Senior Network Engineer

Torus is headquartered in Utah and is expanding manufacturing at our 545,000-square-foot facility in Salt Lake City called Giga One.
We are
the world’s first mesh energy infrastructure, uniting communities through resilient, sustainable, and intelligent power. We design, engineer, manufacture, install, and support our systems end-to-end, standing behind them throughout their lifecycle. Torus systems help reduce costs, lower emissions, and protect facilities from outages, while strengthening the security and reliability of the broader utility grid. Torus is committed to American manufacturing, engineering excellence, and building energy systems that last.

Torus has raised over $267 million from investors like Magnetar, Mercado, ICONIQ and Origin Ventures. The investments are helping to accelerate deployment of modular power plants across utilities, data centers, and industrial sectors. This investor confidence reflects the strength of our team, technology as well as the scale of the problem we are solving.

At Torus, you will be part of something larger than a single product or technology. Your work will help build energy infrastructure that supports and strengthens our electrical grid, critical systems, industry, and communities for decades to come. We value accountability, collaboration, and clear thinking. We are looking for people who want to solve hard problems and build things that matter.

The Senior Network Engineer will own the network architecture underpinning Torus Protect , the dedicated security technology deployed in every Torus Station and every Torus Site. Protect is built around a zero internet-facing attack surface, with all VPN tunnels outbound-initiated, and the network layer is the foundation that makes that model work in the field, at scale.

This is a hands-on, deeply technical role for someone who thinks natively in routing, switching, and segmentation, and who can carry that expertise from lab design through fielded, multi-site production deployments. You'll lead the ongoing Meraki-to-Catalyst migration and IOx containerization effort, own the VLAN and segmentation model across protect's control and OT planes, and be the final technical authority on network design decisions that touch security, reliability, and compliance.

• Own protect's Network Architecture — Serve as the principal technical authority for the network design underlying Torus Protect, including switch/router hardware hardening, VLAN segmentation, and WAN/LAN topology across the fleet.
• Advance IOx Containerization — Own the technical gating for containerized workloads hosted on switch/router IOx application hosting, including kernel-level EDR compatibility, access requirements, and persistent state volume design.
• Design & Harden the Tailscale Mesh — Own the mesh VPN architecture connecting Security Routers across sites, including HA subnet router design, dual-route advertisement, and ACL scoping.
• Own VLAN & Segmentation Strategy — Maintain and evolve the VLAN architecture spanning Security Router, Maintenance, BESS, and FESS/PLC segments, ensuring appropriate isolation and documented compensating controls where standard agents cannot run.
• Validate Redundancy & Failover — Design and test failover paths across dual-NIC Security Routers, redundant switching, and VPN tunnels, with particular attention to segments relying on VPN ACL and segmentation as primary compensating controls.
• Partner on Security Architecture — Work closely with the security architecture team to ensure network design decisions align with protect's broader threat model, EDR/MDM requirements, and compliance posture (IEC 62443, NERC CIP, CMMC Level
  2).
• Troubleshoot Fielded Networks — Serve as the escalation point…