Assistant Network Firewall Engineer Jobs in Raleigh, NC

Our mission is to detect cancer early, when it can be cured. We are working to change the trajectory of cancer mortality and bring stakeholders together to adopt innovative, safe, and effective technologies that can transform cancer care.
We are a healthcare company, pioneering new technologies to advance early cancer detection. We have built a multi-disciplinary organization of scientists, engineers, and physicians and we are using the power of next-generation sequencing (NGS), population-scale clinical studies, and state-of-the-art computer science and data science to overcome one of medicine's greatest challenges.
GRAIL is headquartered in the bay area of California, with locations in Washington, D.C., North Carolina, and the United Kingdom. It is supported by leading global investors and pharmaceutical, technology, and healthcare companies.
For more information, please visit grail.com
GRAIL is seeking a Network Engineer to join our Platform Engineering organization. Our team designs, builds, and operates the enterprise networking infrastructure that powers GRAIL's laboratories, data centers, cloud platforms, and corporate environments. We are responsible for delivering highly available, secure, and scalable network services across on-premises infrastructure and AWS.
In this role, you will be responsible for engineering, operating, and continuously improving GRAIL's hybrid network infrastructure, including campus, laboratory, data center, WAN, cloud networking, and security platforms. You will work with Juniper and Aruba switching and routing, Palo Alto firewalls, AWS networking, VPN technologies, monitoring platforms, and infrastructure automation to build reliable, scalable, and secure networking solutions.
This is an engineering-focused role rather than a traditional network operations position. We are looking for someone who enjoys designing scalable infrastructure, automating repetitive tasks, improving platform reliability, and partnering across engineering teams to deliver secure and resilient networking services.
You will collaborate closely with Platform Engineering, Cloud Engineering, Security, Infrastructure, and application teams to support business-critical services while driving operational excellence through automation, observability, and modern networking practices.
This role is based in Durham, North Carolina (RTP) and requires regular on-site presence to support laboratory and data center infrastructure. This position requires on call and overtime flexibility.
Responsibilities

• Design, implement, and support enterprise network infrastructure across campus, laboratory, data center, manufacturing, and AWS cloud environments.
• Deploy, maintain, and troubleshoot Juniper and Aruba switching and routing infrastructure, including Layer 2/Layer 3 networking, VLANs, routing protocols, high availability, and modern data center networking technologies.
• Configure, maintain, and optimize Palo Alto Networks firewalls, security policies, NAT, VPNs, GlobalProtect, URL filtering, and related security services.
• Design, implement, and support AWS networking services including VPCs, Transit Gateway, Route Tables, Security Groups, Network ACLs, Site-to-Site VPNs, Direct Connect integrations, and hybrid connectivity.
• Develop infrastructure automation using Python, Ansible, Terraform, PowerShell, or similar technologies to improve provisioning, configuration management, operational consistency, and compliance.
• Build and maintain network monitoring, alerting, dashboards, and operational visibility using New Relic and other enterprise monitoring platforms.
• Investigate and resolve complex routing, switching, firewall, VPN, cloud networking, DNS, DHCP, and connectivity issues across hybrid environments.
• Partner with Platform Engineering, Cloud Engineering, Security, Infrastructure, and application teams to support new infrastructure deployments, cloud migrations, and strategic platform initiatives.
• Participate in infrastructure lifecycle management, including hardware refreshes, software upgrades, patching, disaster recovery planning, and configuration standardization.
• Develop and maintain technical documentation, network diagrams, operational runbooks, and engineering standards.
• Participate in an on-call rotation supporting production infrastructure as required.
• Leverage modern AI-assisted engineering tools responsibly to improve troubleshooting, automation development, documentation, and operational efficiency.

These responsibilities summarize the role's primary responsibilities and are not an exhaustive list. They may change at the company's discretion.
Required Qualifications

• 4+ years of experience designing, implementing, and supporting enterprise network infrastructure.
• 3+ years of hands-on experience with Juniper and/or Aruba enterprise networking platforms, including switching, routing, and network troubleshooting.
• 3+ years of experience managing Palo Alto Networks firewalls, including security policies, NAT, VPNs, GlobalProtect, and threat prevention.
• 2+ years of hands-on experience with AWS networking services, including VPCs, Transit Gateway, Route Tables, Security Groups, Network ACLs, Site-to-Site VPNs, and hybrid cloud networking.
• Experience supporting enterprise routing and switching technologies including BGP, OSPF, VLANs, STP, LACP, VRRP, and Layer 2/Layer 3 troubleshooting.
• Experience developing infrastructure automation using Python, Ansible, Terraform, PowerShell, or similar scripting and Infrastructure as Code tools.
• Experience implementing and supporting network monitoring and observability platforms such as New Relic, SolarWinds, Datadog, or equivalent.
• Strong troubleshooting skills across networking, cloud connectivity, VPNs, firewalls, DNS, DHCP, enterprise infrastructure, and network security.
• Experience working in Linux and Windows enterprise environments.
• Bachelor's degree in Computer Science, Information Technology, Engineering, or equivalent practical experience.
• Willingness to participate in an on-call rotation supporting production infrastructure as required.

Preferred Qualifications

• Experience supporting hybrid cloud infrastructure across AWS and enterprise data centers.
• Experience with EVPN/VXLAN architectures and modern data center networking.
• Experience with AWS Direct Connect and hybrid networking architectures.
• Experience supporting Aruba CX switching platforms and Aruba Central.
• Experience managing enterprise VPN solutions including GlobalProtect.
• Experience implementing Infrastructure as Code using Terraform.
• Experience with Git-based version control and CI/CD pipelines for infrastructure automation.
• Experience supporting VMware vSphere environments and virtualization networking.
• Knowledge of DNS, DHCP, Active Directory, PKI, RADIUS, and enterprise authentication services.
• Experience supporting laboratory, biotechnology, healthcare, manufacturing, or regulated environments.
• Juniper (JNCIS/JNCIP), Aruba (ACSA/ACSP), Palo Alto (PCNSA/PCNSE), AWS Associate, or equivalent industry certifications.
• Strong written and verbal communication skills with the ability to collaborate across Platform Engineering, Cloud Engineering, Security, Infrastructure, and application teams.
• Experience mentoring junior engineers and driving operational improvements through automation and engineering best practices.
• Comfortable using modern AI-assisted engineering tools while applying sound engineering judgment and security best practices.

The expected, full-time, annual base pay scale for this position is $94,000 - $125k
This role may be eligible for other forms of compensation, including an annual bonus and/or incentives, subject to the terms of the applicable plans and Company discretion. This range reflects a good-faith estimate of the range that the Company reasonably expects to pay for the position upon hire; the actual compensation offered may vary depending on factors such as the candidate's qualifications. Employees in this role are also eligible for GRAIL's comprehensive and competitive benefits package, offered in accordance with our applicable plans and policies. This package currently includes flexible time-off or vacation; a 401(k) retirement plan with employer match; medical, dental, and vision coverage; and carefully selected mindfulness programs.
GRAIL is an equal employment opportunity employer, and we are committed to building a workplace where every individual can thrive, contribute, and grow. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, gender, gender identity, sexual orientation, age, disability, status as a protected veteran, , or any other class or characteristic protected by applicable federal, state, and local laws. Additionally, GRAIL will consider for employment qualified applicants with arrest and conviction records in a manner consistent with applicable law and provide reasonable accommodations to qualified individuals with disabilities. Please contact us at [email protected] if you require an accommodation to apply for an open position.
GRAIL maintains a drug-free workplace. We welcome job-seekers from all backgrounds to join us!
Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.