Senior IT Network Engineer (Durham, NC) #4506

Our mission is to detect cancer early, when it can be cured. We are working to change the trajectory of cancer mortality and bring stakeholders together to adopt innovative, safe, and effective technologies that can transform cancer care.

We are a healthcare company, pioneering new technologies to advance early cancer detection. We have built a multi-disciplinary organization of scientists, engineers, and physicians and we are using the power of next-generation sequencing (NGS), population-scale clinical studies, and state-of-the-art computer science and data science to overcome one of medicine’s greatest challenges.

GRAIL is headquartered in the bay area of California, with locations in Washington, D.C., North Carolina, and the United Kingdom. It is supported by leading global investors and pharmaceutical, technology, and healthcare companies.

For more information, please visit grail.com

GRAIL is seeking a Senior IT Network Engineer to join our IT Infrastructure team. In this role, you will be a hands-on technical contributor responsible for building, operating, and supporting secure, scalable, and highly available network infrastructure across AWS and hybrid environments. You will play a critical role in enabling reliable connectivity for GRAIL’s cloud platforms, on-premise systems, and mission-critical applications that support early cancer detection.

This role emphasizes deep technical execution and operational ownership. You will design, implement, monitor, and troubleshoot AWS networking—primarily Amazon VPC–based architectures—while also supporting on-premise and data center networking using Juniper and Aruba platforms and Palo Alto firewalls. You will partner closely with Platform, Security, SRE, and Application teams to ensure performance, availability, and security across the network stack.

This is a hybrid role based in Durham, NC. Our current flexible work arrangement policy requires that a minimum of 60%, or 24 hours, of your total work week be on-site. Your specific schedule, determined in collaboration with your manager, will align with team and business needs and could exceed the 60% requirement for the site.

Responsibilities:
• Design, build, and maintain AWS networking components, including VPCs, subnets, route tables, Internet Gateways, NAT Gateways, VPC endpoints, and Transit Gateway.
• Configure and manage AWS network security controls, including Security Groups, Network ACLs, AWS Network Firewall, and AWS WAF, in alignment with security best practices.
• Implement and support hybrid connectivity solutions, including AWS Direct Connect and Site-to-Site VPNs.
• Configure and support traffic management and DNS services using Amazon Route 53 and Elastic Load Balancing (ALB, NLB, GLB).
• Operate and troubleshoot on-premise and data center networking environments using Juniper and Aruba platforms, including routing, switching, VLANs, VRFs, and BGP/OSPF.
• Configure and support Palo Alto Networks firewalls, including security policies, NAT, VPNs, and traffic inspection.
• Implement and maintain network monitoring, logging, alerting, and dashboards using tools such as VPC Flow Logs, CloudWatch, Route 53 health checks, firewall logs, and device telemetry.
• Participate in and often lead network-related incident response, performing root-cause analysis and contributing to corrective and preventive actions.
• Support capacity planning, performance analysis, and validation of throughput, latency, and failover behavior.
• Build and maintain infrastructure-as-code for network components using Terraform or CloudFormation, and contribute to CI/CD workflows.
• Serve as a senior technical resource, reviewing designs, mentoring junior engineers, and communicating technical risks and tradeoffs to cross-functional partners.
These responsibilities summarize the role’s primary responsibilities and are not an exhaustive list. They may change at the company’s discretion.

Required Qualifications:
• 8+ years of experience working in network engineering roles with hands-on production responsibility.
• 5+ years of hands-on experience designing and operating AWS networking, including Amazon VPC, subnets, routing, Security Groups, and Network ACLs.
• Hands-on experience with AWS Transit Gateway, Site-to-Site VPN, and Direct Connect.
• Experience configuring and supporting Amazon Route 53 and Elastic Load Balancing.
• 5+ years of experience supporting enterprise or data center networking environments.
• Hands-on experience with Juniper and/or Aruba networking platforms.
• Hands-on experience with Palo Alto Networks firewalls.
• Demonstrated experience implementing network monitoring, logging, and alerting solutions.
• Strong troubleshooting skills across networking and application layers (DNS, TCP/IP, TLS, HTTP).
• Bachelor’s degree in Computer Science, Information Technology, or related field, or equivalent practical experience.

Preferred Qualifications:
• Experience working in healthcare, life sciences, or other regulated environments.
• Familiarity with AWS Network Firewall, AWS WAF, Global Accelerator, or AWS PrivateLink.
• Experience with infrastructure automation and scripting using Terraform, Python, or Bash.
• Exposure to zero-trust networking models or SASE / SD-WAN solutions.
• Relevant certifications such as AWS Advanced Networking, CCNP, or Palo Alto Networks certifications.

This role may be eligible for other forms of compensation, including an annual bonus and/or incentives, subject to the terms of the applicable plans and Company discretion. This range reflects a good-faith estimate of the range that the Company reasonably expects to pay for the position upon hire; the actual compensation offered may vary depending on factors such as the candidate’s qualifications. Employees in this role are also eligible for GRAIL’s comprehensive and competitive benefits package, offered in accordance with our applicable plans and policies. This package currently includes flexible time-off or vacation; a 401(k) retirement plan with employer match; medical, dental, and vision coverage; and carefully selected mindfulness programs.

GRAIL is an equal employment opportunity employer, and we are committed to building a workplace where every individual can thrive, contribute, and grow. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, gender, gender identity, sexual orientation, age, disability, status as a protected veteran, , or any other class or characteristic protected by applicable federal, state, and local laws. Additionally, GRAIL will consider for employment qualified applicants with arrest and conviction records in a manner consistent with applicable law and provide reasonable accommodations to qualified individuals with disabilities. Please contact us at [email protected] if you require an accommodation to apply for an open position.

GRAIL maintains a drug-free workplace. We welcome job-seekers from all backgrounds to join us!