Network Infrastructure Engineer

Role Overview

We’re seeking a Network and Systems Engineer to own the deployment, performance, and scalability of our network infrastructure across current operations and upcoming facility expansions. You'll architect and execute network solutions, manage enterprise identity across Azure and Google Workspace, and serve as the technical authority on all infrastructure and security decisions.

This is a hands‑on role that requires both strategic thinking and tactical execution. The ideal candidate thrives in fast‑paced, hardware‑focused environments and operates with a high degree of autonomy.

This is an onsite opportunity in our El Segundo, CA office.

• Design and execute enterprise and mission‑critical network architectures across offices, test facilities, and remote environments, with deep hands‑on expertise in routing protocols (BGP, OSPF), L2/L3 design, VPC/VDC, Spanning Tree, VRF, VTP, VLANs, VPNs, site‑to‑site connectivity, and secure tunneling architectures.
• Lead end‑to‑end infrastructure buildout for our new headquarters and manufacturing facilities – scoping, installing, and validating physical cabling, switches, firewalls, and wireless security appliances in collaboration with contractors.
• Implement QoS policies to prioritize critical data streams; monitor performance, proactively identify bottlenecks, and resolve complex connectivity issues.
• Design and maintain scalable, resilient network infrastructure capable of supporting high‑throughput automated operations as we scale.

• Serve as the primary technical authority and escalation path for our outsourced IT partner, holding them accountable to SLA coverage for tier‑1/tier‑2 helpdesk, device procurement, provisioning, and end‑user onboarding – this role owns the outcomes, not the tickets.
• Define, audit, and enforce configuration standards across enterprise systems managed by the MSP:
  Windows Server, Linux (RHEL, Ubuntu, CentOS), Active Directory, DNS/DHCP, hybrid cloud, and virtualization platforms (VMware/Hyper‑V).
• Govern identity and access management across Azure AD/Entra  Google Workspace, including SSO and MFA policies – you don’t need to be a deep cloud sysadmin, but you need to own the standards and hold the MSP to them.
• Oversee infrastructure lifecycle management: backup and DR strategies, endpoint policies, patching routines, and server provisioning – directing execution through the MSP rather than doing it yourself.
• Support secure integration of edge automation hardware, PLCs, SCADA, and data acquisition systems with backend infrastructure, maintaining strict isolation between corporate and testing environments.
• Partner with software and systems teams on data ingestion pipelines, telemetry infrastructure, and real‑time monitoring dashboards.
• Design network containment and isolation layers for AI tools and automated workflows to ensure data security and audibility.

• Partner with external compliance advisors and the MSP to implement and maintain network‑level controls for NIST 800‑171 and CMMC within a Zero Trust framework.
• Manage transport‑layer security and encryption standards (TLS, OpenSSL, SHA‑256); coordinate system hardening and vulnerability assessments through the outsourced security team.
• Develop and own security policies for endpoint management, VPN access, and data protection – setting the standard, not necessarily executing every control.

• 8+ years of experience in IT systems engineering or infrastructure roles.
• Deep expertise in network protocols and fundamentals: TCP/IP, VLANs, BGP, OSPF, MPLS, routing, switching, firewalls.
• Strong understanding of networking design models (L2/L3, VPC, VDC, Datacenter Zones, Spanning Tree, VRF, VTP, VLANs, and cabling).
• Hands‑on experience with at least one major cloud platform (AWS, Azure, or GCP).
• Proven experience managing Windows Server, Linux (RHEL, Ubuntu, CentOS), and Active Directory environments.
• Strong knowledge of systems security, access control, hardening, and encryption protocols.
• Experience with identity and access management frameworks (Azure AD, Entra , Google Workspace, SSO/MFA).
• Proficiency in…