Sr. Systems and Network Engineer

Ampere Overview

Ampere is a semiconductor design company for a new era, leading the future of computing with an innovative approach to CPU design focused on high-performance, energy efficient AI compute.

As a pioneer in the new frontier of energy efficient high-performance computing, Ampere is part of the Softbank Group of companies driving sustainable computing for AI, Cloud, and edge applications.

Join a friendly, cooperative environment supporting a global workforce. We are expanding our secure access capabilities by building out Cisco ISE (NAC) and strengthening our end-to-end infrastructure across systems, security, and network connectivity.

As a Senior Systems & Network Engineer, you will lead and troubleshoot complex, cross-domain issues—often with minimal supervision—while delivering secure, reliable environments. You’ll help us deploy and improve our VMware-based infrastructure, Linux/Windows security hardening, SD‑WAN connectivity, and network access controls (NAC) as well as help build out a new data center.

Systems & Virtualization

• Participate in/lead new technology rollouts and infrastructure upgrades.
• Support and troubleshoot global VMware environments.
• Ensure systems and network devices are configured securely and reliably for production operations.

Security Hardening (Linux/Windows)

• Implement security hardening and best practices for primarily Linux systems.
• Support vulnerability remediation workflows, patch coordination, and access control alignment.
• Use policy-driven configuration approaches and maintain baseline documentation.

Networking & SD‑WAN

• Help in maintaining and troubleshooting SD‑WAN solutions and site-to-site connectivity.
• Preferred: exposure to AT&T, Lumen, or Cato SD‑WAN (or similar service provider SD‑WAN offerings).
• Analyze connectivity/performance issues and drive corrective actions across network and security layers.

NAC / Network Access Control

• Support and expand Cisco ISE deployments for posture/authentication and network authorization.
• Any prior NAC experience is valuable (e.g., Packet Fence, ISE, or equivalent NAC technologies).
• Assist with:
• Device profiling and posture-based access decisions.
• Segmentation/VLAN assignment (as applicable).
• Troubleshooting authentication failures and policy edge cases.
• Integrations needed for NAC (directory services, RADIUS, syslog/telemetry, etc.).

Troubleshooting, Ownership, and Policy Writing

• Own complex incidents end-to-end and drive RCA (root cause analysis).
• Document technical findings, runbooks, and changes.
• Write and maintain policies (security and operational), ensuring they’re practical, testable, and followed.

• Bachelor’s degree in an IT‑related discipline or equivalent with 5 years minimum relevant experience, or Master’s degree in an IT related discipline or equivalent with minimum 3 years experience.
• Senior-level, hands‑on experience in systems and networking.
• Senior‑level working experience with VMware.
• Demonstrated security expertise in Linux and Windows environments (e.g., hardening, access control, secure configuration).
• Experience supporting/troubleshooting SD‑WAN (vendor‑agnostic acceptable).
• Experience with NAC technologies (Cisco ISE preferred; Packet Fence or other NAC experience acceptable).
• Experience with data center builds or equivalent infrastructure provisioning projects.
• Proven ability to work independently, take ownership, and resolve issues effectively.
• Strong troubleshooting skills across network + systems + security.
• Ability to write clear policies and documentation (runbooks, standards, configuration guidance).
• Familiarity with network segmentation concepts (e.g., VLAN/VRF) and access control models.
• Scripting/automation skills (e.g., Power Shell, Python, or Bash) to support troubleshooting and policy consistency.
• Experience implementing or integrating Cisco ISE (or comparable NAC platforms), with familiarity acceptable if not already deep.
• Scripting/automation and/or prior experience that demonstrates consistent policy enforcement and operational readiness.

• VMware (e.g., VCP or equivalent).
• Cisco (CCNP/CCIE track) / security‑focused credentials.
• Security…