Sr. IP Network Engineer

What We Are Looking For

The Sr. IP Network Engineer designs, operates, and continuously improves Bandwidth's global IP network infrastructure. This role owns critical functions across datacenter fabric, WAN routing, and firewall security - and drives the automation initiatives that keep the network reliable at scale. The ideal candidate brings deep hands-on expertise in VxLAN/EVPN datacenter architectures and Palo Alto firewall platforms, combined with a strong foundation in service provider routing protocols.

What You'll Do

• Design and operate VxLAN/EVPN-based datacenter fabrics across multiple Points of Presence (PoPs), including leaf-spine topology, BGP EVPN control plane, and overlay/underlay integration.
• Manage and maintain Palo Alto firewall infrastructure, including zone-based policy design, Panorama administration, threat prevention, and security rule lifecycle management.
• Architect and maintain BGP-based WAN routing across Bandwidth's backbone network, including iBGP/eBGP policy, route manipulation, and prefix management.
• Troubleshoot complex, multi-layer network issues spanning switching, routing, and security infrastructure.
• Develop and maintain network automation tooling - including device provisioning, configuration management, and event-driven remediation - using Python, Ansible, or similar frameworks.
• Evaluate emerging network technologies and lead proof-of-concept efforts to drive platform improvements.
• Collaborate with cross-functional Engineering and Operations teams to deliver network changes and infrastructure projects.
• Mentor junior network engineers and provide technical leadership on complex projects.
• Participate in on-call rotation and perform scheduled after-hours maintenance as required.
• Contribute to network documentation, runbooks, and post-incident reviews (RFOs).
• Support vendor relationships and assist with hardware procurement evaluation.

What You Need

• Education:
• Bachelor's degree in Computer Science, Network Engineering, or a related technical field; or equivalent work experience.
• Experience:
• 10+ years of hands-on experience in service provider network infrastructure roles.
• Demonstrated production experience with VxLAN/EVPN datacenter fabrics (leaf-spine architecture, BGP EVPN control plane).
• Demonstrated production experience with Palo Alto Networks firewalls, including Panorama and zone-based security policy.
• Knowledge:
• Expert-level understanding of BGP (iBGP/eBGP), OSPF, and MPLS in production environments.
• Strong understanding of datacenter networking concepts: VxLAN, EVPN, VPCs, and Spanning Tree.
• Familiarity with Linux operating systems and command-line tooling.
• Skills:
• Proficiency in at least one scripting or programming language (Python preferred) for network automation tasks.
• Strong written and verbal communication skills; ability to produce clear technical documentation.
• Ability to work independently and lead project work with minimal supervision.

Bonus Points

• Education:
• Industry certifications: CCIE (R&S or Data Center), JNCIE, PCNSE, or equivalent.
• Experience:
• Experience with Cisco ASR/NCS (IOS-XR) and/or Juniper MX/SRX platforms.
• Experience with ACI, NSX, or other SDN/overlay controller platforms.
• Exposure to AI-assisted network operations tooling or observability platforms
• Knowledge:
• Expert level datacenter fabric experience
• Skills:
• Experience with infrastructure-as-code practices (Ansible, Terraform, or similar).
• Familiarity with network source-of-truth platforms such as NetBox.

The Whole Person Promise

• At Bandwidth, we're pretty proud of our corporate culture, which is rooted in our "Whole Person Promise."
• We promise all employees that they can have meaningful work AND a full life, and we provide a work environment geared toward enriching your body, mind, and spirit.
• How do we do that?
• Well…

• 100% company-paid Medical, Vision, & Dental coverage for you and your family with low deductibles and low out-of-pocket expenses.
• All new hires receive four weeks of PTO.
• PTO Embargo. When you take time off (of any kind!) you're embargoed from working. Bandmates and managers are not allowed to interrupt your PTO - not even with email.
• Additional PTO can be earned throughout the year through volunteer hours and Bandwidth challenges.
• "Mahalo moments" program grants additional time off for life's most important moments like graduations, buying a first home, getting married, wedding anniversaries (every five years), and the birth of a grandchild.
• 90-Minute Workout Lunches and unlimited meetings with our very own nutritionist.

Additional information

Are you excited about the position and its responsibilities, but not sure if you're 100% qualified? Do you feel you can work to help us crush the mission? If you answered 'yes' to both of these questions, we encourage you to apply! You won't want to miss the opportunity to be a part of the BAND.

Applicant Privacy Notice