Platform Engineer (Network)

Your Future Evolves Here

Evolent partners with health plans and providers to achieve better outcomes for people with most complex and costly health conditions. Working across specialties and primary care, we seek to connect the pieces of fragmented health care system and ensure people get the same level of care and compassion we would want for our loved ones.

Evolent employees enjoy work/life balance, the flexibility to suit their work to their lives, and autonomy they need to get things done. We believe that people do their best work when they're supported to live their best lives, and when they feel welcome to bring their whole selves to work. That's one reason why diversity and inclusion are core to our business.

Join Evolent for the mission. Stay for the culture.

What You’ll Be Doing:

As a member of the Platform Engineering organization, you will be part of a team responsible for managing the large footprint of our application suite and cloud infrastructure – your role will be heavily network focused.

We’re redefining how we approach cloud infrastructure, networking, and application reliability. As a Platform Network Engineer within our Site Reliability Engineering (SRE) organization, you’ll play a pivotal role in building a secure, scalable, and high‑performing network foundation that supports our next generation of platforms. If modern cloud networking, automation, and resilient system design excite you, you’ll find this team to be a place where your skills shine and your ideas shape the future.

Responsibilities:

• Building a best‑in‑class, Azure‑driven cloud networking environment that supports a rapidly evolving, multi‑cloud ecosystem.
• Design, implement, and manage Azure networking components including VNets, VNet peering, Private Endpoints, Application Gateways, Load Balancers, NSG, Azure DNS, Azure Firewall, and ExpressRoute.
• Applying your physical and cloud‑based network design expertise to interconnect systems using WAF (i.e Cloudflare), firewalls, load balancers, and routing protocols (BGP) across a predominantly cloud‑based infrastructure.
• Partnering closely with infosec, engineering, and operations teams to shape a forward‑looking network architecture strategy aligned with the company’s growth.
• Serving as the network Subject Matter Expert (SME), elevating team knowledge and cultivating strong relationships with key leaders and architects.
• Reporting directly to the Director of Site Reliability Engineering, with a strong dotted‑line partnership to the Platform Engineering Network Manager.
• Implement Infrastructure as Code (IaC) for networking, including automated provisioning of VNets, BGP routing, firewall rules, load balancers, F5 policies using Terraform, Ansible, and GitOps workflows.
• Participate in Root Cause Analysis (RCA) and drive true remediation to prevent recurrence. 

Required Experience:

• 5+ years of expert‑level network security experience, including hands‑on work with Palo Alto firewalls and Azure Network Security Groups (NSG).
• 5+ years of network load‑balancing experience with technologies such as F5 BIG‑IP, HAProxy, and Azure Load Balancer.
• Proven expertise in design and engineering large‑scale, complex network environments.
• 5+ years of deep technical experience in public cloud network design.
• 5+ years of advanced experience with core and edge switching, routing, and VLANs.
• Experience building and deploying Infrastructure‑as‑Code (IaC) using tools such as Terraform and Ansible.
• Exceptional communication skills and comfort operating with a high level of transparency.
• Ability to produce and maintain high‑quality network topology and architecture documentation.
• Bonus: Hands-on experience with AWS or GCP networking, Zscaler secure access solutions, and micro-segmentation implementations using Illumio.

To ensure a secure hiring process we have implemented several identity verification steps, including submission of a government issued photo ID. We conduct identity verification during interviews, and final interviews may require onsite attendance. All candidates must complete a comprehensive background check, in-person I-9 verification, and may be subject to drug screening prior to employment. The use of artificial intelligence tools during interviews is prohibited and monitored. Misrepresentation will result in immediate disqualification from consideration.

Technical Requirements:

We require that all employees have the following technical capability at their home: High speed internet over 10 Mbps and, specifically for all call center employees, the abili