Systems Engineer, Network & Security

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Professional US

Salary Range: $90,000.00 To $ Annually

Sungrow Power Supply Co., Ltd. (Stock code: 300274) is a globally recognized renewable energy company, specializing in R&D, manufacturing, and services for solar, wind, energy storage, hydrogen, and electric vehicle solutions. Established in 1997, Sungrow is known for its innovative photovoltaic inverters, wind converters, EV chargers, energy storage systems, and hydrogen production technologies. Its products are sold in over 180 countries, with a cumulative installed capacity exceeding 740 GW by the end of 2024.

Sungrow has contributed to national standards and holds numerous core technologies. With multiple industry awards and advanced R&D centers, it ranks among the global leaders in clean energy. Guided by its mission “Clean power for all,” Sungrow continues to drive innovation and global sustainability.

The Systems Engineer is responsible for designing, implementing, and maintaining Sungrow USA’s enterprise systems and secure network infrastructure across on premises and cloud environments while owning the certificate lifecycle and PKI infrastructure to enable secure and scalable certificate based authentication across cloud, network, and endpoint platforms, with a primary focus on network security design, security architecture, API integration, systems engineering, and SaaS platform optimization;

this role leads the development of scalable and highly available systems that ensure reliable network performance and strong data protection through modern security controls, and works closely with Infrastructure, Security, and IT Operations teams while also serving as a backup to Infrastructure Engineers to maintain continuity of critical services by supporting core enterprise systems and foundational IT services during absences, coverage gaps, and periods of increased workload.

• Design, implement, and support enterprise network infrastructure, including LAN/WAN, SD-WAN, wireless, VPN, and hybrid cloud connectivity across corporate and remote locations.
• Administer and optimize Fortinet, Zscaler (ZIA/ZPA), and cloud networking solutions to deliver secure access, Zero Trust connectivity, network segmentation, and resilient perimeter security.
• Design and manage network access control and certificate-based authentication using IEEE 802.1X, RADIUS, Microsoft Intune, Microsoft Cloud PKI, and enterprise PKI platforms.
• Lead end-to-end certificate lifecycle management, including issuance, deployment, monitoring, renewal, revocation, and ACME-based automation using Cyber Ark Certificate Manager, Keyfactor Command, AppViewX CERT+, EJBCA, Hashi Corp Vault, and Digi Cert solutions.
• Architect and manage Azure and AWS networking, including virtual networks, routing, DNS, firewall policies, and hybrid connectivity between cloud and on‑premises environments.
• Manage ISP, cellular, and satellite connectivity services while monitoring network performance, availability, bandwidth utilization, and service reliability.
• Troubleshoot and resolve complex infrastructure, network, authentication, and integration issues affecting performance, availability, and security.
• Design, develop, and support enterprise integrations using Microsoft Graph API, REST APIs, Power Shell, Python, and automation platforms to streamline business processes and system operations.
• Administer identity and access management platforms, including Microsoft Entra  Okta, supporting SSO, MFA, RBAC, identity federation, and secure cross‑platform integrations.
• Design and enforce Data Loss Prevention (DLP), security monitoring, and compliance controls using Microsoft Purview, Zscaler, and enterprise security platforms.
• Design, implement, and support enterprise systems and SaaS platforms, ensuring scalability, high availability, disaster recovery, and operational resilience.
• Provide Tier 3 escalation support for complex infrastructure, network, and system issues while partnering with cross‑functional teams on…