Senior Network Engineer

About the Role

The Senior Network Engineer will own the network architecture underpinning Torus Protect, the dedicated security technology deployed in every Torus Station and every Torus Site. Protect is built around a zero internet-facing attack surface, with all VPN tunnels outbound-initiated, and the network layer is the foundation that makes that model work in the field, at scale.

This is a hands-on, deeply technical role for someone who thinks natively in routing, switching, and segmentation, and who can carry that expertise from lab design through fielded, multi-site production deployments. You'll lead the ongoing Meraki-to-Catalyst migration and IOx containerization effort, own the VLAN and segmentation model across protect's control and OT planes, and be the final technical authority on network design decisions that touch security, reliability, and compliance.

Responsibilities

• Own protect's Network Architecture — Serve as the principal technical authority for the network design underlying Torus Protect, including switch/router hardware hardening, VLAN segmentation, and WAN/LAN topology across the fleet.
• Advance IOx Containerization — Own the technical gating for containerized workloads hosted on switch/router IOx application hosting, including kernel-level EDR compatibility, access requirements, and persistent state volume design.
• Design & Harden the Tailscale Mesh — Own the mesh VPN architecture connecting Security Routers across sites, including HA subnet router design, dual-route advertisement, and ACL scoping.
• Own VLAN & Segmentation Strategy — Maintain and evolve the VLAN architecture spanning Security Router, Maintenance, BESS, and FESS/PLC segments, ensuring appropriate isolation and documented compensating controls where standard agents cannot run.
• Validate Redundancy & Failover — Design and test failover paths across dual-NIC Security Routers, redundant switching, and VPN tunnels, with particular attention to segments relying on VPN ACL and segmentation as primary compensating controls.
• Partner on Security Architecture — Work closely with the security architecture team to ensure network design decisions align with protect's broader threat model, EDR/MDM requirements, and compliance posture (IEC 62443, NERC CIP, CMMC Level 2).
• Troubleshoot Fielded Networks — Serve as the escalation point for complex network issues across deployed Torus Stations, using packet capture and protocol analysis (including OT protocols) to diagnose and resolve field incidents.
• Document & Mentor — Produce clear reference architecture documentation and runbooks, and mentor other engineers on network design principles specific to protect's constraints.
• Cross-Functional Partnership — Collaborate with hardware procurement, firmware, security, and product teams to ensure network design keeps pace with new Station product lines and evolving compliance requirements.

Required Experience

• Active CCIE certification (Enterprise Infrastructure, Security, or equivalent track) required
• 10+ years of progressive network engineering experience, including design and ownership of production, multi-site network architectures
• Strong working knowledge of VPN mesh technologies (WireGuard, Tailscale, or similar), including HA subnet router and ACL design
• Proven experience designing network segmentation for environments with mixed IT/OT requirements, including compensating controls for devices that cannot run standard security agents
• Comfortable working with Linux-based network appliances (Raspberry Pi or similar COTS hardware), EDR agents, and MDM-managed endpoints
• Experience with protocol analysis and packet capture tools (tshark/Wireshark) for troubleshooting and forensic investigation
• Clear, precise technical communicator, comfortable documenting architecture decisions and presenting them to both engineering and compliance stakeholders
• A self-starter who identifies what needs to be done and executes without waiting to be directed

Preferred Experience

• Bachelor's degree in Computer Science, Network Engineering, or a related field, or equivalent combination of education and experience
• Experience with OT/ICS protocols (Modbus, EtherNet/IP, S7comm, Profinet) and industrial network segmentation
• Familiarity with IEC 62443, NERC CIP, or CMMC compliance frameworks
• Experience with CrowdStrike, Datadog, or similar EDR/observability stacks in a network context
• Experience deploying and hardening networks at greenfield or rapidly expanding, geographically distributed sites
• Hands-on expertise with Cisco switching and routing platforms (Catalyst and/or Meraki), including VLAN design, routing protocols, and application hosting (IOx) environments
• Cisco or vendor-neutral certifications (e.g.CCIE, CCNP) 

Additional Details

Background Check All candidates are subject to a background check.

Location This role is a hybrid remote position based in Salt Lake City. The Engineer will be expected to travel to Torus locations located in Salt Lake and Utah counties as needed.

Compensation $150,000 - 170,000 (Note: We have the flexibility to hire at different levels, which may impact the corresponding pay range.)

Work Authorization Applicants must already have the legal authorization to work in the US without requiring any employer sponsorship.

Physical Requirements

• Constantly operates a computer and other peripheral office equipment such as a printer or mouse.
• Ability to communicate information so others can understand. Must be able to exchange accurate information in these situations.
• Must report to work reliably and with the ability to use full and unimpaired skills and judgment to safely execute your job.
• Proficiency in reading, writing, and speaking English required.
• When on the production floor, required to don personal protective equipment to include, but not limited to ear protection, gloves, eye protection and/or safety helmet.
• When on the production floor, ability to observe, detect and respond to audible and visual machine malfunction warnings.

Our Perks & Benefits

Benefits eligibility is based on employment status.

Financial

• Employee Rewards Package including equity
• 401(k) Retirement Savings Plan
• Torus paid life and AD&D Insurance with options to purchase additional coverage
• Voluntary short- and long-term disability insurance

Health & Wellness

• Health Benefits Package: Choice between traditional PPO or HSA-eligible medical plans with Torus covering 50% of medical premiums; Dental insurance; and Vision insurance
• Plan participants have access to telehealth services, mental health support and coaching, and exclusive discounts on brands, dining, entertainment, and more.

Time Off

• Unlimited discretionary PTO or 10 days annual PTO
• 10 paid company holidays
• Waiting period-free 100% paid parental leave

Culture & Community

• Regular company-wide offsites to showcase our progress and learnings. A time to step back, think strategically, and work on the business together.
• Team members receive Torus branded gear
• Peer Recognition Program
• Fully stocked break rooms with free snacks and drinks. Because great work deserves great fuel.

Torus is proud to be an Equal Opportunity Employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status.

Torus participates in E-Verify. Once you accept a job offer, we will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS) with information from your Form I-9 to confirm work authorization.

#li-lw