# Senior Network Systems Engineer

**Company:** [Forterra](https://hotfix.jobs/companies/forterra)
**Location:** East Palo Alto, CA, Clarksburg, MD, Arlington, VA
**Role:** DevOps / SRE
**Salary:** $140k – $185k/yr
**Experience:** 5+ years
**Skills:** BGP, Ospf, Babel, Vlans, Qos, Wireguard, Strongswan, Iptables, Systemd-Networkd, Netplan, Ansible, Terraform, Aws Vpc, EC2, Transit Gateway,
**Posted:** 2026-05-01

> Deploys, operates, and troubleshoots network infrastructure including routers, switches, Linux appliances, and AWS resources for edge-deployed communications in DDIL environments. Requires 5+ years network engineering experience, Linux proficiency, IaC automation, and 50% domestic travel.

## Job Description

## Responsibilities
- Design, deploy, and maintain L2/L3 network infrastructure — routing, switching, VLANs, trunking, QoS, and VPN tunnels.
- Configure and operate Linux-based network appliances using systemd-networkd, Netplan, iptables, StrongSwan, and WireGuard.
- Build and maintain infrastructure-as-code (Ansible, Terraform) to automate provisioning and configuration of network and compute resources.
- Collect, analyze, and act on network telemetry using Grafana, Telegraf, and related tooling.
- Deploy and manage AWS GovCloud and Commercial infrastructure (EC2, VPC, Transit Gateway, Security Groups).
- Travel to customer and field sites (~50%) for installation, commissioning, troubleshooting, and ongoing support.
- Collaborate across engineering in design reviews and deployment planning, mentor teammates, and drive best practices.

## Minimum Qualifications
- 5+ years of hands-on network engineering experience (vendor-agnostic routers and switches).
- Strong L2/L3 fundamentals — routing protocols (BGP, OSPF, or Babel), VLANs, trunking, QoS, NAT/PAT, multicast, IPv4 + IPv6.
- Strong Linux systems experience — systemd, networkd, Netplan, iptables, SSH, Docker.
- Experience with site-to-site and remote access VPN (IPsec / StrongSwan, WireGuard).
- Hands-on infrastructure automation (Ansible or Terraform) and scripting (Bash, Python, or Go).
- Working knowledge of cryptography fundamentals — PKI, IPsec, FIPS compliance requirements.
- AWS experience — VPC design, EC2, Security Groups, Transit Gateway.
- Willingness and ability to travel ~50% domestically to field and customer sites.

## Preferred Qualifications
- Experience with MANET radios and mesh networking in defense or tactical environments.
- Familiarity with NIST/CMMC compliance frameworks.
- Experience with VXLAN overlays.
- Knowledge of IGMP/PIM for multicast routing.
- Experience with DHCP/DNS infrastructure at scale.
- Exposure to telemetry pipelines (InfluxDB, Telegraf, Grafana).

## Compensation
- US Salary Range: $140,000 - $185,000
- Equity included in most full-time roles
- Competitive benefits: premium healthcare (80% covered), life/AD&D/disability insurance, PTO (20 days), parental leave (7 weeks), tuition reimbursement ($9k), 401(k) with 4% match.

## Similar roles

- [DevOps Engineer](https://hotfix.jobs/jobs/3fae50b7-bb1e-40a6-81dc-d263d7391dc1) - Pump.co - San Francisco, CA - $140k – $200k/yr
- [Senior Infrastructure Engineer](https://hotfix.jobs/jobs/0c56c557-0f7b-49c3-8e76-b8b2242895c0) - Scrunch - Remote - $140k – $200k/yr
- [Senior Infrastructure Engineer - Postgres](https://hotfix.jobs/jobs/9fe70ed5-6992-4761-81b2-6fd1540bd5ab) - Clickhouse - Remote - $140k – $230k/yr
- [Senior DevOps Engineer](https://hotfix.jobs/jobs/10600bae-481c-4365-ab78-2a891ef6d030) - Regal.ai - New York, NY - $140k – $180k/yr
- [Sr. Production Engineer, Solutions Engineering](https://hotfix.jobs/jobs/cf546045-86b3-4575-8187-5c154813c21f) - Pinterest - Remote - $140k – $288k/yr

**Apply:** https://hotfix.jobs/jobs/1b0a2131-90b5-452d-abcc-3601f5ded0b4
**Canonical:** https://hotfix.jobs/jobs/1b0a2131-90b5-452d-abcc-3601f5ded0b4