Sr. IP Network Engineer

Who We Are:

What We Are Looking For:

The Sr. IP Network Engineer designs, operates, and continuously improves Bandwidth's global IP network infrastructure. This role owns critical functions across datacenter fabric, WAN routing, and firewall security — and drives the automation initiatives that keep the network reliable at scale. The ideal candidate brings deep hands-on expertise in VxLAN/EVPN datacenter architectures and Palo Alto firewall platforms, combined with a strong foundation in service provider routing protocols.

What You'll Do:

• Design and operate VxLAN/EVPN-based datacenter fabrics across multiple Points of Presence (PoPs), including leaf-spine topology, BGP EVPN control plane, and overlay/underlay integration.
• Manage and maintain Palo Alto firewall infrastructure, including zone-based policy design, Panorama administration, threat prevention, and security rule lifecycle management.
• Architect and maintain BGP-based WAN routing across Bandwidth's backbone network, including iBGP/eBGP policy, route manipulation, and prefix management.
• Troubleshoot complex, multi-layer network issues spanning switching, routing, and security infrastructure.
• Develop and maintain network automation tooling — including device provisioning, configuration management, and event-driven remediation — using Python, Ansible, or similar frameworks.
• Evaluate emerging network technologies and lead proof-of-concept efforts to drive platform improvements.
• Collaborate with cross-functional Engineering and Operations teams to deliver network changes and infrastructure projects.
• Mentor junior network engineers and provide technical leadership on complex projects.
• Participate in on-call rotation and perform scheduled after-hours maintenance as required.
• Contribute to network documentation, runbooks, and post-incident reviews (RFOs).
• Support vendor relationships and assist with hardware procurement evaluation.

What You Need:

• Education:   
  • Bachelor's degree in Computer Science, Network Engineering, or a related technical field; or equivalent work experience.
• Experience:  
  • 10+ years of hands-on experience in service provider network infrastructure roles.
  • Demonstrated production experience with VxLAN/EVPN datacenter fabrics (leaf-spine architecture, BGP EVPN control plane).
  • Demonstrated production experience with Palo Alto Networks firewalls, including Panorama and zone-based security policy.
• Knowledge:  
  • Expert-level understanding of BGP (iBGP/eBGP), OSPF, and MPLS in production environments.
  • Strong understanding of datacenter networking concepts: VxLAN, EVPN, VPCs, and Spanning Tree.
  • Familiarity with Linux operating systems and command-line tooling.
• Skills: 
  • Proficiency in at least one scripting or programming language (Python preferred) for network automation tasks.
  • Strong written and verbal communication skills; ability to produce clear technical documentation.
  • Ability to work independently and lead project work with minimal supervision.

Bonus Points:

• Education:
  • Industry certifications: CCIE (R&S or Data Center), JNCIE, PCNSE, or equivalent.
• Experience: 
  • Experience with Cisco ASR/NCS (IOS-XR) and/or Juniper MX/SRX platforms.
  • Experience with ACI, NSX, or other SDN/overlay controller platforms.
  • Exposure to AI-assisted network operations tooling or observability platforms
• Knowledge: 
  • Expert level datacenter fabric experience
• Skills: 
  • Experience with infrastructure-as-code practices (Ansible, Terraform, or similar).
  • Familiarity with network source-of-truth platforms such as NetBox.

The Whole Person Promise:

At Bandwidth, we’re pretty proud of our corporate culture, which is rooted in our “Whole Person Promise.” We promise all employees that they can have meaningful work AND a full life, and we provide a work environment geared toward enriching your body, mind, and spirit. How do we do that? Well…

• 100% company-paid Medical, Vision, & Dental coverage for you and your family with low deductibles and low out-of-pocket expenses.
• All new hires receive four weeks of PTO.
• PTO Embargo. When you take time off (of any kind!) you’re embargoed from working. Bandmates and managers are not allowed to interrupt your PTO – not even with email.
• Additional PTO can be earned throughout the year through volunteer hours and Bandwidth challenges.
• “Mahalo moments” program grants additional time off for life’s most important moments like graduations, buying a first home, getting married, wedding anniversaries (every five years), and the birth of a grandchild.
• 90-Minute Workout Lunches and unlimited meetings with our very own nutritionist.