# Senior Network Engineer

**Company:** [Northwood Space](https://hotfix.jobs/companies/northwood-space)
**Location:** Los Angeles, CA, California
**Role:** DevOps / SRE
**Salary:** $133k – $215k/yr
**Experience:** 5+ years
**Skills:** Fortigate, Zero Trust, AWS, Aws Govcloud, Cloudflare, Vlan, Ansible, Netbox, Network Segmentation, Ts/Sci Clearance
**Posted:** 2026-06-19

> Design, deploy, and operate enterprise network infrastructure for corporate facilities and hybrid cloud environments with zero-trust architecture and compliance requirements. Requires 5+ years enterprise networking experience and ability to obtain TS/SCI clearance.

## Job Description

## Responsibilities

### Campus & Facility Network Architecture
- Design and build LAN infrastructure for corporate offices and facilities, including switching, routing, VLAN design, and network segmentation strategies that support enterprise workloads.
- Own network lifecycle management across facilities, including hardware procurement, capacity planning, firmware management, and documentation.
- Deploy and manage enterprise wireless infrastructure across multiple facilities, ensuring secure wireless access for corporate users and isolated network segments for operational and ITAR-controlled systems.

### Zero-Trust & Network Security
- Implement zero-trust network architecture across Northwood's facilities and cloud environments, including microsegmentation, identity-aware access controls, and least-privilege network policies.
- Deploy, configure, and manage FortiGate firewall infrastructure, including policy management, network segmentation, and security zone enforcement for government and ITAR-controlled workloads.
- Administer Cloudflare Zero Trust and tunnel configurations to support secure remote access, site-to-site connectivity, and traffic inspection across distributed facilities.
- Collaborate with the security engineering team to implement network-based detection controls, integrate network telemetry with SIEM platforms, and support incident response efforts.

### Hybrid Cloud & WAN Connectivity
- Design and manage hybrid network connectivity between on-premises facilities, AWS Commercial, AWS GovCloud, and Cloudflare's backbone, including VPN solutions, private connectivity, and multi-cloud routing architectures.
- Ensure network architecture supports compliance requirements for CUI handling, including appropriate segmentation between commercial and government workloads.

### Automation & Monitoring
- Implement network monitoring and observability tooling to maintain visibility into performance, availability, and security posture across all network segments.
- Develop and maintain network automation using tools such as Ansible, NetBox, or equivalent, reducing manual operational burden and enforcing configuration consistency.
- Document network architecture, configurations, and standard operating procedures to support compliance audits and operational continuity.

### Cross-Functional Collaboration
- Partner with security engineering on firewall policy reviews, network access control design, and compliance evidence collection for CMMC and FedRAMP assessments.
- Collaborate with infrastructure and engineering teams to ensure network design supports operational requirements and future scaling.
- Integrate network infrastructure with identity management systems, including Okta, to support network access policy enforcement and user lifecycle management.

## Requirements
- Bachelor's degree in Engineering, Computer Science, or a related discipline and 5+ years of enterprise networking experience, or 7+ years of enterprise networking experience without a degree.
- Hands-on experience with enterprise switching and routing, VLAN design, and network segmentation in production environments.
- Demonstrated experience deploying and managing FortiGate firewall infrastructure, including policy management and network zone enforcement.
- Experience designing and implementing zero-trust network architectures, including microsegmentation and identity-aware access controls.
- Experience with cloud networking in AWS, AWS GovCloud, or multi-cloud environments, including hybrid connectivity and private networking.
- Hands-on experience with Cloudflare, including Zero Trust, tunnels, and DNS.
- Experience deploying and managing enterprise wireless infrastructure across multiple facilities.
- Proficiency with network monitoring, automation, and troubleshooting tools.
- Ability to obtain and maintain a TS/SCI clearance.
- U.S. citizenship or status as a lawful permanent resident required to conform with ITAR export regulations.

## Nice-to-Haves
- Active TS clearance or higher.
- Proficiency with network automation tools including Ansible and NetBox.
- Industry certifications such as CCNP, ACNP, or equivalent enterprise networking credentials.
- Background in aerospace, defense, critical infrastructure, or other government-adjacent regulated industries.
- Experience with ITAR compliance and network isolation requirements for controlled technical information.
- Familiarity with CMMC, NIST 800-171, and DFARS compliance requirements as they relate to network architecture.
- Experience integrating network infrastructure with identity management platforms such as Okta or Azure Active Directory.

## Similar roles

- [Sr. Software Engineer, Infrastructure](https://hotfix.jobs/jobs/b554cfa9-2c9c-4e25-a907-f9d3c156dfc5) - Pilot.com - Remote - $133k – $267k/yr
- [Senior Cloud Software Engineer - AutoScaling](https://hotfix.jobs/jobs/34efbbf8-0ca4-42fe-9fa5-1ae9e5356737) - Clickhouse - Remote - $133k – $232k/yr
- [Senior AI-Enabled DevOps Engineer](https://hotfix.jobs/jobs/23a6c7ce-100f-4d29-801e-6eec2c0bf5a7) - PointClickCare - Remote - $134k – $149k/yr
- [Senior Software Engineer, Automation & Developer Tools](https://hotfix.jobs/jobs/3418ccad-96ad-4001-9631-cfc212b60122) - Everlaw - Oakland, CA - $131k – $191k/yr
- [Platform Ops Lead](https://hotfix.jobs/jobs/0881e8c5-d983-473f-956f-ca86830b7302) - Black Canyon Consulting - Remote - $135k – $165k/yr

**Apply:** https://hotfix.jobs/jobs/68d7a44f-e9ec-470a-b43a-1e997c7fd2a9
**Canonical:** https://hotfix.jobs/jobs/68d7a44f-e9ec-470a-b43a-1e997c7fd2a9