Network Engineer

Role overview This position designs and operates the network layer underneath a privacy-first encrypted vault for personal photos and videos, covering LAN/WAN, VPN, firewalls, and load balancing. The goal is traffic that is fast, well segmented, and resilient to misconfiguration. You will partner closely with the security team on zero-trust access paths and policy updates.

Responsibilities - Configure and maintain routers, switches, firewalls, and load balancers across production and staging environments - Implement network segmentation between admin, application, and database tiers - Monitor latency, packet loss, and the effectiveness of DDoS mitigation controls - Produce and maintain network diagrams plus change plans suitable for audit and disaster recovery reviews - Work with security on zero-trust access design and VPN policy updates

Requirements - Practical experience with BGP, VPN technologies, and enterprise firewall platforms - Solid grasp of TLS termination, mTLS, and common L4/L7 load balancing patterns - Disciplined change management with clear rollback planning - Industry certification such as CCNP or JNCIP, or equivalent depth of experience

Benefits and work setup - Remote-friendly with global hiring and async-first collaboration across time zones