnology, healthcare, manufacturing, or regulated environments.
• Juniper (JNCIS/JNCIP), Aruba (ACSA/ACSP), Palo Alto (PCNSA/PCNSE), AWS Associate, or equivalent industry certifications.
• Strong written and verbal communication skills with the ability to collaborate across Platform Engineering, Cloud Engineering, Security, Infrastructure, and application teams.
• Experience mentoring junior engineers and driving operational improvements through automation and engineering best practices.
• Comfortable using modern AI-assisted engineering tools while applying sound engineering judgment and security best practices.