Infrastructure Network Engineer

Responsibilities

• Own corporate identity in Okta: user lifecycle, group-based access, SSO/SAML/SCIM app integrations, MFA, and automated joiner-mover-leaver flows.
• Own and evolve the corporate network across offices: LAN/WiFi, switching, routing, VLAN segmentation, DHCP/DNS, and VPN — design, configuration, and L3 troubleshooting.
• Own FortiGate firewalls: policy, segmentation, and VPN, in partnership with security.
• Own the corporate GCP footprint: IAM, PAM, VPC and cloud networking, firewall rules, and the services backing corporate tooling.
• Administer Google Workspace at the org level.
• Use GitLab as the backbone for configuration-as-code, CI/CD, and IaC: manage repos and pipelines for IT automation.
• Build automation that removes manual work and JML toil: scripting (Bash, Python) and API integration across Okta, Google Workspace, JSM, and GCP.
• Author the runbooks and configuration-as-code that onsite engineers operate from
• Provide L3 escalation for identity, network, cloud, and SaaS issues the onsite tier cannot resolve.
• Configure MDM
• Keep technical documentation current.

Requirements

• 4+ years in infrastructure / systems / network engineering, ideally at a cloud-native company.
• Strong networking — hands-on design and troubleshooting of LAN/WiFi, switching, routing, VLANs, DHCP/DNS, and VPN.
• Okta hands-on: user lifecycle, SSO/SAML/SCIM integrations, MFA.
• GCP: IAM and cloud networking (VPC, firewall rules, routing).
• Google Workspace administration.
• GitLab: repositories, CI/CD pipelines.
• IaC workflows (terraform).
• Demonstrable automation/scripting (Bash, Python) with real examples you can walk us through.
• Good security instincts: credential hygiene, segmentation, patching urgency, incident discipline.
• Functional English — enough to coordinate with the global team and document your work clearly. Writing polish can lean on AI tooling; what matters is that your documentation and updates are accurate and understandable.

Nice to have

• Jamf / Intune MDM
• Certificate-based access: SCEP, LDAP, RADIUS.
• FortiGate hands-on: policy, VPN, and segmentation.
• ZTNA (Zero Trust Network Access) concepts and rollout experience.
• AI-assisted IT operations — building tier-0 deflection in JSM/Slack, ticket triage/summarization, or agentic runbooks.
• HRIS-driven identity automation.