Sr Staff Network Engineer (R6158)

Enterprise Network Architecture

• Define and maintain Shield AI's enterprise network architecture, technical strategy, standards, roadmaps, and reference designs.
• Architect scalable LAN, WAN, wireless, internet edge, data-center, VPN, SASE, NAC, and network security solutions across a globally distributed environment.
• Develop high-level and low-level designs for new offices, engineering labs, manufacturing facilities, data centers, cloud environments, acquisitions, and site integrations.
• Design resilient routing and connectivity architectures using BGP, OSPF, IPsec, private circuits, cloud interconnects, diverse internet services, and related technologies.
• Establish standards for segmentation, IP addressing, naming, routing, high availability, quality of service, observability, capacity, and lifecycle management.
• Lead architecture reviews, technology evaluations, proofs of concept, and design decisions for strategic network initiatives.

Manufacturing IoT and Hybrid Connectivity

• Develop secure network architectures for manufacturing, IoT, industrial, engineering, lab, and operational technology environments.
• Define segmentation and access patterns for manufacturing equipment, sensors, robotics, test systems, building systems, cameras, and other connected devices.
• Partner with Manufacturing, Engineering, Facilities, and Cybersecurity teams to integrate operational environments without introducing unacceptable risk to enterprise or controlled networks.
• Design hybrid connectivity across AWS, Azure, data centers, colocation facilities, and on-premises environments, including cloud transit, private connectivity, routing integration, secure ingress and egress, and shared services.
• Support the integration of acquired companies, legacy networks, international locations, and newly constructed facilities into enterprise standards.

Technical Leadership and Delivery

• Serve as the senior technical authority for complex network designs, escalations, performance issues, and resiliency improvements.
• Lead and actively participate in first-of-kind, complex, or high-risk deployments, migrations, cutovers, validation testing, incident response, and advanced troubleshooting.
• Translate architecture into implementation plans, reusable configurations, operational standards, and clear handoffs for Network Engineering and Network Security teams.
• Advance network automation and infrastructure-as-code practices using Terraform, Ansible, Python, APIs, and configuration-management platforms.
• Produce and maintain architecture diagrams, design documents, decision records, implementation standards, and operational documentation.

• 10+ years of progressive experience in enterprise network engineering and architecture across complex, multi-site environments.
• Demonstrated experience leading network architecture from requirements and design through implementation, validation, and operational handoff.
• Deep expertise in enterprise routing, switching, wireless, WAN, internet edge, VPN, network segmentation, and high-availability design.
• Advanced knowledge of BGP, OSPF, VLANs, VRFs, QoS, IPsec, DNS, DHCP, NAT, route redistribution, and resilient traffic-engineering patterns.
• Experience architecting networks across offices, engineering facilities, manufacturing environments, data centers, colocation facilities, and public cloud environments.
• Strong experience with firewall architecture, zero-trust principles, network access control, secure remote access, and layered segmentation.
• Experience with AWS and Azure networking, including transit architectures, private connectivity, cloud routing, and network security controls.
• Ability to create clear architecture diagrams, reference designs, technical standards, implementation guidance, and decision documentation.
• Experience evaluating network technologies, vendors, carrier services, and professional-services designs.
• Demonstrated ability to lead complex technical initiatives, mentor engineers, and influence outcomes across teams without direct authority.
• Strong written and verbal communication skills, including the ability to explain architecture decisions, alternatives, and risks to technical and non-technical audiences.
• Bachelor's degree in Computer Science, Engineering, Information Systems, or a related discipline, or equivalent practical experience.
• Ability to travel periodically and support planned after-hours implementations or critical incidents.

• Demonstrated experience designing secure IoT, Industrial IoT, operational technology, or manufacturing networks, including segmentation of production equipment, sensors, robotics, test systems, building systems, and other connected devices.
• Experience applying manufacturing or OT security architecture practices such as zone-and-conduit segmentation, the Purdue model, or ISA/IEC 62443 principles.
• Hands-on experience with Palo Alto Networks, Panorama, Prisma Access, Juniper, Mist, Aruba, ClearPass, or comparable enterprise platforms.
• Experience designing high-density or industrial wireless networks for manufacturing, warehouse, lab, or engineering environments.
• Experience supporting aerospace, defense, advanced manufacturing, government contracting, or another regulated environment.
• Knowledge of CMMC, NIST 800-171, ITAR, controlled unclassified information, and network designs supporting regulated or isolated environments.
• Experience integrating acquisitions, legacy environments, or international locations into global enterprise standards.
• Experience with network automation, source-controlled configuration, validation testing, and infrastructure-as-code.
• Relevant advanced certifications such as CCNP, CCIE, JNCIP, JNCIE, PCNSE, AWS Advanced Networking, or equivalent experience.