Senior Network Engineer

Torus•Salt Lake City, UT

5d•$150,000 - $170,000•Hybrid

About The Position

The Senior Network Engineer will own the network architecture underpinning Torus Protect, the dedicated security technology deployed in every Torus Station and every Torus Site. Protect is built around a zero internet-facing attack surface, with all VPN tunnels outbound-initiated, and the network layer is the foundation that makes that model work in the field, at scale. This is a hands-on, deeply technical role for someone who thinks natively in routing, switching, and segmentation, and who can carry that expertise from lab design through fielded, multi-site production deployments. You'll lead the ongoing Meraki-to-Catalyst migration and IOx containerization effort, own the VLAN and segmentation model across protect's control and OT planes, and be the final technical authority on network design decisions that touch security, reliability, and compliance.

Requirements

Active CCIE certification (Enterprise Infrastructure, Security, or equivalent track) required
10+ years of progressive network engineering experience, including design and ownership of production, multi-site network architectures
Strong working knowledge of VPN mesh technologies (WireGuard, Tailscale, or similar), including HA subnet router and ACL design
Proven experience designing network segmentation for environments with mixed IT/OT requirements, including compensating controls for devices that cannot run standard security agents
Comfortable working with Linux-based network appliances (Raspberry Pi or similar COTS hardware), EDR agents, and MDM-managed endpoints
Experience with protocol analysis and packet capture tools (tshark/Wireshark) for troubleshooting and forensic investigation
Clear, precise technical communicator, comfortable documenting architecture decisions and presenting them to both engineering and compliance stakeholders
A self-starter who identifies what needs to be done and executes without waiting to be directed

Nice To Haves

Bachelor's degree in Computer Science, Network Engineering, or a related field, or equivalent combination of education and experience
Experience with OT/ICS protocols (Modbus, EtherNet/IP, S7comm, Profinet) and industrial network segmentation
Familiarity with IEC 62443, NERC CIP, or CMMC compliance frameworks
Experience with CrowdStrike, Datadog, or similar EDR/observability stacks in a network context
Experience deploying and hardening networks at greenfield or rapidly expanding, geographically distributed sites
Hands-on expertise with Cisco switching and routing platforms (Catalyst and/or Meraki), including VLAN design, routing protocols, and application hosting (IOx) environments
Cisco or vendor-neutral certifications (e.g.CCIE, CCNP)

Responsibilities

Own protect's Network Architecture — Serve as the principal technical authority for the network design underlying Torus Protect, including switch/router hardware hardening, VLAN segmentation, and WAN/LAN topology across the fleet.
Advance IOx Containerization — Own the technical gating for containerized workloads hosted on switch/router IOx application hosting, including kernel-level EDR compatibility, access requirements, and persistent state volume design.
Design & Harden the Tailscale Mesh — Own the mesh VPN architecture connecting Security Routers across sites, including HA subnet router design, dual-route advertisement, and ACL scoping.
Own VLAN & Segmentation Strategy — Maintain and evolve the VLAN architecture spanning Security Router, Maintenance, BESS, and FESS/PLC segments, ensuring appropriate isolation and documented compensating controls where standard agents cannot run.
Validate Redundancy & Failover — Design and test failover paths across dual-NIC Security Routers, redundant switching, and VPN tunnels, with particular attention to segments relying on VPN ACL and segmentation as primary compensating controls.
Partner on Security Architecture — Work closely with the security architecture team to ensure network design decisions align with protect's broader threat model, EDR/MDM requirements, and compliance posture (IEC 62443, NERC CIP, CMMC Level 2).
Troubleshoot Fielded Networks — Serve as the escalation point for complex network issues across deployed Torus Stations, using packet capture and protocol analysis (including OT protocols) to diagnose and resolve field incidents.
Document & Mentor — Produce clear reference architecture documentation and runbooks, and mentor other engineers on network design principles specific to protect's constraints.
Cross-Functional Partnership — Collaborate with hardware procurement, firmware, security, and product teams to ensure network design keeps pace with new Station product lines and evolving compliance requirements.

Benefits

Employee Rewards Package including equity
401(k) Retirement Savings Plan
Torus paid life and AD&D Insurance with options to purchase additional coverage
Voluntary short- and long-term disability insurance
Health Benefits Package: Choice between traditional PPO or HSA-eligible medical plans with Torus covering 50% of medical premiums; Dental insurance; and Vision insurance
Plan participants have access to telehealth services, mental health support and coaching, and exclusive discounts on brands, dining, entertainment, and more.
Unlimited discretionary PTO or 10 days annual PTO
10 paid company holidays
Waiting period-free 100% paid parental leave
Regular company-wide offsites to showcase our progress and learnings. A time to step back, think strategically, and work on the business together.
Team members receive Torus branded gear
Peer Recognition Program
Fully stocked break rooms with free snacks and drinks.