[Hiring] Principal Network Engineer @Montera

Role Description

Montera is seeking a Principal Network Engineer to own the architecture, security, and governance of all Montera-operated networking — spanning corporate IT, critical-infrastructure OT (BMS, SCADA, DCIM, life-safety), administrative, guest, and Wi-Fi networks — and the secure demarcation to customer-managed fabrics. This role owns Montera’s public IP strategy: ARIN/RIR address application and justification, ASN and BGP strategy, IPAM, and the governance of all network allocations, firewalls, and security policy across the fleet.

The role works hand-in-glove with the Principal Controls Engineer. Controls defines the data — the points, tags, and exposure scope Montera surfaces to itself and to the customer; Network delivers the secure transport, segmentation, and demarcation that lets that data be consumed without compromising OT.

Montera facilities are single-tenant — one customer per building or campus — so the customer data-access model is defined with that single customer and governed jointly by these two roles. Neither can deliver it alone.

Qualifications

• Bachelor’s degree in Controls, Electrical, Mechanical, or Systems Engineering, or related field (Master’s preferred).
• 10+ years of experience designing and operating data center networks for hyperscale, mission-critical, or regulated environments.
• Direct experience with RIR/ARIN address application and justification, ASN/BGP, and enterprise IPAM at multi-site scale.
• Deep firewall, segmentation, and secure-remote-access expertise across both IT and OT (BMS/SCADA/DCIM), with IT/OT segmentation and IEC 62443 / Purdue-model familiarity.
• Proven experience defining single-tenant customer demarcation and data-access models in secure environments.
• Strong customer-facing capability: translating requirements into implementable designs and clear demarcation models.
• Network automation and configuration management (Git-based workflows, templating, infrastructure-as-code).

Requirements

• Own and standardize all Montera-operated networks: corporate IT, OT controls (BMS/SCADA/DCIM), life-safety interfaces, administrative, guest, and Wi-Fi.
• Define segmentation, zoning, and isolation strategy across IT, OT, and customer domains (e.g., Purdue-model / IEC 62443 alignment for OT).
• Establish redundancy and survivability standards for mission-critical internal services, monitoring transport, and management networks.
• Own the public IP strategy: ARIN/RIR address-space application and justification, ASN acquisition, and BGP/peering/transit strategy for Montera-operated services.
• Own IPAM and the governance of all address allocations across sites — internal, OT, shared services, and Montera-side customer handoff ranges.
• Define addressing, routing, and DNS standards that scale cleanly across a multi-site portfolio.
• Own firewall architecture and policy, secure remote-access patterns, role-based access control, micro-segmentation, and audit logging across IT and OT.
• Design high-security architectures for OT and critical-infrastructure systems; partner with controls, cybersecurity, and operations on baseline hardening, monitoring, and incident-response workflows.
• Lead risk reviews of exposure paths between customer, IT, and OT domains and drive mitigations through design and governance (supporting Montera’s ISO 27001 posture).
• Translate the controls-defined data-exposure scope into the secure delivery path: DMZ/broker placement, read-only least-privilege boundaries, firewall policy, and the customer-facing network demarcation for OT/telemetry data.
• Define demarcation models, handoff points, and clear IT/OT/customer responsibility boundaries between Montera-operated shared infrastructure and customer-managed fabrics.
• Provision the secure network path for AI optimization platforms (e.g., Phaidra) consuming Montera telemetry — edge, on-prem, or cloud — in partnership with the Controls Engineer.
• Support customer technical reviews and acceptance testing for data-access and connectivity commitments tied to leases and SLAs.
• Engage the customer directly to capture AI/compute networking requirements: fabric type, bandwidth, latency, scale, storage connectivity, and operational model.
• Translate customer requirements into deployable designs within facility constraints (space, pathways, power/cooling, operational standards).
• Define the demarcation between Montera-operated shared infrastructure and customer-managed compute/storage fabrics, with clear handoff and responsibility.
• Define configuration, documentation, and automation standards (IPAM, addressing, routing, access control) using Git-based / infrastructure-as-code workflows.
• Support construction and commissioning milestones: testing, validation, and turnover readiness for internal and shared-service networks.
• Establish observability standards and operational runbooks for troubleshooting and incident response.
• Lead technical evaluation and selection of network OEMs, firewall/security, Wi-Fi/access, and cabling/optics partners for Montera-owned systems.
• Drive standardization and cost-optimized BOM strategy aligned to availability, lead time, power, and operational risk.
• Own technical change control and vendor issue resolution through deployment and lifecycle support.

Benefits

• Comprehensive Health Coverage: We pay 90% of health premiums for employees and their dependents.
• Generous Time Off: Up to 8 weeks of paid time off per year, which includes holidays, PTO, and sick time.
• Parental Leave: Up to 8 weeks of paid time off after 6 months of employment.
• Financial Security: 401(k) plan with immediate eligibility, no vesting requirement, and employer match contributions up to 6%.
• Learning & Development Reimbursement: Up to $3,500 reimbursed annually for approved courses, certifications, conferences, and professional development opportunities.
• Extra Support: Remote work stipend to help you stay connected.