Principal Network Engineer

Montera

8d • $200,000 - $250,000 • Remote

About The Position

Montera is seeking a Principal Network Engineer to own the architecture, security, and governance of all Montera-operated networking — spanning corporate IT, critical-infrastructure OT (BMS, SCADA, DCIM, life-safety), administrative, guest, and Wi-Fi networks — and the secure demarcation to customer-managed fabrics. This role owns Montera’s public IP strategy: ARIN/RIR address application and justification, ASN and BGP strategy, IPAM, and the governance of all network allocations, firewalls, and security policy across the fleet. The role works hand-in-glove with the Principal Controls Engineer. Controls defines the data — the points, tags, and exposure scope Montera surfaces to itself and to the customer; Network delivers the secure transport, segmentation, and demarcation that lets that data be consumed without compromising OT. Montera facilities are single-tenant — one customer per building or campus — so the customer data-access model (what the customer sees, how they reach it, and where the trust boundary sits) is defined with that single customer and governed jointly by these two roles. Neither can deliver it alone.

Requirements

• Bachelor’s degree in Controls, Electrical, Mechanical, or Systems Engineering, or related field (Master’s preferred).
• 10+ years of experience designing and operating data center networks for hyperscale, mission-critical, or regulated environments.
• Direct experience with RIR/ARIN address application and justification, ASN/BGP, and enterprise IPAM at multi-site scale.
• Deep firewall, segmentation, and secure-remote-access expertise across both IT and OT (BMS/SCADA/DCIM), with IT/OT segmentation and IEC 62443 / Purdue-model familiarity.
• Proven experience defining single-tenant customer demarcation and data-access models in secure environments.
• Strong customer-facing capability: translating requirements into implementable designs and clear demarcation models.
• Network automation and configuration management (Git-based workflows, templating, infrastructure-as-code).

Responsibilities

• Own and standardize all Montera-operated networks: corporate IT, OT controls (BMS/SCADA/DCIM), life-safety interfaces, administrative, guest, and Wi-Fi.
• Define segmentation, zoning, and isolation strategy across IT, OT, and customer domains (e.g., Purdue-model / IEC 62443 alignment for OT).
• Establish redundancy and survivability standards for mission-critical internal services, monitoring transport, and management networks.
• Own the public IP strategy: ARIN/RIR address-space application and justification, ASN acquisition, and BGP/peering/transit strategy for Montera-operated services.
• Own IPAM and the governance of all address allocations across sites — internal, OT, shared services, and Montera-side customer handoff ranges.
• Define addressing, routing, and DNS standards that scale cleanly across a multi-site portfolio.
• Own firewall architecture and policy, secure remote-access patterns, role-based access control, micro-segmentation, and audit logging across IT and OT.
• Design high-security architectures for OT and critical-infrastructure systems; partner with controls, cybersecurity, and operations on baseline hardening, monitoring, and incident-response workflows.
• Lead risk reviews of exposure paths between customer, IT, and OT domains and drive mitigations through design and governance (supporting Montera’s ISO 27001 posture).
• Translate the controls-defined data-exposure scope into the secure delivery path: DMZ/broker placement, read-only least-privilege boundaries, firewall policy, and the customer-facing network demarcation for OT/telemetry data.
• Define demarcation models, handoff points, and clear IT/OT/customer responsibility boundaries between Montera-operated shared infrastructure and customer-managed fabrics.
• Provision the secure network path for AI optimization platforms (e.g., Phaidra) consuming Montera telemetry — edge, on-prem, or cloud — in partnership with the Controls Engineer.
• Support customer technical reviews and acceptance testing for data-access and connectivity commitments tied to leases and SLAs.
• Engage the customer directly to capture AI/compute networking requirements: fabric type, bandwidth, latency, scale, storage connectivity, and operational model.
• Translate customer requirements into deployable designs within facility constraints (space, pathways, power/cooling, operational standards).
• Define the demarcation between Montera-operated shared infrastructure and customer-managed compute/storage fabrics, with clear handoff and responsibility.
• Define configuration, documentation, and automation standards (IPAM, addressing, routing, access control) using Git-based / infrastructure-as-code workflows.
• Support construction and commissioning milestones: testing, validation, and turnover readiness for internal and shared-service networks.
• Establish observability standards and operational runbooks for troubleshooting and incident response.
• Lead technical evaluation and selection of network OEMs, firewall/security, Wi-Fi/access, and cabling/optics partners for Montera-owned systems.
• Drive standardization and cost-optimized BOM strategy aligned to availability, lead time, power, and operational risk.
• Own technical change control and vendor issue resolution through deployment and lifecycle support.

Benefits

• Comprehensive Health Coverage: We pay 90% of health premiums for employees and their dependents.
• Generous Time Off: Up to 8 weeks of paid time off per year, which includes holidays, PTO, and sick time.
• Parental Leave: Up to 8 weeks of paid time off after 6 months of employment.
• Financial Security: 401(k) plan with immediate eligibility, no vesting requirement, and employer match contributions up to 6%.
• Learning & Development Reimbursement: Up to $3,500 reimbursed annually for approved courses, certifications, conferences and professional development opportunities.
• Extra Support: Remote work stipend to help you stay connected.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal