Network Engineer II

Torus•Salt Lake City, UT

3d•$90,000 - $110,000•Hybrid

About The Position

The Network Engineer II designs, builds, tests, and validates the network supporting Torus Protect, the security technology deployed in Torus Stations and Sites. The role analyzes site requirements, prepares and tests network configurations for deployment, builds automation for repeatable configuration, and diagnoses issues across a multi-site fleet. It includes occasional on-site commissioning and physical-layer verification. The engineer works with senior network and security engineers, who review designs against the broader Protect architecture, and assumes increasing ownership over time. The position covers deployment and commissioning; physical-layer validation and records; network operations and incident support; configuration and change management; security hygiene; and documentation and compliance support. The role is based in Salt Lake City as a hybrid remote position, with travel to Torus locations in Salt Lake and Utah counties as needed and occasional travel to remote sites. It requires the ability to work outside normal business hours for maintenance windows and incident response and to participate in a rotational on-call schedule.

Requirements

2–5 years of experience in network engineering, network administration, or IT infrastructure; internships, co-ops, lab experience, and military experience count.
Working knowledge of TCP/IP, subnetting, VLANs, trunking, routing basics, DHCP, DNS, and NAT.
Hands-on experience configuring and troubleshooting enterprise switches, routers, or firewalls; Cisco or Arista preferred, with equivalent vendor experience accepted.
Familiarity with VPN concepts, including site-to-site tunnels and remote access.
Working familiarity with fiber and copper cabling and optics, including SFP/SFP+/SFP28, DAC, and single-mode versus multimode fiber.
Experience using the Linux command line and basic networking tools such as ip, ping, traceroute, tcpdump, and iptables or nftables.
Ability to read network diagrams and write clear technical documentation.
Strong troubleshooting skills and a methodical approach to isolating problems.
Ability to follow change control and checklist-driven procedures accurately.
Willingness to travel regularly within Utah and occasionally to remote sites.
Applicants must already be legally authorized to work in the United States without employer sponsorship.
Proficiency in reading, writing, and speaking English.
Ability to work outside normal business hours for maintenance windows and incident response and participate in a rotational on-call schedule.
Ability to report to work reliably and use full and unimpaired skills and judgment to execute the job safely.

Nice To Haves

Exposure to mesh or overlay VPNs such as Tailscale or WireGuard, or to zero-trust networking.
Experience with endpoint security or device management tools such as EDR or MDM.
Basic scripting in Python or Bash for automation and validation.
Familiarity with OT/ICS environments or industrial protocols such as Modbus.
Awareness of security frameworks such as IEC 62443, NERC CIP, NIST, or CMMC.
Experience with satellite or cellular WAN connectivity.
Experience with monitoring or logging tools such as Datadog, Splunk, or similar.

Responsibilities

Develop and execute Shield commissioning procedures for new Torus Station deployments, including Catalyst switch and router/firewall bring-up.
Design, stage, configure, and validate Shield Security Routers, including Ubuntu, dual-NIC, Tailscale, and EDR/MDM enrollment, before field shipment.
Design, verify, and troubleshoot VLAN configuration and reachability across Shield segments during site turn-up.
Analyze commissioning results and deviations, escalate validation failures, and recommend design changes.
Build and maintain as-built cable maps, port maps, and labeling for switches, patch panels, and fiber enclosures.
Verify optics, DACs, and fiber types against designs before installation and flag mismatches.
Maintain accurate records of IP and VLAN assignments, device configurations, and firmware versions.
Participate in rack-and-stack, patching, and link validation during site turn-up.
Monitor network health across deployed sites, including WAN, Starlink and cellular connectivity, tunnel status, switch status, and firewall status.
Analyze and troubleshoot connectivity issues, including WAN failover, VPN tunnel drops, and VLAN or ACL misconfigurations, and determine root cause.
Support and help design the out-of-band management network, including console servers, cellular OOB paths, and break-glass access procedures.
Own root-cause analysis for assigned incidents and support senior network and security engineers during incident response.
Track and manage tickets through resolution and provide clear handoff notes.
Develop, test, and apply standardized switch, router, and firewall configuration templates under change control.
Test and validate firmware and software updates before fleet rollouts and assist with deployment.
Design and test Meraki-to-Catalyst migration activities, including cutover preparation, testing, and post-migration validation.
Design, configure, and test edge routing and address translation, including BGP and BFD sessions, NAT, MLAG, and StackWise, with senior review.
Help design and enforce segmentation and VPN ACL policies, particularly for OT devices that cannot run standard agents.
Analyze and recommend firewall rule changes and reviews on Palo Alto platforms under senior guidance.
Verify and analyze EDR and MDM agent health and enrollment on Shield devices.
Analyze routine configuration audits and vulnerability remediation.
Follow and help maintain Shield security policies, including the communication device policy.
Create and update network diagrams, runbooks, and commissioning checklists.
Prepare technical documentation and evidence mapping network controls to IEC 62443, NERC CIP, and CMMC assessments.
Document known issues, lessons learned, and troubleshooting procedures for the team.

Benefits

Employee Rewards Package including equity.
401(k) Retirement Savings Plan.
Torus-paid life and AD&D insurance, with options to purchase additional coverage.
Voluntary short- and long-term disability insurance.
Medical plan options, including traditional PPO or HSA-eligible plans, with Torus covering 50% of medical premiums.
Dental insurance.
Vision insurance.
Telehealth services, mental health support and coaching, and discounts on brands, dining, entertainment, and more for plan participants.
Unlimited discretionary PTO.
10 paid company holidays.
Waiting period-free 100% paid parental leave.
Regular company-wide offsites.
Torus-branded gear.
Peer Recognition Program.
Fully stocked break rooms with free snacks and drinks.