Senior Network Engineer

Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology. By bringing the expertise, technology, and business model of the 21st century’s most innovative companies to the defense industry, Anduril is changing how military systems are designed, built and sold. Anduril’s family of systems is powered by Lattice OS, an AI-powered operating system that turns thousands of data streams into a realtime, 3D command and control center. As the world enters an era of strategic competition, Anduril is committed to bringing cutting-edge autonomy, AI, computer vision, sensor fusion, and networking technology to the military in months, not years.ABOUT THE ROLEWe are seeking a Senior Network Infrastructure Engineer to join our Core Network Engineering team. You will be joining an established, collaborative group of four engineers (1 Staff Engineer, 1 Senior Network Engineer, 1 Dedicated Wireless/RF Engineer, and 1 Network Engineer). In this role, you will be a pillar for our core routing, switching, WAN/backbone transport, multi-cloud interconnects, and edge security systems. Rather than building automation frameworks from scratch, you will partner closely with our dedicated Senior Network Automation Engineer to identify programmatic bottlenecks, standardize configurations, and integrate our multi-vendor ecosystem into our automation pipelines. You will be instrumental in consulting directly with internal business lines—spanning hardware engineering, software development, advanced manufacturing, and flight-test operations—to translate unconventional technical constraints into robust, secure, and multi-tenant network designs. Additionally, you will own the delivery of high-capacity carrier transport (wave circuits, dark fiber), provision multi-cloud networking (AWS, Azure, GCP), elevate operational observability, mentor junior engineers, and serve as an escalation point for complex Tier-3 network issues.WHAT YOU’LL DODesign, scale, and maintain resilient campus, datacenter, and field-test networks utilizing both traditional three-tier and EVPN-VXLAN fabric designs across Arista (EOS) and Cisco (Catalyst/Nexus) platforms.Architect, scale, and maintain our corporate and datacenter WAN backbone—owning carrier circuit delivery, capacity planning, and turn-up for optical waves, dark fiber, and DIA across colocation and telecom providers.Design, provision, and maintain resilient hybrid-cloud transit networks across AWS, Azure, and GCP. Implement and manage dedicated interconnects (AWS Direct Connect, Azure ExpressRoute, Google Cloud Interconnect), Transit Gateways/VNet Hubs, dynamic BGP peering, and cloud-native routing architectures.Develop scalable network standards, reference architectures, and implementation patterns.Participate in architecture reviews and provide technical direction for complex network initiatives.Partner with our Senior Network Automation Engineer to drive Network-as-Code workflows—leveraging your foundational knowledge of Python, Nornir, and Jinja2 to define data models, draft templates, and shape API integrations.Partner with our dedicated Wireless/RF Engineer to design, deploy, and maintain robust campus-wide and field Wi-Fi deployments leveraging Aruba and Juniper Mist platforms, focusing on enterprise 802.1X/EAP-TLS authentication and client performance optimization.Implement, audit, and manage Layer 3–7 security policies, microsegmentation strategies, and site-to-site IPsec tunnels utilizing Palo Alto Networks NGFWs managed globally via Panorama.Elevate our telemetry stack beyond traditional SNMP polling. Implement deep-visibility tooling, flow analysis, and streaming telemetry dashboards (Grafana, Prometheus, Syslog) to proactively detect degradation, reduce MTTR, and improve alerting fidelity.Act as a final point of technical escalation for critical, intermittent, or high-blast-radius network anomalies. Lead rigorous post-mortem reviews and participate in a shared, multi-engineer Tier-3 on-call rotation.Actively support, coach, and level-up junior systems administrators and network engineers across the broader IT and Infrastructure organizations through runbook authoring, architectural reviews, and pairing sessions.REQUIRED QUALIFICATIONS8+ years of hands-on experience designing, scaling, and maintaining complex multi-vendor enterprise, backbone, and campus production networks.Advanced Routing, Switching & Multi-Tenancy:Deep operational mastery of BGP (path selection, community manipulation, convergence optimization) and OSPF.Demonstrated production experience deploying and troubleshooting EVPN-VXLAN fabrics.Proven experience designing multi-tenant network architectures (VRFs, dynamic segmentation, macro- and micro-segmentation).Expert-level packet analysis skills (tcpdump, Wireshark) for diagnosing subtle transit failures, MTU/fragmentation mismatches, and asymmetric routing.Experience working directly with carriers and telecom providers to scope, order, cross-connect, turn up, and test high-bandwidth transport circuits (10G/100G Waves, dark fiber, DIAs).Proven track record provisioning and troubleshooting cloud-native networking components and dedicated connectivity (AWS Direct Connect, Azure ExpressRoute, GCP Cloud Interconnect, VPC/VNet peering, Transit Gateways).Automation Fluency & Collaboration:A strong programmatic mindset with the ability to read, review, and write foundational Python.Working familiarity with automation ecosystems (Nornir, Jinja2, Netmiko) and REST APIs sufficient to collaborate effectively with dedicated automation software engineers.Comfort with Git workflows for managing configuration versions and operational changes.Multi-Vendor Hardware Mastery: Expert-level configuration, architecture, and troubleshooting experience across:Arista Networks: EOS, CloudVision (CVP), modern spine-and-leaf designs.Cisco Systems: Catalyst 9k series (IOS-XE) and Nexus switches (NX-OS).Palo Alto Networks: NGFW appliances, Panorama, App-ID, User-ID, and GlobalProtect.Enterprise Wireless: (Juniper Mist & Aruba) Mist Cloud, Aruba AirWave/Conductor, ClearPass/RADIUS integration, dynamic packet captures, and high-density 802.1X designs.High-Touch Cross-Functional Communication: Exceptional ability to translate non-standard business and physical engineering requirements into pragmatic, resilient network architectures.Operational Excellence: Willingness to support a weekly Tier-3 on-call rotation and travel periodically to remote field sites, test facilities, or manufacturing sites when hands-on senior engineering is required.Eligible to obtain and maintain an active U.S. Secret security clearancePREFERRED QUALIFICATIONSSenior or Expert-level industry certifications (CCNP/CCIE, JNCIP/JNCIE, PCNSE, or Arista ACE).Certifications in public cloud networking (e.g., AWS Certified Advanced Networking - Specialty, Azure Network Engineer Associate).Experience operating within regulated or compliance-driven environments (e.g., ITAR, EAR, NIST 800-171, CMMC).Experience with Network Source-of-Truth platforms (NetBox, Nautobot).Hands-on experience with modern observability platforms (Telegraf, InfluxDB, Prometheus, Grafana, OpenConfig/gNMI).US Salary Range$146,000—$194,000 USDThe salary range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. Highly competitive equity grants are included in the majority of full time offers; and are considered part of Anduril's total compensation package. Additionally, Anduril offers top-tier benefits for full-time employees, including: BenefitsAt Anduril, we invest in our people. Our comprehensive, competitive benefits package (available at little to no cost to employees) ensures you’re supported in health, recovery, and whatever comes next. For more information, Explore Our Benefits.Protecting Yourself from Recruitment ScamsAnduril is committed to maintaining the integrity of our Talent acquisition process and the security of our candidates. We've observed a rise in sophisticated phishing and fraudulent schemes where individuals impersonate Anduril representatives, luring job seekers with false interviews or job offers. These scammers often attempt to extract payment or sensitive personal information.To ensure your safety and help you navigate your job search with confidence, please keep the following critical points in mind:No Financial Requests: Anduril will never solicit payment or demand personal financial details (such as banking information, credit card numbers, or social security numbers) at any stage of our hiring process. Our legitimate recruitment is entirely free for candidates.Please always verify communications:Direct from Anduril: If you receive an email from one of our recruiters, it will only come from an @anduril.com address.Via Agency Partner: If contacted by a recruiting agency for an Anduril role, their email will clearly identify their agency. If you suspect any suspicious activity, please verify the agency's authenticity by reaching out to View email address on click.appcast.io. Exercise Caution with Unsolicited Outreach: If you receive any communication that appears suspicious, contains grammatical errors, or makes unusual requests, do not engage. Always confirm the sender's email domain is @anduril.com before providing any personal information or clicking on links.What to Do If You Suspect Fraud: Should you encounter any questionable or fraudulent outreach claiming to be from Anduril, please report it immediately to View email address on click.appcast.io. Your proactive caution is invaluable in protecting your personal information and upholding the security and trustworthiness of our recruitment efforts.Data PrivacyTo view Anduril's candidate data privacy policy, please visit . By submitting your application, you consent to Anduril Industries using a third-party service provider to conduct pre-employment risk, integrity, and due diligence screening and assessing potential risks as part of your application process. This third-party service provider provides risk-intelligence services that may include analysis of sanctions and watchlists, adverse media, public-record information, and other lawful open-source or commercial data sources. This third-party service provider does not act as a consumer reporting agency. Use of this provider helps to ensure compliance with applicable laws and protect technology, intellectual property, and organizational security.