Senior Network Engineer

Senior Network EngineerVail Resorts is seeking a Senior Network Engineer to design, secure, and automate the networks that support our cloud platforms, enterprise data centers, and modern applications. This hands-on role combines advanced Microsoft Azure networking with network security, Kubernetes networking, and infrastructure automation. Approximately 80–90% of the role focuses on cloud networking, data center network security, Kubernetes, and automation. Azure is the primary specialization, supported by working knowledge of AWS and GCP. Traditional enterprise networking represents a limited, supporting portion of the role.Starting Wage: $89,348.00 - $127,640.00 + Annual BonusEmployment Type: Year RoundShift Type: Full Time hours availableMinimum Age: At least 18 years of ageHousing Availability: NoJob Responsibilities:Design and operate secure, resilient Azure networks, including VNets, routing, ExpressRoute, VPN Gateway, private endpoints, DNS, Azure Firewall, and load balancing.Engineer connectivity across Azure, AWS, GCP, and data centers; troubleshoot routing, name resolution, segmentation, and application connectivity across hybrid environments.Design and troubleshoot Kubernetes networking, including AKS, container network interfaces (CNI), ingress, service connectivity, and network policies.Build network resilience into architecture and change plans to support disaster recovery, business continuity, and infrastructure modernization.Engineer and maintain Check Point firewall policies and security controls for cloud and data center workloads, including access rules, NAT, and secure connectivity.Support and optimize Cato SASE for secure access, cloud connectivity, and consistent network security policy.Implement Zero Networks microsegmentation to isolate workloads and reduce lateral movement; partner with cybersecurity teams to apply Zero Trust and least-privilege access.Secure virtualized data center networks and workload traffic, coordinating routing, segmentation, and load balancing with infrastructure teams.Build reusable Terraform modules and Python/API automation for network provisioning, configuration, policy management, and validation.Use Git and CI/CD workflows to deliver repeatable, reviewed deployments and enable self-service infrastructure provisioning with appropriate controls.Lead complex incident analysis, document root causes, and implement lasting corrective actions; maintain architecture diagrams, standards, and operational procedures.Collaborate with cloud, infrastructure, cybersecurity, application, and field technology teams; mentor engineers and provide limited support for traditional networking when needed.Job Requirements:Seven or more years of experience in network engineering, cloud networking, or network security engineering, or equivalent demonstrated expertise.Advanced Azure networking expertise, including hybrid connectivity, cloud routing, ExpressRoute, private connectivity, DNS architecture, and segmentation.Working knowledge of AWS and GCP networking, with practical experience designing or supporting connectivity in at least one of these platforms.Strong TCP/IP, BGP, VPN, NAT, DNS, load balancing, and network security fundamentals, with the ability to troubleshoot complex hybrid environments.Hands-on experience with enterprise next-generation firewalls and familiarity with Check Point; understanding of SASE, Zero Trust, microsegmentation, and workload isolation.Practical Kubernetes networking expertise covering CNI, ingress, service networking, network policies, and application connectivity troubleshooting.Hands-on Terraform experience and proficiency in Python scripting and REST API automation; ability to maintain reusable, version-controlled infrastructure code.Strong communication, documentation, and analytical skills; ability to lead technical work independently, manage priorities, and collaborate across teams.Job Benefits:Ski/Mountain Perks! Free passes for employees, employee discounted lift tickets for friends and family AND free ski lessons MORE employee discounts on lodging, food, gear, and mountain shuttles 401(k) Retirement Plan Employee Assistance Program Excellent training and professional development Full Time roles are eligible for the above, plus: Health Insurance; Medical Insurance, Dental Insurance, and Vision Insurance plans (for eligible seasonal employees after working 500 hours) Free ski passes for dependents Critical Illness and Accident plansVail Resorts offers a 'Hybrid' work environment where employees living within 50 miles of the Broomfield office work on-site Tuesday, Wednesday, Thursday and have flexibility to work off-site on Mondays and Fridays. Employees living outside of a commutable distance can work remotely from British Columbia, Washington D.C., and the 16 U.S. states* in which we currently operate. This includes: California, Colorado, Indiana, Michigan, Minnesota, Missouri, New Hampshire, New York, Nevada, Ohio, Pennsylvania, Utah, Vermont, Washington State, Wisconsin, and Wyoming. Please note that the ability to work in person or off-site, and the particulars related to such work, are subject to change at any time; and, accordingly, the Company reserves the right to change its policies and/or require in-person/in-office work or off-site work at any time in its sole discretion.In completing this application, and when submitting related documentation, applicants may redact information that identifies their age, date of birth, and/or dates of attendance at or graduation from an educational institution. We follow all federal, state, and local laws including restrictions on child/minor labor. Minors hired into this position will not be asked or permitted to engage in any activities restricted to adult workers. Vail Resorts is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, protected veteran status or any other status protected by applicable law.