Sr. Network Engineer

**PLEASE NOTE: This is a hybrid role requiring in-office presence 3 days per week (Monday-Wednesday or Tuesday-Thursday) with 2 days remote. The candidate must be in or near Charlotte, NC or have plans to relocate. This position includes participation in an on-call rotation to support critical network infrastructure. Additionally, this position does not offer visa sponsorship.THE POSITION As a Senior Network Engineer, you will lead the implementation, maintenance, optimization, and architectural design of LendingTree's enterprise network infrastructure. You will serve as a subject matter expert in our Fortinet-based environment, including firewalls, switches, access points, FortiSASE, and SD-WAN solutions. Collaborating with Infrastructure Engineering, Security, Cloud Operations, and DevOps teams, you will support network modernization, automation, and reliability initiatives.This role is ideal for a Senior engineer who is familiar with modern Infrastructure as Code (IaC) principles, network automation, and modern cloud networking architectures across AWS and Azure while embracing SRE fundamentals to ensure our network services are reliable, scalable, and observable.THE RESPONSIBILITIESNetwork InfrastructureDesign, implement, and maintain enterprise network infrastructure including Fortinet firewalls (FortiGate), switches (FortiSwitch), and wireless access points (FortiAP) Manage and optimize FortiSASE (Secure Access Service Edge) for secure remote access and SD-WAN connectivity Administer FortiNAC (Network Access Control) for device visibility, authentication, and network segmentation Monitor network performance, troubleshoot complex issues, and ensure high availability of critical network services Implement and maintain network security policies, VPNs, and firewall rules aligned with security best practices Perform capacity planning and make recommendations for network infrastructure upgrades and expansions Cloud NetworkingDesign and implement cloud networking solutions in AWS (VPC, Transit Gateway, Direct Connect, Route 53, CloudFront, etc.) Design and implement cloud networking solutions in Azure (VNet, VPN Gateway, ExpressRoute, Azure Firewall, Traffic Manager, etc.) Build and maintain hybrid cloud connectivity between on-premises Fortinet infrastructure and cloud environments Support hybrid cloud connectivity between on-premises Fortinet infrastructure and cloud environmentsAssist with cloud-native security controls and network segmentationObservabilityLeverage SumoLogic and FortiAnalyzer for network observability, log analysis, and alertingDefine and monitor Service Level Indicators (SLIs) and Service Level Objectives (SLOs) for network servicesParticipate in incident response, blameless postmortems, and root cause analysisIdentify and reduce toil through automation and process improvementContribute to runbooks and operational documentation to improve reliabilityAutomationDevelop and maintain Infrastructure as Code (IaC) using Terraform for network infrastructure provisioning and configuration management Implement CI/CD pipelines for automated deployment of firewall rules, network configurations, and policy changes Create automation scripts using Python, Ansible, or other tools to streamline network operations and reduce manual tasks Leverage Fortinet APIs and SDKs for programmatic network management and orchestration Build self-service capabilities and automation workflows to improve operational efficiency Collaboration & SupportPartner with InfoSec teams on implementing security controls and policiesCollaborate with DevOps and Platform Engineering teams to support application infrastructure requirementsWork with Infrastructure Engineering team on server, storage, and virtualization networking needsCreate and maintain network documentation, diagrams, and runbooksParticipate in on-call rotation to provide support for critical network infrastructureRespond to and help resolve network incidents, outages, and performance issuesPerform planned network maintenance during change windowsQUALIFICATIONSRequired Experience5+ years of experience in network engineering or a related technical role2+ years of hands-on experience with Fortinet products (FortiGate firewalls, FortiSwitch, or FortiAP)Hands-on experience with cloud networking in AWS and/or Azure environmentsExperience in enterprise-scale environments, leading projects, or mentoring teams.Mentor junior network engineers and provide technical guidance.Lead network architecture reviews and roadmap planning.Solid understanding of network protocols (BGP, OSPF, VLAN, STP, LACP, etc.)Experience with VPN technologies (IPSec, SSL VPN, SD-WAN)Familiarity with Git and CICD PipelinesTechnical SkillsFortinet: Working knowledge of FortiOS, FortiGate firewall configuration, FortiSwitch, FortiAP wireless, and FortiSASECloud Networking: Basic understanding of AWS VPC design, Azure VNet architecture, and hybrid connectivityAutomation: Scripting skills in Python, Bash, or PowerShell; exposure to Terraform or AnsibleObservability: Hands-on experience with log management and monitoring tools (SumoLogic, FortiAnalyzer, CloudWatch, or similar)Security: In-depth knowledge of network security principles, firewall policies, and VPN configurationsTroubleshooting: Experience with packet analysis tools (Wireshark, tcpdump)Professional Competencies Strong analytical and problem-solving skillsLeadership skills, ability to mentor and develop team members, strategic thinking, and experience influencing cross-functional stakeholders.Good communication skills with ability to document technical processes clearlyAbility to work effectively in a hybrid team environmentEagerness to learn new technologies and grow technical expertiseStrong documentation skills and attention to detailAbility to work collaboratively and ask questions when neededNICE TO HAVE Certifications Fortinet NSE certifications: NSE 5+Cloud certifications: AWS Advanced Networking Specialty or Azure Network Engineer Associate.Networking certifications: CCNA, CCNP, or equivalentAdditional Experience Hands-on experience with FortiManager and FortiAnalyzer for centralized management and analytics Familiarity with containerized networking (Kubernetes, Docker)Strong grasp of SRE practices, SLIs/SLOs, and incident managementHands-on experience network observability platforms (SumoLogic, Datadog, Splunk)Knowledge of DevOps practices and agile methodologiesExperience in a SOX-compliant or regulated environmentStrong understanding of SD-WAN optimization and application-aware routingEDUCATIONBachelor's or Master's degree in Computer Science, Information Technology, Network Engineering, or related field (not required, but nice to have) Equivalent combination of education, training, and experience will be considered COMPENSATIONThe base pay for this position is $110,000-140,000, however, base pay offered may vary depending on internal factors, job-related knowledge, and candidate experience.INCENTIVE COMPENSATIONEligible for annual performance bonusBENEFITSMedical, dental, and vision insurance and 401(k) matchingOUR CULTUREWe’re a collaborative, entrepreneurial team that values curiosity, creativity, and getting things done together. Our teammates are some of the brightest, most driven people you’ll meet — and we celebrate innovation, inclusion, and ownership. At LendingTree, you’ll find an inclusive culture where diverse perspectives make us stronger. We believe in working hard and supporting one another — with the flexibility and trust that help you thrive both personally and professionally.We’re proud to offer generous benefits, wellness programs, and time-off policies designed to help you recharge, stay healthy, and bring your best self to work every day. And yes — we still have fun doing it (our “GSD – Get Stuff Done” award is a fan favorite!)Come grow with us, make an impact, and be part of a company that truly cares about its people and its community.LendingTree is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race, color, religion (or creed), gender, gender expression, age, national origin, disability, marital status, sexual orientation, or military status.CCPA Disclosure