Sr. Network Engineer

Sr. Network EngineerCharlotte, NC, United StatesPlease note: This is a hybrid role requiring in-office presence 3 days per week (Monday-Wednesday or Tuesday-Thursday) with 2 days remote. The candidate must be in or near Charlotte, NC or have plans to relocate. This position includes participation in an on-call rotation to support critical network infrastructure. Additionally, this position does not offer visa sponsorship.The ResponsibilitiesAs a Senior Network Engineer, you will lead the implementation, maintenance, optimization, and architectural design of LendingTree's enterprise network infrastructure. You will serve as a subject matter expert in our Fortinet-based environment, including firewalls, switches, access points, FortiSASE, and SD-WAN solutions. Collaborating with Infrastructure Engineering, Security, Cloud Operations, and DevOps teams, you will support network modernization, automation, and reliability initiatives.This role is ideal for a Senior engineer who is familiar with modern Infrastructure as Code (IaC) principles, network automation, and modern cloud networking architectures across AWS and Azure while embracing SRE fundamentals to ensure our network services are reliable, scalable, and observable.Network InfrastructureDesign, implement, and maintain enterprise network infrastructure including Fortinet firewalls (FortiGate), switches (FortiSwitch), and wireless access points (FortiAP)Manage and optimize FortiSASE (Secure Access Service Edge) for secure remote access and SD-WAN connectivityAdminister FortiNAC (Network Access Control) for device visibility, authentication, and network segmentationMonitor network performance, troubleshoot complex issues, and ensure high availability of critical network servicesImplement and maintain network security policies, VPNs, and firewall rules aligned with security best practicesPerform capacity planning and make recommendations for network infrastructure upgrades and expansionsCloud NetworkingDesign and implement cloud networking solutions in AWS (VPC, Transit Gateway, Direct Connect, Route 53, CloudFront, etc.)Design and implement cloud networking solutions in Azure (VNet, VPN Gateway, ExpressRoute, Azure Firewall, Traffic Manager, etc.)Build and maintain hybrid cloud connectivity between on-premises Fortinet infrastructure and cloud environmentsSupport hybrid cloud connectivity between on-premises Fortinet infrastructure and cloud environmentsAssist with cloud-native security controls and network segmentationObservabilityLeverage SumoLogic and FortiAnalyzer for network observability, log analysis, and alertingDefine and monitor Service Level Indicators (SLIs) and Service Level Objectives (SLOs) for network servicesParticipate in incident response, blameless postmortems, and root cause analysisIdentify and reduce toil through automation and process improvementContribute to runbooks and operational documentation to improve reliabilityAutomationDevelop and maintain Infrastructure as Code (IaC) using Terraform for network infrastructure provisioning and configuration managementImplement CI/CD pipelines for automated deployment of firewall rules, network configurations, and policy changesCreate automation scripts using Python, Ansible, or other tools to streamline network operations and reduce manual tasksLeverage Fortinet APIs and SDKs for programmatic network management and orchestrationBuild self-service capabilities and automation workflows to improve operational efficiencyCollaboration & SupportPartner with InfoSec teams on implementing security controls and policiesCollaborate with DevOps and Platform Engineering teams to support application infrastructure requirementsWork with Infrastructure Engineering team on server, storage, and virtualization networking needsCreate and maintain network documentation, diagrams, and runbooksParticipate in on-call rotation to provide support for critical network infrastructureRespond to and help resolve network incidents, outages, and performance issuesPerform planned network maintenance during change windowsQualificationsRequired Experience5+ years of experience in network engineering or a related technical role2+ years of hands-on experience with Fortinet products (FortiGate firewalls, FortiSwitch, or FortiAP)Hands-on experience with cloud networking in AWS and/or Azure environmentsExperience in enterprise-scale environments, leading projects, or mentoring teams.Mentor junior network engineers and provide technical guidance.Lead network architecture reviews and roadmap planning.Solid understanding of network protocols (BGP, OSPF, VLAN, STP, LACP, etc.)Experience with VPN technologies (IPSec, SSL VPN, SD-WAN)Familiarity with Git and CICD PipelinesTechnical SkillsFortinet: Working knowledge of FortiOS, FortiGate firewall configuration, FortiSwitch, FortiAP wireless, and FortiSASECloud Networking: Basic understanding of AWS VPC design, Azure VNet architecture, and hybrid connectivityAutomation: Scripting skills in Python, Bash, or PowerShell; exposure to Terraform or AnsibleObservability: Hands-on experience with log management and monitoring tools (SumoLogic, FortiAnalyzer, CloudWatch, or similar)Security: In-depth knowledge of network security principles, firewall policies, and VPN configurationsTroubleshooting: Experience with packet analysis tools (Wireshark, tcpdump)Professional CompetenciesStrong analytical and problem-solving skillsLeadership skills, ability to mentor and develop team members, strategic thinking, and experience influencing cross-functional stakeholders.Good communication skills with ability to document technical processes clearlyAbility to work effectively in a hybrid team environmentEagerness to learn new technologies and grow technical expertiseStrong documentation skills and attention to detailAbility to work collaboratively and ask questions when neededNice To HaveCertificationsFortinet NSE certifications: NSE 5+Cloud certifications: AWS Advanced Networking Specialty or Azure Network Engineer Associate.Networking certifications: CCNA, CCNP, or equivalentAdditional ExperienceHands-on experience with FortiManager and FortiAnalyzer for centralized management and analyticsFamiliarity with containerized networking (Kubernetes, Docker)Strong grasp of SRE practices, SLIs/SLOs, and incident managementHands-on experience network observability platforms (SumoLogic, Datadog, Splunk)Knowledge of DevOps practices and agile methodologiesExperience in a SOX-compliant or regulated environmentStrong understanding of SD-WAN optimization and application-aware routingEducationBachelor's or Master's degree in Computer Science, Information Technology, Network Engineering, or related field (not required, but nice to have)Equivalent combination of education, training, and experience will be consideredCompensationThe base pay for this position is $110,000-140,000, however, base pay offered may vary depending on internal factors, job-related knowledge, and candidate experience.Incentive CompensationEligible for annual performance bonusBenefitsMedical, dental, and vision insurance and 401(k) matchingOur CultureWe're a collaborative, entrepreneurial team that values curiosity, creativity, and getting things done