GRAIL is seeking a
Network Engineer II to join our
Platform Engineering organization. Our team designs, builds, and operates the enterprise networking infrastructure that powers GRAIL's laboratories, data centers, cloud platforms, and corporate environments. We are responsible for delivering highly available, secure, and scalable network services across on-premises infrastructure and AWS.
In this role, you will be responsible for engineering, operating, and continuously improving GRAIL's hybrid network infrastructure, including campus, laboratory, data center, WAN, cloud networking, and security platforms. You will work with Juniper and Aruba switching and routing, Palo Alto firewalls, AWS networking, VPN technologies, monitoring platforms, and infrastructure automation to build reliable, scalable, and secure networking solutions.
This is an engineering-focused role rather than a traditional network operations position. We are looking for someone who enjoys designing scalable infrastructure, automating repetitive tasks, improving platform reliability, and partnering across engineering teams to deliver secure and resilient networking services.
You will collaborate closely with Platform Engineering, Cloud Engineering, Security, Infrastructure, and application teams to support business-critical services while driving operational excellence through automation, observability, and modern networking practices.
This role is based in
Durham, North Carolina (RTP) and requires regular on-site presence to support laboratory and data center infrastructure. This is an onsite position that requires on call and overtime flexibility.
Responsibilities- Design, implement, and support enterprise network infrastructure across campus, laboratory, data center, manufacturing, and AWS cloud environments.
- Deploy, maintain, and troubleshoot Juniper and Aruba switching and routing infrastructure, including Layer 2/Layer 3 networking, VLANs, routing protocols, high availability, and modern data center networking technologies.
- Configure, maintain, and optimize Palo Alto Networks firewalls, security policies, NAT, VPNs, GlobalProtect, URL filtering, and related security services.
- Design, implement, and support AWS networking services including VPCs, Transit Gateway, Route Tables, Security Groups, Network ACLs, Site-to-Site VPNs, Direct Connect integrations, and hybrid connectivity.
- Develop infrastructure automation using Python, Ansible, Terraform, PowerShell, or similar technologies to improve provisioning, configuration management, operational consistency, and compliance.
- Build and maintain network monitoring, alerting, dashboards, and operational visibility using New Relic and other enterprise monitoring platforms.
- Investigate and resolve complex routing, switching, firewall, VPN, cloud networking, DNS, DHCP, and connectivity issues across hybrid environments.
- Partner with Platform Engineering, Cloud Engineering, Security, Infrastructure, and application teams to support new infrastructure deployments, cloud migrations, and strategic platform initiatives.
- Participate in infrastructure lifecycle management, including hardware refreshes, software upgrades, patching, disaster recovery planning, and configuration standardization.
- Develop and maintain technical documentation, network diagrams, operational runbooks, and engineering standards.
- Participate in an on-call rotation supporting production infrastructure as required.
- Leverage modern AI-assisted engineering tools responsibly to improve troubleshooting, automation development, documentation, and operational efficiency.
These responsibilities summarize the role's primary responsibilities and are not an exhaustive list. They may change at the company's discretion.
Required Qualifications- 4+ years of experience designing, implementing, and supporting enterprise network infrastructure.
- 3+ years of hands-on experience with Juniper and/or Aruba enterprise networking platforms, including switching, routing, and network troubleshooting.
- 3+ years of experience managing Palo Alto Networks firewalls, including security policies, NAT, VPNs, GlobalProtect, and threat prevention.
- 2+ years of hands-on experience with AWS networking services, including VPCs, Transit Gateway, Route Tables, Security Groups, Network ACLs, Site-to-Site VPNs, and hybrid cloud networking.
- Experience supporting enterprise routing and switching technologies including BGP, OSPF, VLANs, STP, LACP, VRRP, and Layer 2/Layer 3 troubleshooting.
- Experience developing infrastructure automation using Python, Ansible, Terraform, PowerShell, or similar scripting and Infrastructure as Code tools.
- Experience implementing and supporting network monitoring and observability platforms such as New Relic, SolarWinds, Datadog or equivalent.
- Strong troubleshooting skills across networking, cloud connectivity, VPNs, firewalls, DNS, DHCP, enterprise infrastructure, and network security.
- Experience working in Linux and Windows enterprise environments.
- Bachelor's degree in Computer Science, Information Technology, Engineering, or equivalent practical experience.
- Willingness to participate in an on-call rotation supporting production infrastructure as required.
Preferred Qualifications- Experience supporting hybrid cloud infrastructure across AWS and enterprise data centers.
- Experience with EVPN/VXLAN architectures and modern data center networking.
- Experience with AWS Direct Connect and hybrid networking architectures.
- Experience supporting Aruba CX switching platforms and Aruba Central.
- Experience managing enterprise VPN solutions including GlobalProtect.
- Experience implementing Infrastructure as Code using Terraform.
- Experience with Git-based version control and CI/CD pipelines for infrastructure automation.
- Experience supporting VMware vSphere environments and virtualization networking.
- Knowledge of DNS, DHCP, Active Directory, PKI, RADIUS, and enterprise authentication services.
- Experience supporting laboratory, biotechnology, healthcare, manufacturing, or regulated environments.
- Juniper (JNCIS/JNCIP), Aruba (ACSA/ACSP), Palo Alto (PCNSA/PCNSE), AWS Associate, or equivalent industry certifications.
- Strong written and verbal communication skills with the ability to collaborate across Platform Engineering, Cloud Engineering, Security, Infrastructure, and application teams.
- Experience mentoring junior engineers and driving operational improvements through automation and engineering best practices.
- Comfortable using modern AI-assisted engineering tools while applying sound engineering judgment and security best practices.
The expected, full-time, annual base pay scale for this position is $94,000 - $125k
This role may be eligible for other forms of compensation, including an annual bonus and/or incentives, subject to the terms of the applicable plans and Company discretion. This range reflects a good-faith estimate of the range that the Company reasonably expects to pay for the position upon hire; the actual compensation offered may vary depending on factors such as the candidate's qualifications. Employees in this role are also eligible for GRAIL's comprehensive and competitive benefits package, offered in accordance with our applicable plans and policies. This package currently includes flexible time-off or vacation; a 401(k) retirement plan with employer match; medical, dental, and vision coverage; and carefully selected mindfulness programs.
