Job Description

At Blue Cross and Blue Shield of Nebraska, we are a mission-driven organization dedicated to championing the health and well-being of our members and the communities we serve.

Our team is the power behind that promise. And, as the industry rapidly evolves and we seek ways to optimize business processes and customer experiences, there’s no greater time for forward-thinking professionals like you to join us in delivering on it! As a member of Team Blue, you’ll find purpose, opportunities and the support you need to build a meaningful career and make a powerful impact in our community.

At Blue Cross Blue Shield of Nebraska (BCBSNE), the network is the backbone of healthcare for hundreds of thousands of Nebraskans. We don't just talk about innovation — we live it every single day. Our engineers use GitHub Copilot, Microsoft Copilot, and custom-built AI agents for engineering, incident response, and operational decision-making. We maintain an active AI Community of Practice (AI CoP) that drives continuous experimentation and adoption across the technology organization.

As our Cloud Network Engineer, you will own the design and operation of a modern hybrid and multi-cloud network environment — working hands-on with Azure Virtual WAN, Palo Alto Next-Generation Firewalls, BGP routing, and Infrastructure as Code. If you want to build networks that directly improve lives and do it with cutting-edge tools, this is your role.

The ideal candidate will live within driving distance of the Omaha, Nebraska office. This position allows remote flexibility but will have 1 day per week in the office.  

If living in one of our approved states (Florida, Iowa, Kansas, Minnesota, Missouri, Nebraska, North Dakota, andTexas)  –this person may travel to our headquarters based on business needs.

What you'll do:

• Azure Cloud Networking— Design, deploy, and manage Azure vWAN,VNets, ExpressRoute, VPN gateways, and hybrid connectivity. Architect multi-cloud patterns across Azure.

• Palo Alto Next-Generation Firewalls— Manage NGFW policies, Panorama, GlobalProtectVPN, network segmentation, and Zero Trust enforcement across on-premises and cloud environments.

• Routing & Switching— Configure and optimizeBGP peering (eBGP/iBGP, route maps, communities), OSPF, VLAN design, route optimization, and Layer 3/4 troubleshooting.

• Infrastructure as Code & Automation— Build and maintaininfrastructure using Bicep, ARM templates, Python, PowerShell, and GitHub Actions CI/CD pipelines.

• AI-Augmented Engineering— Leverage GitHub Copilot, Microsoft Copilot, and internal AI agents daily for troubleshooting, documentation, code generation, and incident triage. Actively contribute to the AI Community of Practice (AI CoP).

• Network Observability & Monitoring— Implement and manage monitoring with SolarWinds, Azure Monitor, Network Watcher, traffic analysis, and root cause analysis (RCA).

• Security-First Design— Collaborate with Cybersecurity on micro-segmentation, private endpoints, NSGs, and ensure HIPAA and SOX compliance across all network architectures.

• Disaster Recovery & Resilience— Develop and maintainDR plans, high-availability architectures, and failover strategies across hybrid environments.

• Collaboration & Mentorship— Work within Agile frameworks (Scrum/Kanban), partner cross-functionally with Managed Services, Cloud Engineering, and Application teams. Mentor peers and share knowledge.

• On-Call & Incident Response— Participate in a 24×7 on-call rotation. Drive P1/ P2rapid resolution, conduct post-incident reviews, and produce RCA documentation.

To be considered for this position, you must have:

• 5+yearshands-on network engineering experience focused on cloud/hybrid environments

• Deep Azure networking knowledge:vWAN,VNets, ExpressRoute, VPN Gateway, Azure Firewall, NSGs, Private Endpoints, Load Balancers

• Hands-on Palo Alto NGFW: configuration, policy management, Panorama,GlobalProtect

• Strong BGP (eBGP/iBGP peering, route maps, communities), OSPF, static routing across hybrid topologies

• Infrastructure as Code: Bicep or ARM templates

• Scripting/automation: Python, PowerShell

• Network security: Zero Trust Architecture, micro-segmentation, IPSEC VPN,firewallpolicy design

• Network monitoring: SolarWinds, Azure Monitor, Network Watcher, or equivalent

• Agile methodologies (Scrum/Kanban) and cross-functional team experience

• Strong communicationskills for technical and leadership audiences

• Associate's degree in Engineering, Computer Science, or related field — or equivalent experience

The strongest candidates for this position will also possess:

• Certifications: AZ-700, PCNSE, CCNP, JNCIS/JNCIP, or equivalent (preferred, notrequired)

• Cisco network technologies — routers, switches, ASA VPNs, Cisco ISE, wireless controllers (secondary skillset)

• Juniper network technologies — SRX firewalls, EX/QFX switches, Junos OS (secondary skillset)

• SD-WAN solutions and WAN optimization

• Multi-cloud networking (Azure + AWS)includingcross-cloud connectivity and transitarchitectures

• CI/CD pipelines (GitHub Actions, Azure DevOps) for infrastructure deployment

• AI-assisted engineering tools (GitHub Copilot, Microsoft Copilot, CopilotStudio) —or strong enthusiasm to adopt

• Healthcare or regulated industry experience (HIPAA, SOX, PCI-DSS)

• Kubernetes networking concepts (CNI, ingress controllers, service mesh)

• DNS/DHCP/IPAM management (Infoblox or equivalent)

Learn more about what makes BCBSNE such an exceptional place to work by visiting NebraskaBlue.com/Careers

We strongly believe that diversity of experience, perspective and background will lead to a better workplace for our employees and a better product for our customers and members.