Principal Network Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Take responsibility for standardizing the corporate IT, OT controls, life-safety, administrative, guest, and Wi-Fi networks operated by Montera.

• Establish strategies for segmentation, zoning, isolation, redundancy, and survivability across IT, OT, and customer domains.

• Manage the public IP strategy, which includes ARIN/RIR address-space applications and justifications, ASN acquisition, and the BGP/peering/transit strategy.

• Oversee IPAM and address allocations across various sites, including internal, OT, shared-services, and customer handoff ranges.

• Set scalable addressing, routing, and DNS standards applicable to a multi-site portfolio.

• Direct firewall architecture and policy, secure remote access, RBAC, micro-segmentation, and audit logging for both IT and OT.

• Design high-security architectures for OT and critical infrastructure while partnering on hardening, monitoring, and incident response efforts.

• Conduct risk reviews of customer, IT, and OT exposure paths and implement necessary mitigations to support ISO 27001 compliance.

• Collaborate with the Principal Controls Engineer to convert data-exposure scope into secure delivery paths, DMZ/broker placement, least-privilege boundaries, firewall policy, and customer demarcation.

• Establish demarcation models, handoff points, and responsibility boundaries between Montera infrastructure and customer-managed fabrics.

• Provide secure network paths for AI optimization platforms utilizing Montera telemetry.

• Assist in customer technical reviews and acceptance testing concerning data-access and connectivity commitments.

• Gather customer AI/compute networking requirements, which encompass fabric type, bandwidth, latency, scale, storage connectivity, and operating model.

• Convert customer requirements into deployable designs that adhere to facility constraints.

• Define handoffs between shared infrastructure and customer-managed compute/storage fabrics.

• Develop configuration, documentation, automation, observability, and operational runbook standards leveraging Git-based and infrastructure-as-code workflows.

• Support construction, commissioning, testing, validation, and readiness for turnover.

• Lead the evaluation and selection of vendors for network, firewall/security, Wi-Fi/access, cabling, and optics.

• Drive standardized, cost-effective BOM strategies while managing technical change control and vendor issue resolution.

⛳️ Requirements

• A Bachelor’s degree in Controls, Electrical, Mechanical, or Systems Engineering, or a related field is required; a Master’s degree is preferred.

• At least 10 years of experience in designing and operating data center networks for hyperscale, mission-critical, or regulated environments.

• Direct experience with RIR/ARIN address applications and justifications, ASN/BGP, and enterprise IPAM at a multi-site scale.

• Extensive expertise in firewalls, segmentation, and secure remote access across IT and OT, encompassing BMS/SCADA/DCIM.

• Familiarity with IT/OT segmentation and IEC 62443 / Purdue-model frameworks.

• Proven track record in defining single-tenant customer demarcation and data-access models in secure environments.

• Strong customer-facing skills, adept at translating requirements into actionable designs and clear demarcation models.

• Experience in network automation and configuration management, including Git-based workflows, templating, and infrastructure-as-code methodologies.

🏝️ Benefits

• Competitive total compensation package

• 90% of health premiums covered for employees and their dependents

• Up to 8 weeks of paid time off annually, including holidays, PTO, and sick leave

• Up to 8 weeks of paid parental leave after 6 months of employment

• 401(k) plan with immediate eligibility

• No 401(k) vesting requirement

• Employer 401(k) matching contributions up to 6%

• Up to $3,500 annual reimbursement for approved courses, certifications, conferences, and professional development

• Remote work stipend

• Flexible, remote-first work arrangement

• Autonomy and ownership in your role