Senior IT & Network Engineer

ChargePoint•Campbell, CA

6h•$135,000 - $178,250•Onsite

About The Position

The Senior IT & Network Engineer will engineer, automate, and scale ChargePoint’s global workforce systems and campus network infrastructure from its Campbell, California headquarters. The role combines modern systems engineering and enterprise networking, including automated endpoint management, identity and access platforms, and resilient campus network and firewall infrastructure. The engineer will build zero-touch provisioning for macOS and Windows fleets, automate lifecycle and access workflows through APIs, and implement zero-trust conditional access. The role also engineers campus networks and MDF/IDF infrastructure and works with other teams to create secure network fabrics for charging-station testing and validation. It is a hands-on, 100% on-site role and serves as the principal technical escalation and engineering authority for critical identity, endpoint, and network infrastructure.

Requirements

Bachelor’s degree in Computer Science, Information Systems, Network Engineering, or equivalent practical engineering experience.
5–8 years of hands-on experience in IT systems engineering, cloud infrastructure, and enterprise network engineering.
Hands-on experience with enterprise routing and switching, 802.1X enterprise wireless (WPA-Enterprise, RADIUS/EAP-TLS), and VLAN micro-segmentation.
Experience configuring and maintaining next-generation firewalls (Palo Alto Networks PAN-OS or Fortinet FortiOS) and high-throughput IPsec/SSL VPN tunnels.
Advanced expertise with Okta identity architecture (SSO, MFA, LCM, Workflows, APIs) and Microsoft Entra ID (Conditional Access, PIM, hybrid directory sync).
Experience architecting modern MDM/UEM solutions using Microsoft Intune (Windows Autopilot, custom ADMX, compliance policies) and Kandji (macOS scripting, custom profiles, zero-touch deployment).
Proficiency in scripting, automation, and diagnostics using PowerShell, Python, or Bash; Microsoft Graph/REST APIs; and packet-analysis tools such as Wireshark or tcpdump.
Availability and commitment to work full-time on-site, five days per week, at ChargePoint’s Campbell, California headquarters.

Nice To Haves

Relevant engineering certifications such as Okta Certified Consultant/Administrator, Microsoft 365 Certified: Enterprise Administrator Expert, CCNP, or PCNSE.
Experience with cloud networking (AWS/Azure), IoT/lab testbeds, and compliance frameworks such as SOC 2 or ISO 27001.

Responsibilities

Design, configure, and maintain enterprise campus routing, switching, and high-density 802.1X wireless infrastructure across headquarters and engineering test facilities.
Engineer and harden next-generation firewalls, including micro-segmentation, zone-based policies, IPsec site-to-site tunnels, and client VPN solutions.
Partner with software, hardware, and embedded engineering teams to deploy isolated network segments, test racks, and IoT fabrics for charging-station hardware-in-the-loop validation.
Oversee campus physical and core network infrastructure, including MDF/IDF rooms, structured cabling, UPS power systems, DNS/DHCP/IPAM, and 802.1X NAC.
Engineer and automate enterprise identity platforms, including SAML/OIDC SSO, SCIM provisioning, dynamic groups, and Privileged Identity Management.
Engineer macOS and Windows MDM and endpoint architectures and build zero-touch deployment pipelines, custom profiles, and compliance baselines.
Build automations and API integrations to automate workforce lifecycles, configuration drift detection, and reporting.
Architect and manage the Microsoft 365 cloud ecosystem, including collaboration services, data governance, advanced threat protection, and telemetry.
Instrument observability across systems and network infrastructure, engineer proactive telemetry, and serve as Tier-3 escalation authority for complex systems and network incidents.