| Location | Chicago, IL |
Sr. Network Engineer and SRE
####
Hybrid - Chicago, IL
Cog Kit
BGV employment history must be cleared to start
Job Description: IRE Network Engineer
Position Title:
IRE Network Engineer
We are seeking a highly skilled Senior Network Engineer to lead the design, automation, and modernization of enterprise network infrastructure across hybrid environments. This role is responsible for building highly resilient, secure, software-defined network architectures spanning on-premises data centers, private cloud, and public cloud platforms.
The ideal candidate possesses deep expertise in network engineering, Infrastructure as Code (Terraform), scripting, network isolation, micro-segmentation, and cloud networking. This individual will partner closely with Cloud Engineering, Cybersecurity, Infrastructure, SRE, and Application teams to deliver secure, scalable, and automated networking solutions aligned with Zero Trust principles.
________________________________________
Key Responsibilities
Enterprise Network Engineering
Design, implement, and support highly available enterprise network infrastructure across:
o On-premises data centers
o Private cloud platforms
o AWS
o Microsoft Azure
Engineer resilient Layer 2/Layer 3 network architectures including:
o Routing
o Switching
o BGP
o OSPF
o VXLAN/EVPN
o SDN technologies
Design network architectures supporting critical enterprise resiliency and disaster recovery.
________________________________________
Infrastructure Automation
Build Infrastructure as Code (IaC) solutions using Terraform.
Develop reusable Terraform modules and standardized deployment patterns.
Automate network provisioning and configuration management.
Integrate automation into Git-based CI/CD pipelines.
Eliminate manual networking activities through automation-first engineering.
________________________________________
Scripting & Automation
Develop automation using:
Python
PowerShell
Bash
REST APIs
Automate:
Network provisioning
Configuration validation
Compliance verification
Drift detection
Operational reporting
Health monitoring
________________________________________
Network Isolation & Segmentation
Lead enterprise initiatives involving:
Network isolation strategies
Secure enclave design
Air-gapped environments
Isolated Recovery Environments (IRE)
Secure management networks
Recovery network architectures
Design secure separation between:
Production
Non-production
Recovery environments
Cyber Recovery environments
Management networks
________________________________________
Micro-Segmentation
Design and implement enterprise micro-segmentation utilizing technologies such as:
VMware NSX
Illumio
Cisco Secure Workload (formerly Tetration)
Cloud-native security groups
Azure Network Security Groups
AWS Security Groups
Network ACLs
Responsibilities include:
East-West traffic control
Zero Trust network architectures
Least-privilege network access
Dynamic policy enforcement
Application dependency mapping
________________________________________
Cloud Networking
Engineer networking solutions across:
AWS
VPCs
Transit Gateway
Direct Connect
Route Tables
PrivateLink
Network Firewall
Azure
VNets
ExpressRoute
Virtual WAN
Azure Firewall
NSGs
Application Gateway
Azure Load Balancer
________________________________________
Security Engineering
Collaborate with Cyber Security to implement:
Zero Trust networking
Network Access Control
Secure remote connectivity
Firewall architecture
IDS/IPS
DDoS protection
Secure DNS
Certificate management
Encryption in transit
________________________________________
Resiliency Engineering
Design networking solutions supporting:
High Availability
Disaster Recovery
Active-Active architectures
Active-Passive architectures
Multi-region cloud deployments
Automated failover
Resilient routing
Critical application recovery
________________________________________
Monitoring & Observability
Implement enterprise network observability using tools such as:
ThousandEyes
SolarWinds
Dynatrace
Splunk
Grafana
Prometheus
Cloud-native monitoring solutions
Develop dashboards, KPIs, and automated alerting for proactive network operations.
________________________________________
Required Qualifications
Bachelor s degree in Computer Science, Information Technology, Engineering, or equivalent experience.
8+ years of enterprise network engineering experience.
5+ years supporting hybrid cloud networking.
3+ years of Terraform Infrastructure as Code experience.
Strong experience with Python, PowerShell, or Bash scripting.
Extensive experience with enterprise routing and switching.
Experience implementing software-defined networking (SDN).
Hands-on experience designing network isolation and secure segmented environments.
Experience implementing micro-segmentation in enterprise environments.
Strong understanding of Zero Trust networking principles.
Experience supporting mission-critical enterprise platforms.
________________________________________
Preferred Qualifications
Experience in large financial institutions or other highly regulated industries.
Experience supporting hybrid multi-cloud environments.
Knowledge of Kubernetes/OpenShift networking.
Experience with VMware NSX or Cisco ACI.
Familiarity with GitHub, GitLab, or Azure DevOps pipelines.
Experience with disaster recovery and cyber recovery networking.
Knowledge of Infrastructure as Code governance and policy-as-code.
Experience with immutable infrastructure and resilient network architectures.
________________________________________
Preferred Certifications
CCNP Enterprise or CCIE
AWS Advanced Networking Specialty
Microsoft Azure Network Engineer Associate (AZ-700)
HashiCorp Terraform Associate
VMware VCP-NV (NSX)
Palo Alto PCNSE
CISSP (preferred)
________________________________________
Key Competencies
Enterprise network architecture
Hybrid cloud networking
Infrastructure as Code (Terraform)
Python, PowerShell, and Bash scripting
Network automation
Zero Trust architecture
Network isolation
Micro-segmentation
Cloud networking (AWS & Azure)
SDN technologies
Enterprise resiliency
Disaster Recovery networking
Cyber Recovery networking
Infrastructure security
CI/CD integration
Cross-functional leadership
Excellent communication and executive presentation skills