Designs, deploys, troubleshoots, and continuously improves global LAN, WAN, Wi-Fi, cloud, manufacturing, and hybrid network infrastructure. Responsibilities include Zero Trust security, firewall and NAC management, SD-WAN, VPN, cloud connectivity, automation using Python, Ansible, and Terraform, observability, capacity planning, incident management, documentation, architecture reviews, and mentoring engineers.
This position is ideal for a hands-on, senior-level network engineer to join the Global Infrastructure and Network team as a Senior Network Engineer, responsible for the design, implementation, troubleshooting, and continuous improvement of global network services across enterprise, cloud, and manufacturing environments.
Partnering with cross-functional teams including Cloud, Security, and Infrastructure, you will architect, build, and troubleshoot secure, reliable, and scalable network infrastructure while driving the transformation from traditional network support to a modern, automated, and platform-driven organization. This role is critical in delivering hands-on technical depth for business continuity, cloud transformation, and Zero Trust security strategy at global scale.
Key Responsibilities
· Design, deploy, and maintain global network infrastructure across multiple regions, ensuring high availability, performance, and reliability of LAN, WAN, Wi-Fi, and cloud connectivity services.
· Perform advanced troubleshooting and root-cause analysis (packet captures, routing/switching diagnostics, performance baselining) to resolve complex, multi-domain network incidents and drive down MTTR.
· Configure, harden, and operate Zero Trust network architecture, including identity-based segmentation, NAC policy sets, and day-to-day firewall rule/policy management.
· Build and troubleshoot hybrid cloud networking across on-prem and cloud environments (Azure and AWS), including routing (BGP/OSPF), private endpoints, VNet/VPC peering, and DNS.
· Design, configure, and tune SD-WAN, VPN, and private interconnect solutions for resilient, low-latency connectivity.
· Write and maintain automation scripts and API-driven tooling (Python, Ansible, Terraform) to streamline provisioning, configuration management, and integration into CI/CD pipelines.
· Build and maintain observability instrumentation (metrics, logs, traces) and execute ITIL-aligned incident, problem, and change management processes as a technical lead.
· Apply analytics and AIOps tooling to proactively identify degradation trends; conduct deep-dive root cause analysis and implement systemic technical fixes.
· Conduct network capacity planning, performance optimization, and resilience/failover testing at the configuration and design level.
· Partner with Cloud, Security, Infrastructure, and Application teams as the hands-on network SME supporting cloud migration and digital transformation initiatives.
· Contribute deep technical expertise to network architecture reviews, design documentation, and strategic engineering initiatives.
· Serve as a technical mentor to other engineers, sharing expertise on complex troubleshooting, design patterns, and automation best practices.
· Produce and maintain detailed network diagrams, run books, and technical documentation to support operational consistency.
Skills, Knowledge & Expertise
- Education: Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field; advanced degree preferred.
- Experience:
- 8+ years of hands-on experience in network engineering and operations
- Proven experience working in and supporting 24x7 global network environments
- Technical Skills:
- Deep, hands-on expertise in enterprise networking (LAN/WAN, routing protocols such as BGP/OSPF/EIGRP, switching, VLANs, Wi-Fi)
- Strong hands-on configuration and troubleshooting experience with SD-WAN architectures
- Hands-on network security expertise (firewall rule authoring, NAC, segmentation, Zero Trust implementation)
- Cloud networking experience (Azure and/or AWS) including VNet/VPC design, routing, and private connectivity
- Proficiency in network automation and scripting (Python, Ansible, Terraform, REST APIs, or similar)
- Skilled in packet capture and protocol analysis (Wireshark or similar) for advanced troubleshooting
- Problem-Solving & Communication
- Strong analytical and problem-solving skills for complex, multi-layer network issues
- Clear technical communication skills, including writing design docs and run books
- Proven ability to work effectively within cross-functional technical initiatives
- Teamwork:
- Comfortable collaborating with globally distributed technical teams
- Strong collaboration across technical and business functions
About
Your growth and well-being:At Align, every smile matters. We’re committed to helping you thrive by supporting the health, growth, and well-being of our team members through a variety of tools and programs. While specific offerings may vary by location and role, Align employees can typically expect:Health and well-being programs to keep you thriving in both body and mind.Employee-exclusive discounts on Invisalign products.Learning opportunities through online learning resources and support for your individual development plans.Inclusive, global workplace that fosters collaboration, recognition and belonging.Country and/or role specific details will be shared with you by your recruiter during the interview process. Discover Align:We are a global community of game-changers and smart team players, united by our belief in the power of a smile. Our dynamic team of exceptional employees is dedicated to transforming the industry and creating extraordinary outcomes every day.Align’s core values of agility, customer, and accountability are more than words to work by, they are words we live by. The actions we take every day speak to who we are as a company and our focus on being truly impactful. We celebrate our differences, and the many ways we support one another— ultimately creating a more inclusive organization and world as we continue transforming smiles and changing lives.We foster a culture where thinking differently and seeking new experiences are not just encouraged but celebrated. With the Align Mindset, we empower each other, ensuring every voice is heard and valued in an inclusive environment that inspires creativity and collaboration.At Align, we believe in the power of a smile, and we know that every smile is as unique as our employees. As we grow, we are committed to building a workforce rich in diverse cultural backgrounds and life experiences, fostering a culture of open-mindedness and compassion. We live our company values by promoting healthy people and healthy communities, all with the intent of changing millions of lives, one unique smile at a time. As part of our commitment to innovation, Align Technology includes exocad and Cubicure, companies that enhance our offerings and extend our impact to industry transformation.Eager to learn how we embrace our global differences and nurture employee well-being? Explore Align's culture here!Want to discover more about exocad and Cubicure? Click on their names for additional information.
Similar Jobs
Security
Design, deploy, and operate Hack The Box’s global, multi-site data center network. Responsibilities include BGP, EVPN-VXLAN, JunOS and Juniper platform management, network automation, monitoring and observability, capacity planning, site expansions, troubleshooting, documentation, and on-call incident response. The role collaborates with systems, platform, SRE, security, and product engineering teams supporting VMware, Kubernetes, and Ceph environments.
Top Skills:
AnsibleBgpCephCni PluginsEvpn-VxlanGoGrafanaIp FabricIptablesJuniper MxJuniper QfxJunosKubernetesLinuxLoad BalancersNftablesNornirNvme-OfOspfPrometheusRdmaService MeshesSnmpSpine-LeafStreaming TelemetryTerraformVlansVMwareVrfs
Information Technology • Consulting
Provide regional technical leadership and high-level installation, configuration, documentation, management, and troubleshooting for LAN/WLAN/WAN across DoD/DHA medical facilities in Europe. Advise government and contractor staff, lead network specialists, maintain standards, and ensure security and high availability using tools like Orion SolarWinds, ARMIS, and Ansible.
Top Skills:
802.10802.11802.1D802.1Q802.1W802.3802.3U802.3Z802.5803.2AnsibleArmisAtmBgpBindCable TestersCiscoDhcpDnsEia/Tia Cable StandardsEigrpEthernetFast EthernetFddiGigabit EthernetHdlcHTTPHttpsIntrusion Detection SystemsMibMrtgNetwork SniffersOpenvmsOptical Time Domain ReflectometerOrion SolarwindsOspfOtdrPppRs-449RstpSmtpSnmpTcp/IpUnixV.35VpnVrrpWindows Active DirectoryWindows NetworksXdm
Information Technology
Provide O&M and engineering support for classified DoD networks (NIPRNET, SIPRNET, JWICS) including LAN/fiber installations, as-built documentation, encryption device configuration, IP address management, and coordination with DISA and contractors for WAN optimization and redundancy.
Top Skills:
Cisco Ccnp EnterpriseCisspComptia Casp CeDisaFiber Optic Cable TerminationsIp Address ManagementJwicsLan WiringNetwork Encryption DevicesNiprnetSiprnetWan Optimization
What you need to know about the Bristol Tech Scene
Along with Gloucester, Swindon and Bath, Bristol is part of the "Silicon Gorge" tech hub, a region in the U.K. renowned for its high-tech and research-driven industries, with a particular emphasis on sustainability and reducing environmental impact. As the European Green Capital, Bristol is home to 25,000 cleantech companies, including Baker Hughes and unicorn Ovo Energy. The city has committed to achieving net-zero emissions within the next decade.
