Systems Engineer, Network & Security

Sungrow USA Corporation • US,

2d • $0 - $150,000

About The Position

The Systems Engineer is responsible for designing, implementing, and maintaining Sungrow USA’s enterprise systems and secure network infrastructure across on premises and cloud environments while owning the certificate lifecycle and PKI infrastructure to enable secure and scalable certificate based authentication across cloud, network, and endpoint platforms, with a primary focus on network security design, security architecture, API integration, systems engineering, and SaaS platform optimization; this role leads the development of scalable and highly available systems that ensure reliable network performance and strong data protection through modern security controls, and works closely with Infrastructure, Security, and IT Operations teams while also serving as a backup to Infrastructure Engineers to maintain continuity of critical services by supporting core enterprise systems and foundational IT services during absences, coverage gaps, and periods of increased workload.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or related field.
• Strong analytical and problem-solving skills.
• Ability to work independently and collaboratively in a fast-paced environment.
• Excellent communication and documentation skills.
• Organization, detail-oriented nature, and strong initiative.
• Proactive approach to infrastructure optimization and automation.

Nice To Haves

• Relevant certifications (e.g., CCNA, Zscaler ZDTE, Fortinet NSE 4+, AZ-700) preferred.
• Mandarin fluency preferred but not required.

Responsibilities

• Design, implement, and support enterprise network infrastructure, including LAN/WAN, SD-WAN, wireless, VPN, and hybrid cloud connectivity across corporate and remote locations.
• Administer and optimize Fortinet, Zscaler (ZIA/ZPA), and cloud networking solutions to deliver secure access, Zero Trust connectivity, network segmentation, and resilient perimeter security.
• Design and manage network access control and certificate-based authentication using IEEE 802.1X, RADIUS, Microsoft Intune, Microsoft Cloud PKI, and enterprise PKI platforms.
• Lead end-to-end certificate lifecycle management, including issuance, deployment, monitoring, renewal, revocation, and ACME-based automation using CyberArk Certificate Manager, Keyfactor Command, AppViewX CERT+, EJBCA, HashiCorp Vault, and DigiCert solutions.
• Architect and manage Azure and AWS networking, including virtual networks, routing, DNS, firewall policies, and hybrid connectivity between cloud and on-premises environments.
• Manage ISP, cellular, and satellite connectivity services while monitoring network performance, availability, bandwidth utilization, and service reliability.
• Troubleshoot and resolve complex infrastructure, network, authentication, and integration issues affecting performance, availability, and security.
• Design, develop, and support enterprise integrations using Microsoft Graph API, REST APIs, PowerShell, Python, and automation platforms to streamline business processes and system operations.
• Administer identity and access management platforms, including Microsoft Entra ID and Okta, supporting SSO, MFA, RBAC, identity federation, and secure cross-platform integrations.
• Design and enforce Data Loss Prevention (DLP), security monitoring, and compliance controls using Microsoft Purview, Zscaler, and enterprise security platforms.
• Design, implement, and support enterprise systems and SaaS platforms, ensuring scalability, high availability, disaster recovery, and operational resilience.
• Provide Tier 3 escalation support for complex infrastructure, network, and system issues while partnering with cross-functional teams on strategic IT initiatives and platform improvements.
• Ensure audit readiness and support compliance programs, including ISO 27001 and SOC 2, by implementing controls, maintaining evidence, and addressing audit requirements.
• Develop and maintain architecture diagrams, operational documentation, SOPs, and knowledge base content to support standardization, knowledge sharing, and operational excellence.

Benefits

• Competitive salary and annual bonus eligibility.
• Comprehensive benefits package including health, dental, vision, and retirement plans.
• Strong personal and company growth opportunities.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level