At Blue Cross Blue Shield of Nebraska (BCBSNE), the network is the backbone of healthcare for hundreds of thousands of Nebraskans. We don't just talk about innovation — we live it every single day. Our engineers use GitHub Copilot, Microsoft Copilot, and custom-built AI agents for engineering, incident response, and operational decision-making. We maintain an active AI Community of Practice (AI CoP) that drives continuous experimentation and adoption across the technology organization. As our Cloud Network Engineer, you will own the design and operation of a modern hybrid and multi-cloud network environment — working hands-on with Azure Virtual WAN, Palo Alto Next-Generation Firewalls, BGP routing, and Infrastructure as Code. If you want to build networks that directly improve lives and do it with cutting-edge tools, this is your role. The ideal candidate will live within driving distance of the Omaha, Nebraska office. This position allows remote flexibility but will have 1 day per week in the office.   If living in one of our approved states (Florida, Iowa, Kansas, Minnesota, Missouri, Nebraska, North Dakota, andTexas)  –this person may travel to our headquarters based on business needs.  What you'll do: - Azure Cloud Networking— Design, deploy, and manage Azure vWAN,VNets, ExpressRoute, VPN gateways, and hybrid connectivity. Architect multi-cloud patterns across Azure. - Palo Alto Next-Generation Firewalls— Manage NGFW policies, Panorama, GlobalProtectVPN, network segmentation, and Zero Trust enforcement across on-premises and cloud environments. - Routing & Switching— Configure and optimizeBGP peering (eBGP/iBGP, route maps, communities), OSPF, VLAN design, route optimization, and Layer 3/4 troubleshooting. - Infrastructure as Code & Automation— Build and maintaininfrastructure using Bicep, ARM templates, Python, PowerShell, and GitHub Actions CI/CD pipelines. - AI-Augmented Engineering— Leverage GitHub Copilot, Microsoft Copilot, and internal AI agents daily for troubleshooting, documentation, code generation, and incident triage. Actively contribute to the AI Community of Practice (AI CoP). - Network Observability & Monitoring— Implement and manage monitoring with SolarWinds, Azure Monitor, Network Watcher, traffic analysis, and root cause analysis (RCA). - Security-First Design— Collaborate with Cybersecurity on micro-segmentation, private endpoints, NSGs, and ensure HIPAA and SOX compliance across all network architectures. - Disaster Recovery & Resilience— Develop and maintainDR plans, high-availability architectures, and failover strategies across hybrid environments. - Collaboration & Mentorship— Work within Agile frameworks (Scrum/Kanban), partner cross-functionally with Managed Services, Cloud Engineering, and Application teams. Mentor peers and share knowledge. - On-Call & Incident Response— Participate in a 24×7 on-call rotation. Drive P1/P2rapid resolution, conduct post-incident reviews, and produce RCA documentation. To be considered for this position, you must have: - 5+yearshands-on network engineering experience focused on cloud/hybrid environments - Deep Azure networking knowledge:vWAN,VNets, ExpressRoute, VPN Gateway, Azure Firewall, NSGs, Private Endpoints, Load Balancers - Hands-on Palo Alto NGFW: configuration, policy management, Panorama,GlobalProtect - Strong BGP (eBGP/iBGP peering, route maps, communities), OSPF, static routing across hybrid topologies - Infrastructure as Code: Bicep or ARM templates - Scripting/automation: Python, PowerShell - Network security: Zero Trust Architecture, micro-segmentation, IPSEC VPN,firewallpolicy design - Network monitoring: SolarWinds, Azure Monitor, Network Watcher, or equivalent - Agile methodologies (Scrum/Kanban) and cross-functional team experience - Strong communicationskills for technical and leadership audiences - Associate's degree in Engineering, Computer Science, or related field — or equivalent experience The strongest candidates for this position will also possess: - Certifications: AZ-700, PCNSE, CCNP, JNCIS/JNCIP, or equivalent (preferred, notrequired) - Cisco network technologies — routers, switches, ASA VPNs, Cisco ISE, wireless controllers (secondary skillset) - Juniper network technologies — SRX firewalls, EX/QFX switches, Junos OS (secondary skillset) - SD-WAN solutions and WAN optimization - Multi-cloud networking (Azure + AWS)includingcross-cloud connectivity and transit architectures - CI/CD pipelines (GitHub Actions, Azure DevOps) for infrastructure deployment - AI-assisted engineering tools (GitHub Copilot, Microsoft Copilot, CopilotStudio) —or strong enthusiasm to adopt - Healthcare or regulated industry experience (HIPAA, SOX, PCI-DSS) - Kubernetes networking concepts (CNI, ingress controllers, service mesh) - DNS/DHCP/IPAM management (Infoblox or equivalent)