Role Description The Senior Network Engineer is the primary technical owner for our enterprise-wide network, bridging the gap between our physical retail footprint and our cloud presence. This role is responsible for the design, security, and continuous improvement of infrastructure across Google Cloud (GCP), Microsoft Azure, and our on-premise locations. As a leader within the NetDevOps team, you will drive the transition from manual configuration to Infrastructure as Code (IaC). This is an "evolution-focused" role: we don't just maintain the network; we improve it through automation and strict observability. What You’ll Do: - Platform Ownership: Serve as the Primary Owner for core platforms: Palo Alto Firewalls, Cisco Meraki (SD-WAN), and Cisco Route/Switch. - Cloud & IaC Requirement: Act as the primary lead for Google Cloud (GCP) and Azure network services. Responsibility includes managing GitHub and Terraform repositories to deploy and maintain network code. - Infrastructure Design: Architect and deploy enterprise-level network components for Retail Stores and Fulfillment Centers, focusing on ensuring 5-9’s uptime for POS and critical operations. - Security & Compliance: Maintain the security perimeter on Palo Alto Firewalls, performing quarterly ruleset audits and ensuring PCI-DSS compliance across the retail environment. - Automation Strategy: Build and maintain Ansible playbooks to automate firmware updates, configuration backups, and repetitive operational tasks. - Observability: Own the Zabbix monitoring platform; ensure "No alert without an owner" by managing templates, integrations, and performance tuning. - Documentation & "Source of Truth": Maintain NetBox as the single source of truth for the network. Ensure all diagrams (Lucidchart) and runbooks (Notion) are updated within a 3-5 business day SLO. - Incident Leadership: Lead Sev1/Sev2 incident response and coordinate Post-Incident Reviews (PIRs) within 3 business days of resolution. - Governance: Actively participate in the Change Advisory Board (CAB) to discuss, and review major infrastructure changes. Qualifications - Experience: 7+ years of relevant work experience in network engineering. - Technical Requirement: Hands-on professional experience with Google Cloud (GCP) and Terraform (IaC) is required. - Required Certification: CCNA or similar. - Preferred Certifications: CCNP or PCNSA/PCNSE. - Education: 4-year degree is preferred. - Network Stack: Expertise in Palo Alto (Panorama), Cisco Meraki (MX/MR/MS), and classic Cisco IOS/NX/OS. - Automation: High proficiency in Terraform and GitHub; experience with Ansible is a significant plus. - Protocols: Advanced knowledge of BGP, OSPF, VLANs, and network segmentation. - Tooling: Familiarity with NetBox, Unimus, and Zabbix. - Communication: Ability to provide tier-three support and mentorship to junior engineering and support staff. - Authorization to work in the United States without sponsorship. Leadership Competencies - Leading Self: Inspiring Trust - Adaptability - Mature Confidence - Career and Self Development Physical Environment & Travel Expectations - Travel is required for less than 10% of company-related meetings, programs, and/or events. - Sitting is required for 90% of working hours. - Standing is required for 10% of working hours. - Continuous arm, hand, and wrist movement (i.e., typing). - Occasional reaching, twisting, and bending. - Noise level no greater than casual conversation. - Ability to perform work in cubicle workstations or an office setting. - Work in temperatures ranging from 65 - 75 degrees. Final Interview Process At Duluth Trading Company, we value face-to-face interactions that foster our culture of learning, creativity, and teamwork. Although this will be a remote position, we believe the best way to start a great partnership is with in-person interaction. Therefore, the final interview for the recruiting process will be held on-site at our Mount Horeb, WI office. This visit allows you to see our workspace firsthand, engage directly with your potential teammates, and get a clear picture of our daily operations. Travel & Logistics If you are traveling from out of town, Duluth Trading Company will fully coordinate and fund all travel arrangements and accommodations. Our goal is to ensure you can focus entirely on your interviews while we handle the logistics. Benefits - Multiple Medical plan options - Dental & Vision plans - Medical and Dependent Care Flexible Spending Accounts - Health Savings Account including company contributions - Company paid Life Insurance and AD&D - Company paid Short-Term Disability - Other various voluntary benefits including: Accident, Critical Illness, Hospital Indemnity, Long-Term Disability and Supplemental Life Insurance - 401(k) Employer Match - Parental Leave - Paid holidays: New Year’s Day, Martin Luther King Jr. Day, Memorial Day, Juneteenth, Independence Day, Labor Day, Thanksgiving Day, Christmas Eve, Christmas Day - Paid Time Off: take it as you need it policy for exempt employees - Daily pay available - 40% Employee Discount - Flexible Fridays - Onsite fitness center Position Compensation Outline Compensation Range: $100,000 to $125,000/year. This position is eligible to participate in the company bonus program. Compensation listed is for the full-time position at this specific location and is based on several factors, including experience and qualifications. Benefits and perks may have eligibility requirements and are subject to change.

• In the hands-on role of Senior Network Engineer, you will serve as the technical lead for enterprise and cloud networking, owning design, implementation, and operational reliability of DISA’s hybrid network across on‑premises data centers, Remote Offices, Microsoft Azure, and Amazon Web Services (AWS). • This position includes coordination responsibility over a team of Network Engineers and NOC members, ensuring consistent execution of runbooks, change management, incident response, and project delivery. • You will drive the shift to Infrastructure as Code (IaC) and automation for network and firewall changes, and you will play a key leadership role in Zero Trust Micro‑Segmentation (ZTM) initiatives, including segmentation, default‑deny policies, and hypercare to minimize business disruption.

• Provide enterprise network architecture leadership for the SEC ISS contract • Design, implement, and maintain secure, scalable, and highly available enterprise network architectures across LAN/WAN/WLAN, voice, and remote-access environments. • Develop target-state architecture, technical standards, and network lifecycle plans for upgrades, refreshes, and end-of-support transitions. • Lead network integration for cloud and on-premises platforms, including connectivity patterns, segmentation, and secure data flows. • Serve as technical authority for routing, switching, firewall, VPN, and performance optimization strategy. • Define and enforce network security architecture aligned to SEC policies and federal expectations, including FISMA and zero-trust control requirements. • Partner with cybersecurity teams to assess vulnerabilities, prioritize remediation, and reduce risk exposure across network infrastructure. • Produce and maintain architecture documentation, SOP inputs, configuration baselines, and artifacts supporting audits and ATO sustainment. • Conduct risk assessments and architecture reviews to identify control gaps, resilience risks, and corrective actions. • Establish performance and availability objectives; implement monitoring approaches for device health, traffic patterns, latency, and network reliability. • Drive capacity planning using usage trends and forecast data to prevent service degradation and support growth. • Troubleshoot and resolve high-complexity network incidents and chronic problems, including root-cause analysis and corrective design changes. • Support service-level reporting and dashboard-driven operational insights in coordination with enterprise operations and service management teams. • Lead complex network initiatives, including migrations, major changes, and cross-team implementations with clear technical governance. • Collaborate with infrastructure, application, cloud, and service desk teams to ensure integrated, secure, and supportable solutions. • Provide technical leadership, mentoring, and quality oversight to network engineers and junior technical staff.

• Support, monitor, test, deploy, and troubleshoot hardware and software pertaining to local area and wide area networks. • Monitors data network system performance. • Performs data network troubleshooting to isolate and diagnose performance issues. • Installs and configures hardware. • Performs upgrades to hardware and software components. • Orders equipment, prepares installation specifications, and monitors progress of installation for core and branch network infrastructure. • Analyzes test data and recommends hardware or software solutions. • Tests and evaluates equipment to determine efficiency, reliability, and compatibility with existing systems. • Establishes network users, user environments, and security for networks being installed. • Troubleshoots branch cabling and equipment issues. • Provides users with technical network support.