Network Engineer II

About the Role

The Network Engineer II designs, builds, and validates the network behind Torus Protect, the dedicated security technology deployed in every Torus Station and Torus Site. Protect is designed to keep our deployed energy infrastructure secure, and the network layer is what makes that work reliably in the field, at scale.

This is a technical role for someone with strong networking fundamentals (routing, switching, and segmentation) who wants to grow into production-scale deployments. You will analyze site requirements, design and test the network configurations that go into each deployment, build automation that makes those configurations repeatable, and diagnose root causes across a multi-site fleet. You will validate your work on site on occasion, including hands-on commissioning and physical-layer verification. You will work alongside senior network and security engineers, who review your designs against the broader Protect architecture, and you will take on more ownership as you grow.

Who You Are

You build technology people can rely on, and when it breaks, you find out why. You write down what you learn so the next engineer doesn’t start from zero.

• You ask before you push back. You find out what others know about the environment before you reject a design or change a config, and you assume good intent.
• You say it early and directly. You flag risks and missed windows as soon as you see them, give clear feedback, and praise good work openly.
• You build on strengths. You look for what each teammate does well and use it to cover the team’s gaps.
• You lead with the answer. Incident updates, change requests, and runbooks open with the status and the action needed.
• You move fast and test first. You automate repeatable work and validate before rollout.
• You think in systems. Network, compute, software, and security decisions depend on each other, and on power and cooling at the site. You use telemetry and logs to make the call, and when a technical preference conflicts with what the customer needs, the customer wins.

Responsibilities

Deployment and commissioning

• Develop and execute Shield commissioning procedures for new Torus Station deployments, including Catalyst switch bring-up and router/firewall bring-up
• Design, stage, configure, and validate Shield Security Routers (Ubuntu, dual-NIC, Tailscale, EDR/MDM enrollment) before field shipment
• Design, verify and troubleshoot VLAN configuration and reachability across the Shield segments (Security Router, Maintenance, BESS, FESS) during site turn-up
• Analyze commissioning results and deviations accurately, escalate anything that fails validation, and recommend design changes

Physical Layer and Records

• Build and maintain as-built cable maps, port maps, and labeling for switches, patch panels, and fiber enclosures
• Verify optics, DACs, and fiber types against the design before install (media type, reach, vendor coding compatibility, MPO polarity) and flag mismatches early
• Keep accurate records of IP and VLAN assignments, device configs, and firmware versions
• Participate in  rack-and-stack, patching, and link validation during site turn-up to validate the design in the field

Network operations and support

• Monitor network health across deployed sites (WAN, Starlink and cellular connectivity, tunnel status, switch and firewall status)
• Analyze and troubleshoot connectivity issues, including WAN failover, VPN tunnel drops, and VLAN or ACL misconfigurations, and determine root cause 
• Support and help design the out-of-band management network (console servers, cellular OOB path, break-glass access procedures)
• Own root-cause analysis for assigned incidents and support the senior network and security engineers during incident response
• Track and manage tickets through resolution, with clear handoff notes

Configuration and change management

• Develop, test, and apply standardized configuration templates to switches, routers, and firewalls (Cisco and Arista) under change control
• Test and validate firmware and software updates before fleet rollouts, and assist with deployment
• Design and test  Meraki-to-Catalyst migration activities, including cutover prep, testing, and post-migration validation
• Design, configure, and test edge routing and address translation (BGP and BFD sessions, NAT, MLAG and StackWise) with senior review 

Security hygiene

• Help design and enforce segmentation and VPN ACL policies, especially for OT devices that cannot run standard agents
• Analyze and recommend  firewall rule changes and reviews on Palo Alto platforms under senior guidance
• Verify and analyze EDR and MDM agent health and enrollment on Shield devices
• Analyze  routine configuration audits and vulnerability remediation
• Follow and help maintain Shield security policies, including the communication device policy

Documentation and compliance support

• Create and update network diagrams, runbooks, and commissioning checklists
• Prepare technical documentation and evidence that maps network control to IEC 62443, NERC CIP, and CMMC assessments
• Document known issues, lessons learned, and troubleshooting procedures for the team

Required Experience

• 2-5 years of experience in a network engineering, network administration, or IT infrastructure role (internships, co-ops, and lab or military experience count)
• Working knowledge of core networking concepts: TCP/IP, subnetting, VLANs, trunking, routing basics, DHCP, DNS, and NAT
• Hands-on experience configuring and troubleshooting enterprise switches, routers, or firewalls (Cisco or Arista preferred, but equivalent vendor experience is fine)
• Familiarity with VPN concepts, such as site-to-site tunnels and remote access
• Working familiarity with fiber and copper cabling and optics (SFP/SFP+/SFP28, DAC, single-mode vs multimode)
• Experience with the Linux command line, including basic networking tools (ip, ping, traceroute, tcpdump, iptables or nftables)
• Ability to read network diagrams and write clear technical documentation
• Strong troubleshooting skills and a methodical approach to isolating problems
• Ability to follow change control and checklist-driven procedures accurately
• Willingness to regularly travel within Utah, with occasional travel to remote sites

Preferred Experience

• Exposure to mesh or overlay VPNs (Tailscale, WireGuard) or zero-trust networking
• Experience with endpoint security or device management tools (EDR, MDM)
• Basic scripting in Python or Bash for automation and validation
• Familiarity with OT/ICS environments or industrial protocols (Modbus, etc.)
• Awareness of security frameworks such as IEC 62443, NERC CIP, NIST, or CMMC
• Experience with satellite or cellular WAN connectivity
• Experience with monitoring or logging tools (Datadog, Splunk, or similar)

Additional Details

Background Check All candidates are subject to a background check.

Location This role is a hybrid remote position based in Salt Lake City. The Engineer will be expected to travel to Torus locations located in Salt Lake and Utah counties as needed.

Compensation $90,000 - 110,000 (Note: We have the flexibility to hire at different levels, which may impact the corresponding pay range.)

Work Authorization Applicants must already have the legal authorization to work in the US without requiring any employer sponsorship.

Physical Requirements

• Regularly operates a computer and other peripheral office equipment such as a printer or mouse.
• Ability to communicate information so others can understand. Must be able to exchange accurate information in these situations.
• Must report to work reliably and with the ability to use full and unimpaired skills and judgment to safely execute your job.
• Proficiency in reading, writing, and speaking English required.
• When on the production floor, required to don personal protective equipment to include, but not limited to ear protection, gloves, eye protection and/or safety helmet.
• When on the production floor, ability to observe, detect and respond to audible and visual machine malfunction warnings.
• Ability to lift and carry up to 50 lbs, and to lift heavier equipment with a team lift or mechanical aid.
• Ability to read, identify, observe and recognize details, color-coding and fine print at close range on associated engineering drawings.
• Ability to bend, kneel, crouch, reach, and work in confined spaces such as equipment racks, closets, and enclosures, for up to 2 hours at a time.
• Ability to ascend ladders and work at heights.
• Ability to work in environments with elevated noise and high temperatures, including outdoors in varying weather at remote sites. 
• Ability to handle and visually inspect small components such as fiber connectors, optics, and labeled cables.
• Ability to travel to Torus sites in Salt Lake and Utah counties and occasionally to remote sites.
• Ability to work outside normal business hours for maintenance windows and incident response, with an expectation to be on a rotational on-call schedule.

Our Perks & Benefits

Benefits eligibility is based on employment status.

Financial

• Employee Rewards Package including equity
• 401(k) Retirement Savings Plan
• Torus paid life and AD&D Insurance with options to purchase additional coverage
• Voluntary short- and long-term disability insurance

Health & Wellness

• Health Benefits Package: Choice between traditional PPO or HSA-eligible medical plans with Torus covering 50% of medical premiums; Dental insurance; and Vision insurance
• Plan participants have access to telehealth services, mental health support and coaching, and exclusive discounts on brands, dining, entertainment, and more.

Time Off

• Unlimited discretionary PTO
• 10 paid company holidays
• Waiting period-free 100% paid parental leave

Culture & Community

• Regular company-wide offsites to showcase our progress and learnings. A time to step back, think strategically, and work on the business together.
• Team members receive Torus branded gear
• Peer Recognition Program
• Fully stocked break rooms with free snacks and drinks. Because great work deserves great fuel.

Torus is proud to be an Equal Opportunity Employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status.

Torus participates in E-Verify. Once you accept a job offer, we will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS) with information from your Form I-9 to confirm work authorization.

#li-lw #li-hybrid