Responsibilities H-E-B’s Digital Tech Network Engineering Teams design, build, and support foundational wired and wireless network and security infrastructure solutions that allow H-E-B to compete as one of the nation’s top omnichannel retailers. As a Senior Network Engineer, you’ll support end-to-end lifecycle management, automation, security, design, deployment, capacity planning, operations, observability, and reliability for H-E-B’s enterprise network. Manages the installation and maintenance of the infrastructure to support these engineering solutions, and analyze current processes and systems, assist in automating repetitive operational functions, and engage in problem management efforts for complex network outages. Once you’re eligible, you’ll become an Owner in the company, so we’re looking for commitment, hard work, and focus on quality and Customer service. “Partner owned” means our most important resources - People - drive the innovation, growth, and success that make H-EB The Greatest Omnichannel Retailing Company. Do you have a: HEART FOR PEOPLE… you can organize multiple engineers, negotiate solutions, and provide upward communication HEAD FOR BUSINESS… you consistently demonstrate and uphold the standards of coding, infrastructure, and process PASSION FOR RESULTS… you’re capable of high-velocity contributions in multiple technical domains We are looking for: − 5+ Years of experience or relevant and transferrable skills preferred − Understanding of the functional area and skill requirements. Uses competencies and experience to resolve a wide range of issues in creative ways What is the work? This Senior Network Engineer role is part of H-E-B’s Network Reliability Engineering (NRE) team and delivers engineering work across Network Operations, Observability, and Automation. The role supports the networks that H-E-B stores, manufacturing facilities, warehouses, transportation operations, corporate offices, data centers, and cloud services depend on. Design & Development with minimal or no supervision Helps drive the design, implementation, support, security, and maintenance of network software, hardware, and services critical to network health. Participates in a rotating 24/7 on-call schedule and serves as a senior technical escalation point for complex network incidents. Coordinates diagnosis, mitigation, and service restoration with engineering teams, service owners, and vendors. Drives and supports automation of network infrastructure activities to reduce manual work, including device certification, onboarding, provisioning, migrations, patching, refreshes, upgrades, decommissioning, monitoring, and incident triage. Leads technical design, code, and configuration reviews. Provides actionable feedback, mentors engineers, and reinforces engineering standards and best practices. Leads technical postmortems and root cause analysis for complex incidents. Tracks assigned corrective actions through completion, incorporates findings into sprint planning, and verifies that fixes address the conditions that led to the incident. Helps design and deploy test environments for validating network software, hardware, and automation before production rollout. Writes and maintains network policies, standards, procedures, runbooks, and technical documentation. Helps define and communicate network service performance measures that support enterprise availability requirements. Proactively manages project and operational priorities, deadlines, and deliverables using Agile planning practices. Evaluates emerging technologies for their fit with the network architecture and their ability to solve operational problems. Contributes to project planning and implementation, including cost analysis and vendor comparisons. Provides technical training and assists with proposals. Works independently on complex objectives and translates them into clear technical requirements that other engineers can implement. Applies knowledge of software-defined networking and security platforms such as Arista, Fortinet, Cisco, and Palo Alto Networks, load balancing platforms such as F5, Avi, and NGINX, and automation tools such as Python, Ansible, GitLab, and the Slack API. Works with spine-leaf architectures, DWDM data center interconnects, AWS, Google Cloud, and network segmentation. Plans, designs, and implements local and wide-area network solutions across platforms and protocols, including IP and VoIP. Troubleshoots network issues and coordinates with vendors on router and switch installations. Network Operations Troubleshoots complex service issues using routing and switching fundamentals, BGP, LAN / WAN, VPNs, VLANs, SNMP, NetFlow, and packet capture. Supports core services such as Infoblox DNS / DHCP / IPAM, highly available and anycast DNS, and NTP. Partners with design and delivery teams to define production acceptance criteria. Validates failover and recovery and confirms that new services have monitoring, runbooks, and clear support ownership. Operates network security platforms such as FortiManager, FortiAnalyzer, Palo Alto Networks Strata Cloud Manager, Prisma SD-WAN, and Aruba ClearPass. Supports automated firewall rule deployment, rule audits, rulebase optimization, and RADIUS / TACACS+ services. Drives network platform vulnerability remediation, configuration hardening, credential rotation, and audit evidence collection in support of applicable PCI, NIST, CIS, and SOX requirements. Network Observability Builds and operates network telemetry pipelines, dashboards, and synthetic monitoring for sites, circuits, SD-WAN paths, and core services. Uses tools such as Prometheus, Grafana, Grafana Alloy, SNMP and Blackbox Exporters, SmokePing, Telegraf, Loki, syslog, Datadog, and ThousandEyes. Connects network indicators such as packet loss, latency, path quality, and DNS failures to critical business services such as store payments. Helps responders identify affected sites and services and verify recovery. Owns alert quality and operational readiness for assigned network services. Tunes thresholds, manages metric cardinality, reduces duplicate alerts, maintains runbooks, and routes actionable alerts through platforms such as PagerDuty and ServiceNow. Defines service level indicators (SLIs), service level objectives (SLOs), and error budgets with service owners. Uses SLO trends, error-budget consumption, and recurring incidents to prioritize reliability improvements and address gaps in internal service objectives and vendor service level agreements (SLAs). Network Automation Builds and maintains the shared tools, source-of-truth integrations, and deployment pipelines that Network Engineering teams use to manage infrastructure as code. Uses tools such as Nautobot, SSoT, Golden Config, Python, Ansible, Airflow, REST APIs, Git, GitLab CI/CD, Terraform, OpenTofu, and GitOps platforms such as Argo CD or Flux. Builds automated pre- and post-change validation, configuration drift detection, staged rollouts, and rollback procedures into network change workflows. Operates network tooling as production services across Kubernetes, Linux, Windows, and public cloud environments. Maintains supporting components such as PostgreSQL and manages secrets and certificate lifecycles using tools such as Vault, PKI, and ACME. Evaluates AI-assisted network operations for practical uses such as telemetry summarization and incident triage. Familiarity with MCP servers and agentic workflows is a plus. What is your background? − A related degree or comparable formal training, certification, or work experience − 5+ years of experience supporting / managing largescale multi-vendor, multi-protocol enterprise networks or network projects − 5+ years of experience in network routing and security protocols and functions, stateful firewalls, non-stateful filtering and packet inspection to support configurations, troubleshooting, and network performance tuning − 5+ years of experience in professional software development coding in higher-level languages (e.g., Python, C++, Go, Rust) − 5+ years of experience in network automation (e.g., automated provisioning and remote configuration of switches, routers, firewalls; flow-based analysis and predictive modeling of traffic in dynamic routing environments) − Experience developing network and security solutions programmatically − Domain-specific interim level network certifications a plus Do you have what it takes to be an H-E-B Senior Network Engineer? − Advanced knowledge of automation technologies, frameworks, network vendor APIs, workflow systems (e.g., Ansible, Puppet, Jenkins, Terraform, REST, YAML, JSON, Batfish, Jinja2, Netmiko, NetBox, Git, Slack ChatOps) − Advanced knowledge of automation, performance testing, associated tooling / frameworks for networking and security platforms − Advanced understanding of networking and security architectures, process implementation, workflows, and organization expectations − Advanced understanding / awareness of process for designing, coding, executing, and documenting results, network / security builds, changes, incidents, etc − Ability to work on significant projects independently & may be responsible for leading small teams of engineers. Demonstrates good judgement in selecting methods and techniques − Advanced analytical, troubleshooting, problem-analysis skills − Advanced prioritization and workload management skills − Advanced verbal / written communication, presentation skills at various audience levels − Ability to prepare / present quality-specific information − Ability to influence at different levels of leadership including peers and junior engineers − Self-motivated; sense of urgency − Passion for quality and attention to detail Can you… − Must be in San Antonio, TX − Work 24/7 team on-call rotation − Drive to work for critical events and needs as required − Sit for extended periods with appropriate breaks while maintaining a high level of alertness − Work in an open office work environment − Adapt to change in the work environment 11-2024 JDFT
