Network Infrastructure Engineer

About the role

We are seeking a Network and Systems Engineer to own the deployment, performance, and scalability of our network infrastructure across current operations and upcoming facility expansions. You will architect and execute network solutions, manage enterprise identity across Azure and Google Workspace, and serve as the technical authority on all infrastructure and security decisions.

Responsibilities

• Network Architecture & Infrastructure Design and Execution
  • Architect and execute enterprise and mission-critical network architectures across offices, test facilities, and remote environments.
  • Lead end-to-end infrastructure buildout for our new headquarters and manufacturing facilities, scoping, installing, and validating physical cabling, switches, firewalls, and wireless security appliances in collaboration with contractors.
  • Implement QoS policies to prioritize critical data streams; monitor performance, proactively identify bottlenecks, and resolve complex connectivity issues.
  • Design and maintain scalable, resilient network infrastructure capable of supporting high-throughput automated operations as we scale.
• MSP Governance & Enterprise Systems Oversight
  • Serve as the primary technical authority and escalation path for our outsourced IT partner, holding them accountable to SLAs covering tier-1/tier-2 helpdesk, device procurement, provisioning, and end-user onboarding.
  • Define, audit, and enforce configuration standards across enterprise systems managed by the MSP: Windows Server, Linux (RHEL, Ubuntu, CentOS), Active Directory, DNS/DHCP, hybrid cloud, and virtualization platforms (VMware / Hyper-V).
  • Govern identity and access management across Azure AD / Entra ID and Google Workspace, including SSO and MFA policies.
  • Oversee infrastructure lifecycle management: backup and DR strategies, endpoint policies, patching routines, and server provisioning, directing execution through the MSP rather than doing it yourself.
• OT, Data Pipelines & AI Infrastructure Support
  • Securely integrate edge automation hardware, PLCs, SCADA, and data acquisition systems with backend infrastructure, maintaining strict isolation between corporate and testing environments.
  • Partner with software and systems teams on data ingestion pipelines, telemetry infrastructure, and real-time monitoring dashboards.
  • Design network containment and isolation layers for AI tools and automated workflows to ensure data security and audibility.
• Security & Compliance
  • Partner with external compliance advisors and the MSP to implement and maintain network-level controls for NIST 800-171 and CMMC within a Zero Trust framework.
  • Manage transport-layer security and encryption standards (TLS, OpenSSL, SHA-256); coordinate system hardening and vulnerability assessments through the outsourced security team.
  • Develop and own security policies for endpoint management, VPN access, and data protection.

Requirements

• 8+ years of experience in IT systems engineering or infrastructure roles.
• Deep expertise in network protocols and fundamentals: TCP/IP, VLANs, BGP, OSPF, MPLS, routing, switching, firewalls.
• Strong understanding of networking design models (L2/L3, VPC, VDC, Datacenter Zones, Spanning Tree, VRF, VTP, VLANs, and cabling).
• Hands-on experience with at least one major cloud platform (AWS, Azure, or GCP).
• Proven experience managing Windows Server, Linux (RHEL, Ubuntu, CentOS), and Active Directory environments.
• Strong knowledge of systems security, access control, hardening, and encryption protocols.
• Experience with identity and access management frameworks (Azure AD, Entra ID, Google Workspace, SSO/MFA).
• Proficiency in scripting and automation using PowerShell, Bash, Python, or similar.
• Ability to work independently, make high-impact technical decisions, and lead projects from planning through execution.
• Strong documentation habits and ability to communicate technical concepts clearly to non-technical stakeholders.

Preferred Qualifications

• Familiarity with IEEE 1588 Precision Time Protocol (PTP) and experience designing or supporting time-synchronized network architectures for data acquisition, telemetry, industrial control, or distributed systems environments is preferred.
• Experience with real-time data acquisition systems, time-series databases (QuestDB, InfluxDB), or industrial control environments.
• Familiarity with edge automation hardware (Opto22, PLCs) or industrial networking protocols.
• Background in regulated or compliance-driven environments (defense, aerospace, critical infrastructure).
• Experience with monitoring and observability tools (Grafana, Prometheus, Datadog).
• Certifications such as CCNP, CCIE, Network+, MCSE, Security+, or relevant industry credentials.
• Familiarity with NIST frameworks (800-171, 800-53) or CMMC standards.
• Experience with IaC tools like Terraform, Ansible, or similar configuration management platforms.