Role Description The Senior Network Engineer is the primary technical owner for our enterprise-wide network, bridging the gap between our physical retail footprint and our cloud presence. This role is responsible for the design, security, and continuous improvement of infrastructure across Google Cloud (GCP), Microsoft Azure, and our on-premise locations. As a leader within the NetDevOps team, you will drive the transition from manual configuration to Infrastructure as Code (IaC). This is an "evolution-focused" role: we don't just maintain the network; we improve it through automation and strict observability. What You’ll Do: - Platform Ownership: Serve as the Primary Owner for core platforms: Palo Alto Firewalls, Cisco Meraki (SD-WAN), and Cisco Route/Switch. - Cloud & IaC Requirement: Act as the primary lead for Google Cloud (GCP) and Azure network services. Responsibility includes managing GitHub and Terraform repositories to deploy and maintain network code. - Infrastructure Design: Architect and deploy enterprise-level network components for Retail Stores and Fulfillment Centers, focusing on ensuring 5-9’s uptime for POS and critical operations. - Security & Compliance: Maintain the security perimeter on Palo Alto Firewalls, performing quarterly ruleset audits and ensuring PCI-DSS compliance across the retail environment. - Automation Strategy: Build and maintain Ansible playbooks to automate firmware updates, configuration backups, and repetitive operational tasks. - Observability: Own the Zabbix monitoring platform; ensure "No alert without an owner" by managing templates, integrations, and performance tuning. - Documentation & "Source of Truth": Maintain NetBox as the single source of truth for the network. Ensure all diagrams (Lucidchart) and runbooks (Notion) are updated within a 3-5 business day SLO. - Incident Leadership: Lead Sev1/Sev2 incident response and coordinate Post-Incident Reviews (PIRs) within 3 business days of resolution. - Governance: Actively participate in the Change Advisory Board (CAB) to discuss, and review major infrastructure changes. Qualifications - Experience: 7+ years of relevant work experience in network engineering. - Technical Requirement: Hands-on professional experience with Google Cloud (GCP) and Terraform (IaC) is required. - Required Certification: CCNA or similar. - Preferred Certifications: CCNP or PCNSA/PCNSE. - Education: 4-year degree is preferred. - Network Stack: Expertise in Palo Alto (Panorama), Cisco Meraki (MX/MR/MS), and classic Cisco IOS/NX/OS. - Automation: High proficiency in Terraform and GitHub; experience with Ansible is a significant plus. - Protocols: Advanced knowledge of BGP, OSPF, VLANs, and network segmentation. - Tooling: Familiarity with NetBox, Unimus, and Zabbix. - Communication: Ability to provide tier-three support and mentorship to junior engineering and support staff. - Authorization to work in the United States without sponsorship. Leadership Competencies - Leading Self: Inspiring Trust - Adaptability - Mature Confidence - Career and Self Development Physical Environment & Travel Expectations - Travel is required for less than 10% of company-related meetings, programs, and/or events. - Sitting is required for 90% of working hours. - Standing is required for 10% of working hours. - Continuous arm, hand, and wrist movement (i.e., typing). - Occasional reaching, twisting, and bending. - Noise level no greater than casual conversation. - Ability to perform work in cubicle workstations or an office setting. - Work in temperatures ranging from 65 - 75 degrees. Final Interview Process At Duluth Trading Company, we value face-to-face interactions that foster our culture of learning, creativity, and teamwork. Although this will be a remote position, we believe the best way to start a great partnership is with in-person interaction. Therefore, the final interview for the recruiting process will be held on-site at our Mount Horeb, WI office. This visit allows you to see our workspace firsthand, engage directly with your potential teammates, and get a clear picture of our daily operations. Travel & Logistics If you are traveling from out of town, Duluth Trading Company will fully coordinate and fund all travel arrangements and accommodations. Our goal is to ensure you can focus entirely on your interviews while we handle the logistics. Benefits - Multiple Medical plan options - Dental & Vision plans - Medical and Dependent Care Flexible Spending Accounts - Health Savings Account including company contributions - Company paid Life Insurance and AD&D - Company paid Short-Term Disability - Other various voluntary benefits including: Accident, Critical Illness, Hospital Indemnity, Long-Term Disability and Supplemental Life Insurance - 401(k) Employer Match - Parental Leave - Paid holidays: New Year’s Day, Martin Luther King Jr. Day, Memorial Day, Juneteenth, Independence Day, Labor Day, Thanksgiving Day, Christmas Eve, Christmas Day - Paid Time Off: take it as you need it policy for exempt employees - Daily pay available - 40% Employee Discount - Flexible Fridays - Onsite fitness center Position Compensation Outline Compensation Range: $100,000 to $125,000/year. This position is eligible to participate in the company bonus program. Compensation listed is for the full-time position at this specific location and is based on several factors, including experience and qualifications. Benefits and perks may have eligibility requirements and are subject to change.