Network Automation Engineer

Invenergy drives innovation in energy. Powered by decades of entrepreneurial experience and unparalleled execution, we solve the energy challenges facing our customers and communities. We provide power generation and storage solutions at scale around the world to create a cleaner energy future. We develop. We build. We own. We operate. We are Invenergy.

This position will be open for application for at least 3 calendar days from the posting date. This position will remain open for application based on business need, which may be before or after the 3-day posting window.

Job Description Position Overview

Invenergy is seeking a Network Automation Engineer to join our Technology Solutions team. In this role, you will serve as a senior engineer responsible for architecting, implementing, and continuously improving Invenergy's global network. The ideal candidate will act as a senior technical resource, mentor other engineers, drive standards, and implement efficient automation-driven solutions that reduce operational complexity across sites worldwide. Candidates must have deep hands-on expertise with routing, switching, firewalls, datacenter fabrics, wireless, scripting and other related network automation technologies. You’ll be expected to automate, innovate, and stabilize - writing code that replaces manual effort, builds resiliency, and enhances performance.

- Architect scalable Layer 2/3 and Layer 3 focused network designs for datacenters, corporate campuses, OT sites, and the global WAN.

- Design and deploy BGP-centric architectures, including multi-site routing, route-policy design, and path-engineering.

- Design and deploy VXLAN BGP EVPN datacenter fabrics (Arista MSS, Cisco, or equivalent), including VTEPs, MLAG, VRFs, security segmentation, and east-west flow policy.

- Develop global network standards, patterns, and declarative code-driven reference architectures to improve consistency across all Invenergy facilities.

- Efficiently deploy, manage, and troubleshoot network firewalls (Primarily Palo Alto, Azure, and Fortinet), VPNs, and implement network security policies in partnership with security and compliance stakeholders.

- Design security segmentation strategies that align with NERC CIP requirements (ESP/PSP boundaries, EACMS, monitoring, log retention).

- Collaborate with cross-functional teams on project delivery, change management, and security/compliance workflows.

- Build and maintain repeatable and testable network automation workflows using Python, Ansible, Git-based CI/CD, and modern configuration-management practices.

- Collaborate and develop systems, not one-off scripts: enforce idempotent workflows, automated validation, linting, and policy guardrails.

- Participate in a 24×7 on-call rotation to provide critical support as an expert network escalation resource.

Minimum Qualifications

- Bachelor’s degree in Information Technology, Computer Engineering, or related field.

- 3+ years of network engineering experience in an enterprise environment.

- Deep knowledge of L2/L3 routing and switching (Cisco, Arista, or equivalent).

- Strong experience with large enterprise network BGP implementations (both on premises and cloud).

- Strong experience with VRFs, segmentation, QoS, STP, MLAG/VPC and related redundancy protocols.

- Strong hands-on experience with Palo Alto firewalls and Panorama-managed deployments.

- Experience designing and supporting enterprise wireless (Aruba, Cisco, or equivalent).

- Experience with Python and/or Ansible, Git, and the fundamentals of CI/CD facilitated network automation.

- Strong communication skills; ability to lead technical discussions and mentor others.

- Some travel is required.

- Eligible to work in the United States without the need for employer visa sponsorship now or in the future.

Preferred Qualifications

- Cisco or Arista certifications (CCNP, Devnet, ACE etc.).

- Palo Alto Networks Certified Network Security Engineer (PCNSE).

- Aruba Certified Mobility Associate (ACMA) or Aruba Certified ClearPass Professional (ACCP).

- Formal training or certification in NERC CIP compliance.

- Working knowledge of NERC CIP standards and their application to critical infrastructure and/or formal training or certification in NERC CIP compliance.

- Experience in the energy, utilities, or critical infrastructure sectors.

- Familiarity with network monitoring/observability and management tools (PRTG, Prometheus, Solarwinds, etc.).

- ITIL 4.0 Foundations or other ITIL certification.

Base Pay

$135,000.00 - $150,000.00 USD Annual

Bonus: 25% - 40%

The base pay range reflects the minimum and maximum target salary for the position. Invenergy considers a number of factors when determining base pay offers such as the scope and responsibilities of the position and the candidate's experience, education and skills.

In addition to base pay, the total annual compensation package may also include eligibility to participate in our bonus program(s) which are designed to reward individual and company performance. Your recruiter can share more about bonus eligibility for this position during the hiring process.

Invenergy offers a variety of other benefits including medical, dental and vision insurance, 401k, paid time off, etc.

Invenergy LLC is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to, among other things, race, color, religion, sex, sexual orientation, gender identity, national origin, age, status as a protected veteran, or disability.