Senior Network Engineer

As the Senior Network Engineer, you will own data center networking design and implementation. We build data centers from construction through commissioning, then operate them as colocation. 
During construction you design it: the switching and routing the building runs on, structured cabling standards,
and the segmentation that separates controls traffic from everything else. Security is part of the same job, not a
separate one: firewall policy, intrusion detection, and access control between zones are yours to design and run.
After turnover you operate all of it, and you are the escalation point when something on the network breaks.
Cross-connects need to be clean and repeatable, and the controls network has to stay up. We are also building
multiple sites at once, so the standards you set on the first one determine how quickly the rest go in.

This role is remote. Travel to our sites is required and will be heavy during active construction and
commissioning, when you should expect to be on site for design reviews, testing, and turnover. We have offices
in San Francisco, Long Beach, and Houston if you are near one.

• Own network architecture across the portfolio: core and distribution switching, routing, out-of-band
management, addressing and DNS, firewalls, and remote access, plus the standards and reference designs
that make each new site a deployment rather than a redesign.
• Design the physical layer inside the facility: structured cabling, pathways and cable management, cabinet
and cross-connect standards, and fiber and copper plant throughout the building.
• Own network security at the sites: firewall policy and rule lifecycle, intrusion detection and prevention,
segmentation and access control between zones, secure remote access for staff and vendors, and network
logging into our monitoring stack.
• Build the colocation side of the network: customer handoffs, cross-connect provisioning, and a repeatable
process for turning up tenant connectivity without one-off engineering each time.
• Partner with the controls and security teams on OT networking: segmentation between IT and OT, network
zones for SCADA and BMS, and reliable device-to-server paths for controls traffic.
• Write the specifications, drawings, and bills of material we hand to contractors and low-voltage vendors,
and review their designs and submittals so we get what we specified. Own network commissioning at each site: point-to-point testing, fiber certification, labeling, as-built
drawings, and turnover documentation.
• Run the network in production: monitoring and alerting, capacity planning, change control, configuration
and firmware management, backups, and root cause analysis after events.
• Participate in an on-call rotation and act as the escalation point for network incidents at live sites.
• Write and maintain the standards, runbooks, and documentation that let the next site and the next
engineer repeat this work without starting over.

• 8+ years designing and operating enterprise or data center networks, including at least one build you
carried from design through commissioning into live operation.
• Hands-on depth in routing and switching: BGP, OSPF, VLANs, VRFs, spanning tree, link aggregation,
firewalls, and out-of-band management. We have not locked in a platform, so vendor-agnostic depth
matters more than a specific badge.
• Hands-on network security experience: firewall policy design and maintenance on a next-generation
platform, intrusion detection and prevention, segmentation and least-privilege access between zones,
secure remote access, and network logging and alerting.
• Structured cabling fluency: fiber types and loss budgets, single-mode and multimode tradeoffs, pathway
planning, TIA-942 or equivalent standards, and the ability to both specify and review a cabling design.
• Ability to read and mark up construction drawings, riser diagrams, and floor plans, and to hold your own in
a design review with general contractors and low-voltage subcontractors.
• Experience operating a production network where downtime has real consequences: change control,
monitoring, and troubleshooting live issues under pressure.
• Experience setting network standards from scratch rather than inheriting them.
• Willingness to travel to active sites regularly.
• Bachelor's degree in electrical, computer, or network engineering, or equivalent hands-on experience.

• Time on the provider side at a colocation or wholesale data center operator.
• Security depth beyond the network edge: 802.1X or network access control, SIEM integration, and network
controls under SOC 2, NIST 800-53, or similar frameworks.
• Experience with data center fabrics: VXLAN and EVPN, or comparable leaf-spine designs.
• Network automation and scripting: Python, Ansible, or infrastructure-as-code for configuration
management and audits.
• OT network security experience: IT/OT segmentation, IEC 62443 or NIST 800-82, secure remote access.
• CCNP, CCIE, JNCIE, or equivalent, and BICSI RCDD on the cabling and telecom side.
• Experience with DCIM platforms and integrating network and infrastructure data into asset and capacity
management.
• Experience with power generation, behind-the-meter energy assets, or bitcoin mining infrastructure