Network Infrastructure Engineer

Network Architecture & Infrastructure

• Design and execute enterprise and mission-critical network architectures across offices, test facilities, and remote environments, with deep hands-on expertise in routing protocols (BGP, OSPF), L2/L3 design, VPC/VDC, Spanning Tree, VRF, VTP, VLANs, VPNs, site-to-site connectivity, and secure tunneling architectures.
• Lead end-to-end infrastructure buildout for our new headquarters and manufacturing facilities — scoping, installing, and validating physical cabling, switches, firewalls, and wireless security appliances in collaboration with contractors.
• Implement QoS policies to prioritize critical data streams; monitor performance, proactively identify bottlenecks, and resolve complex connectivity issues.
• Design and maintain scalable, resilient network infrastructure capable of supporting high-throughput automated operations as we scale.

MSP Governance & Enterprise Systems Oversight

• Serve as the primary technical authority and escalation path for our outsourced IT partner, holding them accountable to SLAs covering tier-1/tier-2 helpdesk, device procurement, provisioning, and end-user onboarding — this role owns the outcomes, not the tickets.
• Define, audit, and enforce configuration standards across enterprise systems managed by the MSP: Windows Server, Linux (RHEL, Ubuntu, CentOS), Active Directory, DNS/DHCP, hybrid cloud, and virtualization platforms (VMware / Hyper-V).
• Govern identity and access management across Azure AD / Entra ID and Google Workspace, including SSO and MFA policies — you don't need to be a deep cloud sysadmin, but you need to own the standards and hold the MSP to them.
• Oversee infrastructure lifecycle management: backup and DR strategies, endpoint policies, patching routines, and server provisioning — directing execution through the MSP rather than doing it yourself.

OT, Data Pipelines & AI Infrastructure

• Support secure integration of edge automation hardware, PLCs, SCADA, and data acquisition systems with backend infrastructure, maintaining strict isolation between corporate and testing environments.
• Partner with software and systems teams on data ingestion pipelines, telemetry infrastructure, and real-time monitoring dashboards.
• Design network containment and isolation layers for AI tools and automated workflows to ensure data security and audibility.

Security & Compliance

• Partner with external compliance advisors and the MSP to implement and maintain network-level controls for NIST 800-171 and CMMC within a Zero Trust framework.
• Manage transport-layer security and encryption standards (TLS, OpenSSL, SHA-256); coordinate system hardening and vulnerability assessments through the outsourced security team.
• Develop and own security policies for endpoint management, VPN access, and data protection — setting the standard, not necessarily executing every control.

Requirements

• 8+ years of experience in IT systems engineering or infrastructure roles
• Deep expertise in network protocols and fundamentals: TCP/IP, VLANs, BGP, OSPF, MPLS, routing, switching, firewalls
• Strong understanding of networking design models (L2/L3, VPC, VDC, Datacenter Zones, Spanning Tree, VRF, VTP, VLANs, and cabling)
• Hands-on experience with at least one major cloud platform (AWS, Azure, or GCP)
• Proven experience managing Windows Server, Linux (RHEL, Ubuntu, CentOS), and Active Directory environments
• Strong knowledge of systems security, access control, hardening, and encryption protocols
• Experience with identity and access management frameworks (Azure AD, Entra ID, Google Workspace, SSO/MFA)
• Proficiency in scripting and automation using PowerShell, Bash, Python, or similar
• Ability to work independently, make high-impact technical decisions, and lead projects from planning through execution
• Strong documentation habits and ability to communicate technical concepts clearly to non-technical stakeholders

Preferred Qualifications

• Familiarity with IEEE 1588 Precision Time Protocol (PTP) and experience designing or supporting time-synchronized network architectures for data acquisition, telemetry, industrial control, or distributed systems environments is preferred.
• Experience with real-time data acquisition systems, time-series databases (QuestDB, InfluxDB), or industrial control environments
• Familiarity with edge automation hardware (Opto22, PLCs) or industrial networking protocols
• Background in regulated or compliance-driven environments (defense, aerospace, critical infrastructure)
• Experience with monitoring and observability tools (Grafana, Prometheus, Datadog)
• Certifications such as CCNP, CCIE, Network+, MCSE, Security+, or relevant industry credentials
• Familiarity with NIST frameworks (800-171, 800-53) or CMMC standards
• Experience with IaC tools like Terraform, Ansible, or similar configuration management platforms

Compensation & Benefits

• Pre-IPO stock options
• Medical, dental, and vision insurance (Arbor covers 90% for employees)
• Basic life insurance fully covered
• Health savings account (HSA) with matching
• Flexible savings account (FSA)
• Unlimited PTO  
• 12+ company holidays, including Earth Day!  
• 401(k)
• Commuter benefits
• Annual learning and development stipend
• And more!

Base Pay: $140,000 - $165,000 USD/year. The salary is subject to the applicant's skills, qualifications, experience, and geographic location.