Senior Network Engineer

About this role

<div class="content-intro"><p><strong>Company Overview:<br><br></strong><a href="https://www.blinkhealth.com/">Blink Health </a>is the fastest growing healthcare technology company that builds products to make prescriptions accessible and affordable to everybody.  Our two primary products – BlinkRx and Quick Save – remove traditional roadblocks within the current prescription supply chain, resulting in better access to critical medications and improved health outcomes for patients. <br><br><a href="https://www.blinkhealth.com/blinkrx">BlinkRx </a>is the world’s first pharma-to-patient cloud that offers a digital concierge service for patients who are prescribed branded medications. Patients benefit from transparent low prices, free home delivery, and world-class support on this first-of-its-kind centralized platform. With BlinkRx, never again will a patient show up at the pharmacy only to discover that they can’t afford their medication, their doctor needs to fill out a form for them, or the pharmacy doesn’t have the medication in stock. <br><br>We are a highly collaborative team of builders and operators who invent new ways of working in an industry that historically has resisted innovation. Join us!</p></div><h1>About the Role</h1> <p>We are looking for a Senior Network Engineer to join our Networking team. In this role, you will be a hands-on owner of our hybrid network — spanning physical office environments, distributed sites, and AWS cloud connectivity. The day-to-day work is rooted in physical infrastructure: Meraki switches and access points, Palo Alto firewalls, Starlink and ISP connectivity, site-to-site VPN, and the routing and switching that keeps our offices, warehouses, and remote sites online.</p> <p>You will also own the AWS networking layer that connects this physical footprint to our cloud workloads, and you'll automate that work through infrastructure-as-code so changes are repeatable, reviewable, and reliable.</p> <p>This is a role for an engineer who is genuinely at home in the network stack — someone who can walk into a wiring closet, troubleshoot a misbehaving switch stack, tune a wireless deployment, debug a BGP session, and then go write the Terraform to make sure the next deployment doesn't have the same problem.</p> <h1>What You'll Do</h1> <h2>Network Infrastructure</h2> <ul> <li>Manage, monitor, and maintain our office, site, and distributed network infrastructure — Meraki switches and wireless access points, Palo Alto firewalls, Starlink links, ISP connections, and site-to-site VPN</li> <li>Design and deploy office and site networks: switching, routing, VLAN segmentation, wireless coverage, and secure remote connectivity</li> <li>Tune wireless deployments — perform RF planning, capacity modeling, channel optimization, and troubleshoot roaming and interference issues</li> <li>Configure and harden Palo Alto firewalls and VPN — security policies, NAT, IPSec tunnels, Global Protect, and Panorama-based centralized management</li> <li>Troubleshoot complex Layer 1 through Layer 7 issues across the physical and logical stack using packet captures (Wireshark, tcpdump), ThousandEyes, Fiddler, nmap, and other diagnostic tools</li> <li>Maintain monitoring and alerting via PRTG, Nagios, Grafana, New Relic, and ThousandEyes</li> <li>Serve as the technical escalation point for network incidents — own production outages from first alert through root cause and post-incident improvements</li> <li>Participate in on-call rotation</li> </ul> <h2>Cloud Network Operations</h2> <ul> <li>Maintain our multi-VPC AWS environment: VPCs, subnets, route tables, Security Groups, NACLs, and VPC peering</li> <li>Operate Transit Gateway, Direct Connect, and Site-to-Site VPN connectivity between AWS and our physical sites</li> <li>Manage Route 53 public and private zones, DNS forwarders, and hybrid name resolution</li> <li>Support and tune AWS Load Balancers (ALB, NLB) for application teams</li> <li>Troubleshoot connectivity issues spanning AWS, on-prem, and Kubernetes-based microservices environments</li> </ul> <h2>Automation and Infrastructure-as-Code</h2> <ul> <li>Use Terraform (and Terragrunt where applicable) to deploy and manage networking resources — VPCs, firewall rules, DNS, routing, and Security Groups</li> <li>Contribute to and maintain CI/CD pipelines for network changes through GitHub workflows, peer review, and automated validation</li> <li>Build tools and scripts (Python, Bash) to automate repetitive operational work and reduce toil</li> <li>Prevent configuration drift through code-first network management</li> </ul> <h2>Security and Operational Excellence</h2> <ul> <li>Configure, harden, and patch network devices and services aligned with security best practices</li> <li>Monitor security alerts, investigate incidents, and coordinate with the security team on remediation</li> <li>Validate firewall changes for least-privilege and operational impact before production deployment</li> <li>Maintain network documentation, topology diagrams, runbooks, and change records</li> </ul> <h2>Collaboration</h2> <ul> <li>Partner with engineering teams to troubleshoot network design and connectivity in AWS and Kubernetes-based microservices environments</li> <li>Provide technical consulting on network architecture decisions</li> <li>Communicate clearly with technical and non-technical…