Vail Resorts
From Vail Resorts's careers page
Status: listed on the employer's own careers page when we last checked (daily). Confirm on their site before applying.
We are looking for ambitious leaders, innovators and creators to join our talented team.
Our mission is to create the Experience of a Lifetime for our employees, so they can, in turn, create the Experience of a Lifetime for our guests. We own and operate the most renowned destination resorts in the world as well as regional and local ski areas outside major cities, and connect them all through one unrivaled network. We are looking for ambitious leaders, innovators and creators to join our talented team. If you’re ready to pursue your fullest potential, we want to get to know you!
Candidates for year-round positions are reviewed on a rolling basis. Applications will be accepted up to 90 days after the posting date, or until the position is filled (whichever is first).
Vail Resorts is seeking a Senior Network Engineer to design, secure, and automate the networks that support our cloud platforms, enterprise data centers, and modern applications. This hands-on role combines advanced Microsoft Azure networking with network security, Kubernetes networking, and infrastructure automation.
Approximately 80–90% of the role focuses on cloud networking, data center network security, Kubernetes, and automation. Azure is the primary specialization, supported by working knowledge of AWS and GCP. Traditional enterprise networking represents a limited, supporting portion of the role.
Starting Wage: $89,348.00 - $127,640.00 + Annual Bonus
Employment Type: Year Round
Shift Type: Full Time hours
Minimum Age: At least 18 years of age
Housing Availability: No
Cloud and Kubernetes Networking
Design and operate secure, resilient Azure networks, including VNets, routing, ExpressRoute, VPN Gateway, private endpoints, DNS, Azure Firewall, and load balancing.
Engineer connectivity across Azure, AWS, GCP, and data centers; troubleshoot routing, name resolution, segmentation, and application connectivity across hybrid environments.
Design and troubleshoot Kubernetes networking, including AKS, container network interfaces (CNI), ingress, service connectivity, and network policies.
Build network resilience into architecture and change plans to support disaster recovery, business continuity, and infrastructure modernization.
Network Security and Microsegmentation
Engineer and maintain Check Point firewall policies and security controls for cloud and data center workloads, including access rules, NAT, and secure connectivity.
Support and optimize Cato SASE for secure access, cloud connectivity, and consistent network security policy.
Implement Zero Networks microsegmentation to isolate workloads and reduce lateral movement; partner with cybersecurity teams to apply Zero Trust and least-privilege access.
Secure virtualized data center networks and workload traffic, coordinating routing, segmentation, and load balancing with infrastructure teams.
Automation and Engineering Leadership
Build reusable Terraform modules and Python/API automation for network provisioning, configuration, policy management, and validation.
Use Git and CI/CD workflows to deliver repeatable, reviewed deployments and enable self-service infrastructure provisioning with appropriate controls.
Lead complex incident analysis, document root causes, and implement lasting corrective actions; maintain architecture diagrams, standards, and operational procedures.
Collaborate with cloud, infrastructure, cybersecurity, application, and field technology teams; mentor engineers and provide limited support for traditional networking when needed.
Seven or more years of experience in network engineering, cloud networking, or network security engineering, or equivalent demonstrated expertise.
Advanced Azure networking expertise, including hybrid connectivity, cloud routing, ExpressRoute, private connectivity, DNS architecture, and segmentation.
Working knowledge of AWS and GCP networking, with practical experience designing or supporting connectivity in at least one of these platforms.
Strong TCP/IP, BGP, VPN, NAT, DNS, load balancing, and network security fundamentals, with the ability to troubleshoot complex hybrid environments.
Hands-on experience with enterprise next-generation firewalls and familiarity with Check Point; understanding of SASE, Zero Trust, microsegmentation, and workload isolation.
Practical Kubernetes networking expertise covering CNI, ingress, service networking, network policies, and application connectivity troubleshooting.
Hands-on Terraform experience and proficiency in Python scripting and REST API automation; ability to maintain reusable, version-controlled infrastructure code.
Strong communication, documentation, and analytical skills; ability to lead technical work independently, manage priorities, and collaborate across teams.
Direct experience with Check Point security gateways and management platforms, Cato SASE, and Zero Networks microsegmentation; Check Point Maestro experience is a plus.
Experience with Azure Virtual WAN, AKS, AWS Transit Gateway, AWS VPC networking, and GCP VPC networking.
Experience with Cilium, Calico, or similar Kubernetes networking technologies; Git-based CI/CD, Ansible, or other automation frameworks.
Familiarity with Nutanix AHV, VMware, software-defined data center networking, network observability, telemetry, and automated configuration validation.
Familiarity with Extreme Networks and Cisco routing and switching as supporting skills.
Relevant certifications in Azure networking, Check Point, Terraform, or enterprise networking.
The expected Total Compensation for this role is $89,348.00 - $127,640.00 + Annual Bonus. Individual compensation decisions are based on a variety of factors.
Job Benefits
Ski/Mountain Perks! Free passes for employees, employee discounted lift tickets for friends and family AND free ski lessons
MORE employee discounts on lodging, food, gear, and mountain shuttles
401(k) Retirement Plan
Employee Assistance Program
Excellent training and professional development
Health Insurance; Medical Insurance, Dental Insurance, and Vision Insurance plans (for eligible seasonal employees after working 500 hours)
Free ski passes for dependents
Critical Illness and Accident plans
Vail Resorts offers a ‘Hybrid’ work environment where employees living within 50 miles of the Broomfield office work on-site Tuesday, Wednesday, Thursday and have flexibility to work off-site on Mondays and Fridays. Employees living outside of a commutable distance can work remotely from British Columbia, Washington D.C., and the 16 U.S. states* in which we currently operate. This includes: California, Colorado, Indiana, Michigan, Minnesota, Missouri, New Hampshire, New York, Nevada, Ohio, Pennsylvania, Utah, Vermont, Washington State, Wisconsin, and Wyoming.
Please note that the ability to work in person or off-site, and the particulars related to such work, are subject to change at any time; and, accordingly, the Company reserves the right to change its policies and/or require in-person/in-office work or off-site work at any time in its sole discretion.
In completing this application, and when submitting related documentation, applicants may redact information that identifies their age, date of birth, and/or dates of attendance at or graduation from an educational institution.
We follow all federal, state, and local laws including restrictions on child/minor labor. Minors hired into this position will not be asked or permitted to engage in any activities restricted to adult workers.
Vail Resorts is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, protected veteran status or any other status protected by applicable law.
Scores your resume against this job the way resume scanners do: the job's hard and soft skills, searchability, recruiter tips and formatting.
Create a free account to see your score. Your resume stays in this browser until then, and we never store it.
Already a member? Sign in