Data Center Network Engineer

The Berkeley Lab is hiring a Data Center Network Engineer for ESnet, which provides high-bandwidth, reliable connections linking scientists at national labs, universities, and research institutions. Funded by the DOE Office of Science, ESnet connects to DOE sites, CERN, and other global networks, enabling collaboration on critical scientific challenges like energy, climate science, and the origins of the universe.

ESnet seeks an experienced Network Engineer to design, implement, and operate mid-scale enterprise data centers using technologies such as EVPN, VXLAN, DCI, and automation tools. The ideal candidate will have expertise in data center networking, network architecture, and automation/orchestration tools, along with strong problem-solving, project management, and communication skills. This role offers an opportunity for professional growth and the chance to contribute to ESnet's infrastructure.

What We Offer:

• Competitive salary and benefits
• Opportunity to work with cutting-edge technologies
• Professional development, including training and certifications
• Flexible work arrangements, including remote options

What You Will Do:

• Maintain and enhance the ESnet data center network for optimal performance and resilience.
• Lead large projects independently and collaborate in team settings.
• Manage time effectively to meet deadlines and balance priorities.
• Participate in an on-call rotation, including after hours.
• Provide excellent customer support and tailored technical solutions.
• Create detailed technical documentation, including project scopes, schedules, procedures, and diagrams.
• Analyze and resolve complex issues requiring in-depth evaluation.
• Travel as needed.
• Collaborate with cross-functional teams to align with organizational goals.
• Specify, procure, and manage network equipment and subcontractors for remote installations.
• Offer technical leadership and mentor junior team members.
• Manage TAC cases with multiple vendors.
• Engage with the US and international research and education networking communities.
• Pursue continuous self-improvement through education and experience.
• Work with security teams to ensure network security and regulatory compliance.

What is Required:

• Bachelor's degree in Computer Science, Engineering, or related field, or equivalent experience.
• 6+ years of networking experience, including installing, testing, and operating network components (routers, switches, firewalls, etc.).
• Proven expertise in network engineering, troubleshooting, monitoring, and using network analytics tools.
• Strong understanding of data center network architectures, protocols (BGP, ISIS, VRFs, VXLAN, EVPN), and technologies.
• Experience with enterprise network equipment (routers, servers, switches, power/cabling infrastructure).
• Proficient in configuring multi-vendor devices and firewalls via CLI and automation platforms.
• Experience in IPv6-only and dual-stack IPv6/IPv4 networks.
• Basic understanding of MPLS overlay solutions for Layer 2/3 services.
• Experience in designing, operating, and troubleshooting data center interconnect solutions.
• Ability to use flow data for network troubleshooting and planning.
• Skilled in physical layer troubleshooting (optics, cabling, fiber).
• Experience designing and operating out-of-band management networks.
• Proficient in network programming (Python) and automation tools (Ansible, Apstra).
• Strong understanding of network security (Palo Alto firewall, access control, threat mitigation).
• Adaptable to multi-vendor, multi-topology networks.
• Strong written and verbal communication skills.
• Able to resolve technical and interpersonal conflicts with diplomacy and tact.

Desired Qualifications:

• Familiar with containerization technologies (Docker, Kubernetes).
• Experience with cloud platforms (AWS, Azure, Google Cloud).
• Knowledge of network monitoring and analytics tools (nfdump, Prometheus, Grafana, Splunk).
• Basic understanding of NETCONF/YANG and network automation design.
• Familiar with network monitoring and alerting best practices.
• Experience with Google Suite, Microsoft Office, Zoom, Slack, and web-based diagramming tools (Lucidchart, Visio, etc.).
• Ability to operate and troubleshoot complex DNS environments (BIND, DNSSEC, IPAM, Dyn DNS, DHCP6).

Notes:

• This is a full-time career appointment, exempt (monthly paid) from overtime pay.
• The full salary range of this position is between $129,948.00 to $219,276.00 per year and is expected to pay between a targeted range of $146,184.00 to $178,668.00 per year depending upon candidate's skills, knowledge, and abilities, including education, certifications, and years of experience.
• This position is subject to a background check. Any convictions will be evaluated to determine if they directly relate to the responsibilities and requirements of the position. Having a conviction history will not automatically disqualify an applicant from being considered for employment.
• As a condition of employment, the finalist will be required to disclose if they are subject to any final administrative or judicial decisions within the last seven years determining that they committed any misconduct, are currently being investigated for misconduct, left a position during an investigation for alleged misconduct, or have filed an appeal with a previous employer.
• Work may be performed on-site, hybrid, full-time telework. The primary location for this role is Lawrence Berkeley National Lab, 1 Cyclotron Road, Berkeley, CA. Work must be performed within the United States.

Want to learn more about working at Berkeley Lab? Please visit: careers.lbl.gov

Berkeley Lab is an Equal Opportunity and Affirmative Action Employer. In support of our rich community, all qualified applicants will be considered for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, or protected veteran status.