Senior Network Engineer

About the role

The Senior Network Engineer is the primary technical owner for our enterprise-wide network, bridging the gap between our physical retail footprint and our cloud presence. This role is responsible for the design, security, and continuous improvement of infrastructure across Google Cloud (GCP), Microsoft Azure, and our on-premise locations. As a leader within the NetDevOps team, you will drive the transition from manual configuration to Infrastructure as Code (IaC).

Responsibilities

• Platform Ownership: Serve as the Primary Owner for core platforms: Palo Alto Firewalls, Cisco Meraki (SD-WAN), and Cisco Route/Switch.
• Cloud & IaC Requirement: Act as the primary lead for Google Cloud (GCP) and Azure network services. Responsibility includes managing GitHub and Terraform repositories to deploy and maintain network code.
• Infrastructure Design: Architect and deploy enterprise-level network components for Retail Stores and Fulfillment Centers, focusing on ensuring 5-9’s uptime for POS and critical operations.
• Security & Compliance: Maintain the security perimeter on Palo Alto Firewalls, performing quarterly ruleset audits and ensuring PCI-DSS compliance across the retail environment.
• Automation Strategy: Build and maintain Ansible playbooks to automate firmware updates, configuration backups, and repetitive operational tasks.
• Observability: Own the Zabbix monitoring platform; ensure "No alert without an owner" by managing templates, integrations, and performance tuning.
• Documentation & "Source of Truth": Maintain NetBox as the single source of truth for the network. Ensure all diagrams (Lucidchart) and runbooks (Notion) are updated within a 3-5 business day SLO.
• Incident Leadership: Lead Sev1/Sev2 incident response and coordinate Post-Incident Reviews (PIRs) within 3 business days of resolution.
• Governance: Actively participate in the Change Advisory Board (CAB) to discuss, and review major infrastructure changes.

Requirements

• Experience: 7+ years of relevant work experience in network engineering.
• Technical Requirement: Hands-on professional experience with Google Cloud (GCP) and Terraform (IaC) is required.
• Required Certification: CCNA or similar.
• Education: 4-year degree is preferred.
• Network Stack: Expertise in Palo Alto (Panorama), Cisco Meraki (MX/MR/MS), and classic Cisco IOS/NX/OS.
• Automation: High proficiency in Terraform and GitHub; experience with Ansible is a significant plus.
• Protocols: Advanced knowledge of BGP, OSPF, VLANs, and network segmentation.
• Tooling: Familiarity with NetBox, Unimus, and Zabbix.
• Communication: Ability to provide tier-three support and mentorship to junior engineering and support staff.
• Authorization to work in the United States without sponsorship.

Qualifications

• Leading Self: Inspiring Trust Adaptability Mature Confidence Career and Self Development

Skills

• Leading Self: Inspiring Trust Adaptability Mature Confidence Career and Self Development

Benefits

• Benefits and perks may have eligibility requirements and are subject to change.
• The responsibilities outlined in this position description are a guideline for the general duties of the position and are not exhaustive of all duties inherent in the job.
• Duluth Trading Company is an Equal Opportunity Employer.
• Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions.