Senior Network Engineer

Company Description:At Lunavi, we believe in illuminating the path forward and helping our customers navigate what’s next. We are innovators who are combining the power of human ingenuity and technology to deliver unrivaled customer experience. We’re a trusted partner for companies looking to digitally transform their business, modernize business applications, solve traditional IT challenges, and extract ROI from technology. Our high performing teams, deep expertise, and proven processes help to propel businesses forward. Our core values: Be Great. Aspire to know more, do more, and realize your fullest potential. Keep reaching above and beyond to excel and exceed every expectation. Reimagine Everything. Continuously create value by pursuing what's next, what's possible. Deliver a new level of awesome through relentless curiosity. Ignite Passion. Share the very best of who you are in everything you do. Create a positive and uplifting environment that inspires others. Own It. Know that your contributions make a direct impact. Be the difference that leads to more successful experiences and outcomes. Job Description: The Lunavi Cloud Platform Senior Network Engineer will design, build, and operate the high-availability, two-layer Spine-and-Leaf network architecture that supports Lunavi managed network, cloud, and colocation services. As a carrier-grade network and managed service provider, Lunavi relies on this role to own the routing core, the multi-homed internet edge, and the multi-tenant customer services that run 24x7 across our data centers and customer sites.The candidate will act as the senior escalation point for network incidents, partner with the Cloud Platform and virtualization teams, and lead network architecture and automation initiatives. Must be able to quickly resolve complex customer issues, communicate clearly during outages, and mentor other engineers. Location for this position is preferred in the Front Range (Denver) or Cheyenne area, but remote is also an option for the right candidate Requirements Role and ResponsibilitiesDesign and evolve the IP Spine-Leaf network, including; BGP, ECMP, OSPF/IS-IS, and Overlays (VXLAN/EVPN) with carrier-grade reliability.Own internet edge strategy: multi-homed upstream transit from Tier 1/2 providers, settlement-free and paid peering, IXP presence, customer BGP sessions, route policy, and RPKI/ROV.Design and deliver managed customer services, including dedicated internet access, L2/L3VPN, managed firewall, and SD-WAN, with SLA-backed QoS and secure multi-tenant segmentation.Must exhibit excellent customer- facing communication, urgency, and passion for successful customer experience.Work with the team to maintain 100% network uptime by improving availability, resiliency, quality, and security while leading network technology projects and influencing the direction of engineering across the organization.Experience in NetOps tooling like Cloud Vision, Ansible, and/or languages including Python and PerlServe as the senior (L3) escalation point for network and customer-service incidents; lead root cause analysis, post-incident reviews, and implement improvements to eliminate interruptions.Plan and execute changes, upgrades, and migrations in a 24x7 environment with minimal customer impact.Monitor utilization and growth with NetFlow/IPFIX, SNMP, and streaming telemetry, and drive capacity upgrades before they are needed.Keep configurations under source control and move the team toward CI/CD-driven network changes.Write and maintain architecture standards, high- and low-level designs, runbooks, and documentation related to department responsibilities.Evaluate vendors, platforms, optics, and upstream transit and colocation contracts; contribute to budget and roadmap planning.Partner with sales engineering and service delivery on solution design, customer onboarding, and SLA reporting.Ensure compliance with company internal policies and customers’ policies.Assist in the development of engineers through mentoring, design reviews, and change reviews.Participate in rotating "on call" schedule with other members of the team. Core RequirementsBachelor's degree in computer science, Information Technology, or equivalent field experience preferred6+ years of network engineering experience, with at least 5 in a Telco,ISP, CLEC, or MSP/CSP environment delivering services to external customers preferredDeep knowledge of BGP: eBGP/iBGP,route reflectors, communities, upstream and customer route policy,multi-homed transit, and peering.Deep experience with ECMP, OSPF and/or IS-IS in large designs, including fast-convergence tuning.Data center fabric and overlay experience (EVPN-VXLAN, VMware NSX) alongside hypervisor networking.Production experience on carrier-class platforms such as Arista EOS (7500R/7800R), Juniper Junos (MX, PTX),Cisco IOS-XR (ASR 9000, NCS), or Nokia SR OS.Strong IPv6 design and dual-stack deployment experience.QoS design for multi-service networks (DiffServ, H-QoS, policing and shaping, CoS).Internet edge security: route filtering, IRR, RPKI/ROV, MANRS practices, and DDoS mitigation.Working knowledge of optical transport(DWDM, coherent 100G/400G optics) and how it maps to the IP layer.Knowledge implementing and supporting SNMP, RADIUS, TACACS+, Syslog, ACLs, VRFs, and next-gen firewalls (Palo Alto, Juniper SRX, Fortinet, Sophos).Scripting and automation with Python and Ansible; familiarity with CloudVision.Experience with network analysis tools and ability to analyze packet captures.Track record of leading major incidents and changes in a 24x7 MSP environment with customer SLAs, using ITIL-style incidents, change, and problem management.Expert communication skills, both verbal and written, including designs, runbooks, and incident reports that others can act on.Ability to lift 50 lbs. Preferred SkillsCCIE Service Provider, JNCIE-SP, Arista, ACE-L5+, or Nokia SRA certification.Experience with PCE/PCEP and SDN controllers (Cisco Crosswork, Juniper, Paragon/NorthStar).Hands-on MPLS for multi-tenant service delivery: LDP, RSVP-TE, L3VPN (MP-BGP, VPNv4/v6), and L2VPN (VPLS, VPWS).Carrier Ethernet OAM (CFM, Y.1731) and MEF service delivery.Azure networking: NSG, VPN, Azure Firewall, Web Application Firewall, ExpressRoute, Virtual WAN, and Front Door.Virtual network appliances and deployment within hyperscale providers such as Azure, AWS, and GCP.Telemetry and analytics tooling such as Kentik, Grafana, Prometheus, or ELK.NetDevOps practice: Git workflows, automated testing, and pipeline-driven deployment.10+ years’ experience with multiple certifications and proven experience delivering carrier networking services Here are just some of the things that we can offer you: Flexible Paid Time Off (YOU take the time you need.)8 Day Holiday PayPaid Volunteer DayEmployer Contributed 2 Tier Medical Plan OptionsEmployer Contributed Dental Plan100% Employer-Paid Vision Plan100% Employer-Paid Short-Term Disability Plan100% Employer-Paid $50,000 Life Insurance Plan including AD&DVoluntary Long-Term Disability PlanVoluntary Benefits including; Accident, Critical Illness, and Medical Bridge OptionsAdditional Supplemental Life Insurance Plan including Spouse and Children3% Employer Match 401k Retirement PlanLife Assistance and Wellness ProgramsGreen InitiativesTraining and Development ProgramsEmployee EventsWellnessAND MORE... Are you ready to join us? Click the Apply button and let's talk. Lunavi is an equal opportunity employer and will not discriminate against any individual, employee, or application for employment on the basis of race, color, marital status, religion, age, sex, sexual orientation, national origin, handicap, or any other legally protected status recognized by federal, state or local law.