Senior Infrastructure Engineer (SRE) | Networking, Azure & Infrastructure as Code (Terraform/Ansible)

Job Title: Senior Infrastructure Engineer (SRE) | Networking, Azure & Infrastructure as Code (Terraform/Ansible)

Location: East Lansing MI 48823 – Onsite working

Perm/FTE Role

US citizens and Green Card Holders and those authorized to work in the US are encouraged to apply. We are unable to sponsor H1b candidates at this time

Job Description

Senior Infrastructure Engineer - Site Reliability Engineering - Network Focus

About the Role

• We are looking for a Senior Infrastructure Engineer - Site Reliability Engineering with deep networking expertise to join the team responsible for the reliability, availability, and performance of hybrid infrastructure.
• Our environment spans on-premises VMware infrastructure, Azure, enterprise storage and backup platforms, networking, and CI/CD tooling, and we are in the middle of a multi-year migration of on-premises workloads to Azure.
• This is an SRE role with a focus in networking. Your deepest expertise will be in networking, and you will be one of the team's go-to people for network operations, perimeter security, and the network side of our cloud migration.
• Like every SRE on the team, you will also carry broader responsibilities: on-call, project work, automation, and troubleshooting across the full environment.
• Our network is managed as code and operated as one part of a larger interconnected system, and the role reflects that.

What You'll Do

• Own the day-to-day operational health of switching, routing, wireless, and perimeter infrastructure
• Design, implement, and maintain firewall policy through established change management
• Administer zero trust and remote access platforms
• Support the network side of our Azure migration: hybrid connectivity, virtual network design input, network security group and gateway implementation
• Manage network configuration through automation and configuration-as-code rather than device-by-device changes
• Serve as a primary resource when incidents have a network dimension, including ruling the network in or out quickly so the team can chase the real problem
• Maintain infrastructure health beyond the network in areas you take on: monitoring, capacity trending, performance
• Implement changes through Infrastructure as Code and CI/CD pipelines using Ansible, Terraform, and GitHub Actions
• Plan and track your work in Jira; contribute to estimates and technical feasibility discussions
• Participate in a weekly round-robin on-call rotation covering the full environment
• Remediate security findings within established timelines and support audit activities with documentation and evidence
• Follow change management procedures and keep configuration documentation accurate

What We're Looking For

• 7+ years of IT experience, including at least 2 years focused on network engineering or network operations with production ownership

Deep, demonstrable expertise in:

• Routing and switching (L2/L3, VLANs, BGP, OSPF, WAN/ISP connectivity)
• Perimeter firewalls: policy design, NAT, segmentation, and safe rule lifecycle management
• Azure networking: virtual networks, subnets, network security groups, NAT gateways, VNet integration, and hybrid connectivity
• Hands-on experience managing network infrastructure through Infrastructure as Code and automation: Ansible, Terraform, Git-based workflows. This is how we operate our network day to day.
• Comfort with open networking standards and platforms; much of our network runs on Linux-based network operating systems, and comfort at a Linux shell is expected
• Working knowledge across the broader stack, including:
• Linux and Windows Server administration
• Azure beyond networking (resource deployment basics)
• Virtualization concepts (VMware)
• Sound judgment under pressure: you know when to act, when to escalate, and how to form an opinion before you do
• Clear written communication; our change management and incident processes depend on it
• Comfort operating in an environment where many systems are business-critical, not just the obvious ones

Nice to Have

• Experience with zero trust network access platforms (Cloudflare, Microsoft Global Secure Access, or similar)
• Experience with open or disaggregated network operating systems (SONiC, VyOS, TNSR, or similar)
• Financial services or other regulated-industry experience
• Experience supporting cloud migrations from the network side
• Wireless networking experience (controller-based or cloud-managed)

A reasonable, good faith estimate of the minimum and maximum base salary for this position is $90k–$115k . This position will also include a discretionary bonus that generally will be depending on a variety of factors. Employee benefits will also be available, and details are available like Pension/401K/ Paid Vacation/ Life, Medical & Dental insurance etc.

* The pay range listed above reflects the expected starting salary /Pay rate for this role. This range may be adjusted based on market conditions, location, and other relevant factors. The Company will determine the final starting salary/Pay rate in consultation with the selected candidate(s), in full compliance with applicable laws