IT Networking Engineer

Position Summary

We are seeking an experienced IT Networking Engineer to design, deploy, operate, and secure our global hybrid network environment. This role spans our corporate offices across the US (Santa Clara), China (Shanghai and Xi’an), and Europe (Germany and Romania), our collocated data-center at Telx, and our production and development environments in AWS. The network engineer will also own the network-security posture and the integration of two-factor authentication (2FA) with GM backend.

• Design, deploy, and maintain corporate LAN, WLAN, and WAN — including switches, routers, wireless controllers, access points, and SD-WAN appliances.
• Manage office connectivity (ISP circuits, MPLS/SD-WAN, site-to-site VPNs) across all corporate locations.
• Administer DNS, DHCP, IPAM, NTP, and 802.1X/NAC for wired and wireless access.
• Support end-user connectivity issues escalated from the Help Desk and drive root-cause resolution.
• Plan capacity, lifecycle, and refresh cycles for corporate networking hardware.

• US — Santa Clara (HQ): Operate the headquarters network as the global hub; maintain primary internet circuits, core/distribution switching, enterprise Wi‑Fi, video-conferencing infrastructure, and the on-prem services that serve all regions.
• China — Shanghai & Xi’an: Engineer reliable connectivity into and out of mainland China, accounting for cross-border latency, the Great Firewall, and regional ISP behavior. Maintain compliant site-to-site VPN / SD-WAN links to HQ and to AWS regions used by China teams, and partner with local carriers and ICP-licensed providers as required.
• Europe — Germany & Romania: Operate office networks in compliance with GDPR and EU data-handling requirements. Maintain redundant WAN links to HQ and to the Telx data-center, and ensure consistent identity, Wi‑Fi, and security policies across both sites.
• Establish a consistent global standard for switching, Wi‑Fi, firewalls, and remote access across all offices, while allowing for region-specific carriers and regulatory constraints.
• Coordinate with regional IT contacts, MSPs, and on-site smart-hands for installations, moves/adds/changes, and incident response across multiple time zones.
• Optimize WAN performance for collaboration tools (Zoom, Teams, VoIP), code repositories, and engineering build/test traffic between regions.
• Maintain regional documentation, circuit inventories, vendor contacts, and escalation paths for every site.
• Participate in a follow-the-sun on-call model so that global users receive timely support regardless of region.

• Own the physical and logical network at our Telx data-center, including top-of-rack and core/aggregation switching, routing, load balancers, and out-of-band management.
• Manage cross-connects, carrier circuits, and peering relationships at Telx; coordinate smart-hands work with the facility.
• Operate and tune dynamic routing (BGP, OSPF), VLANs/VXLAN, MLAG/stacking, and QoS.
• Maintain hybrid connectivity between the Telx data-center and AWS via AWS Direct Connect, IPsec VPNs, and Transit Gateway.
• Ensure environmental, power, and rack-level documentation is current; participate in DR and failover testing.

• Architect and operate AWS network constructs: VPCs, subnets, route tables, NAT/IGW, Transit Gateway, Direct Connect, VPC Peering, Private Link, Route 53, ELB/ALB/NLB, Cloud Front, Global Accelerator.
• Segment and isolate production, staging, and development environments using a multi-account / Transit Gateway strategy.
• Codify network infrastructure with Terraform (or Cloud Formation/CDK); enforce changes through CI/CD with peer review.
• Monitor performance and cost of network components; tune for latency, throughput, and spend.
• Partner with Dev Ops/SRE teams on service connectivity, Kubernetes/EKS networking (CNI, ingress, service mesh), and observability.

• Design and enforce a defense-in-depth network security posture: next-gen firewalls, IDS/IPS, web filtering, DDoS protection (AWS Shield / WAF), and micro‑segmentation.
• Manage perimeter, internal, and cloud security…