Jobs
Jobs
Senior Network Engineer
Summary
Candidates for year-round positions are reviewed on a rolling basis. Applications will be accepted up to 90 days after the posting date, or until the position is filled (whichever is first).
Job Summary:
Vail Resorts is seeking a Senior Network Engineer to design, secure, and automate the networks that support our cloud platforms, enterprise data centers, and modern applications. This hands-on role combines advanced Microsoft Azure networking with network security, Kubernetes networking, and infrastructure automation.
Approximately 80-90% of the role focuses on cloud networking, data center network security, Kubernetes, and automation. Azure is the primary specialization, supported by working knowledge of AWS and GCP. Traditional enterprise networking represents a limited, supporting portion of the role.
Job Specifications:
+ Starting Wage: $89,348.00 - $127,640.00 + Annual Bonus
+ Employment Type: Year Round
+ Shift Type: Full Time hours available
+ Minimum Age: At least 18 years of age
+ Housing Availability: No
Job Responsibilities:
Cloud and Kubernetes Networking
+ Design and operate secure, resilient Azure networks, including VNets, routing, ExpressRoute, VPN Gateway, private endpoints, DNS, Azure Firewall, and load balancing.
+ Engineer connectivity across Azure, AWS, GCP, and data centers; troubleshoot routing, name resolution, segmentation, and application connectivity across hybrid environments.
+ Design and troubleshoot Kubernetes networking, including AKS, container network interfaces (CNI), ingress, service connectivity, and network policies.
+ Build network resilience into architecture and change plans to support disaster recovery, business continuity, and infrastructure modernization.
Network Security and Microsegmentation
+ Engineer and maintain Check Point firewall policies and security controls for cloud and data center workloads, including access rules, NAT, and secure connectivity.
+ Support and optimize Cato SASE for secure access, cloud connectivity, and consistent network security policy.
+ Implement Zero Networks microsegmentation to isolate workloads and reduce lateral movement; partner with cybersecurity teams to apply Zero Trust and least-privilege access.
+ Secure virtualized data center networks and workload traffic, coordinating routing, segmentation, and load balancing with infrastructure teams.
Automation and Engineering Leadership
+ Build reusable Terraform modules and Python/API automation for network provisioning, configuration, policy management, and validation.
+ Use Git and CI/CD workflows to deliver repeatable, reviewed deployments and enable self-service infrastructure provisioning with appropriate controls.
+ Lead complex incident analysis, document root causes, and implement lasting corrective actions; maintain architecture diagrams, standards, and operational procedures.
+ Collaborate with cloud, infrastructure, cybersecurity, application, and field technology teams; mentor engineers and provide limited support for traditional networking when needed.
Job Requirements:
+ Seven or more years of experience in network engineering, cloud networking, or network security engineering, or equivalent demonstrated expertise.
+ Advanced Azure networking expertise, including hybrid connectivity, cloud routing, ExpressRoute, private connectivity, DNS architecture, and segmentation.
+ Working knowledge of AWS and GCP networking, with practical experience designing or supporting connectivity in at least one of these platforms.
+ Strong TCP/IP, BGP, VPN, NAT, DNS, load balancing, and network security fundamentals, with the ability to troubleshoot complex hybrid environments.
+ Hands-on experience with enterprise next-generation firewalls and familiarity with Check Point; understanding of SASE, Zero Trust, microsegmentation, and workload isolation.
+ Practical Kubernetes networking expertise covering CNI, ingress, service networking, network policies, and application connectivity troubleshooting.
+ Hands-on Terraform experience and proficiency in Python scripting and REST API automation; ability to maintain reusable, version-controlled infrastructure code.
+ Strong communication, documentation, and analytical skills; ability to lead technical work independently, manage priorities, and collaborate across teams.
Preferred Qualifications
+ Direct experience with Check Point security gateways and management platforms, Cato SASE, and Zero Networks microsegmentation; Check Point Maestro experience is a plus.
+ Experience with Azure Virtual WAN, AKS, AWS Transit Gateway, AWS VPC networking, and GCP VPC networking.
+ Experience with Cilium, Calico, or similar Kubernetes networking technologies; Git-based CI/CD, Ansible, or other automation frameworks.
+ Familiarity with Nutanix AHV, VMware, software-defined data center networking, network observability, telemetry, and automated configuration validation.
+ Familiarity with Extreme Networks and Cisco routing and switching as supporting skills.
+ Relevant certifications in Azure networking, Check Point, Terraform, or enterprise networking.
The expected Total Compensation for this role is $89,348.00 - $127,640.00 + Annual Bonus. Individual compensation decisions are based on a variety of factors.
Job Benefits
+ Ski/Mountain Perks! Free passes for employees, employee discounted lift tickets for friends and family AND free ski lessons
+ MORE employee discounts on lodging, food, gear, and mountain shuttles
+ 401(k) Retirement Plan
+ Employee Assistance Program
+ Excellent training and professional development
Full Time roles are eligible for the above, plus:
+ Health Insurance; Medical Insurance, Dental Insurance, and Vision Insurance plans (for eligible seasonal employees after working 500 hours)
+ Free ski passes for dependents
+ Critical Illness and Accident plans
Vail Resorts offers a 'Hybrid' work environment where employees living within 50 miles of the Broomfield office work on-site Tuesday, Wednesday, Thursday and have flexibility to work off-site on Mondays and Fridays. Employees living outside of a commutable distance can work remotely from British Columbia, Washington D.C., and the 16 U.S. states* in which we currently operate. This includes: California, Colorado, Indiana, Michigan, Minnesota, Missouri, New Hampshire, New York, Nevada, Ohio, Pennsylvania, Utah, Vermont, Washington State, Wisconsin, and Wyoming.
Please note that the ability to work in p...
Do You Have a MO Jobs Account?
Your HireMO account is created from your MO Jobs account, so we need to connect the two.
First, Let's Find Your MO Jobs Account
HireMO works together with MO Jobs, the State of Missouri jobs website.
Create an Account to Apply
Your MO Jobs account is connected. Choose an email and password to sign in to HireMO.
You Need a MO Jobs Account First
HireMO works together with MO Jobs, the State of Missouri jobs website. You need a MO Jobs account before you can create your HireMO account.
- Create your MO Jobs account at jobs.mo.gov. It is free.
- Log in to MO Jobs, then click HireMO from there. That link brings you back here to finish your registration.
- Complete your HireMO account.