Network Engineer

ICEYE; Espoo; Hybride; EUR 60 000 - 90 000; Plein temps

Avantages offerts par ce poste

Hybrid work model

Résumé du poste

ICEYE, the world‑leading spaceborne SAR company, seeks a Network Engineer in Espoo to design, deploy, and protect our enterprise network across HQ, sites, and data centers. You’ll work with IT/security teams to implement Zero Trust, overlay networks, and robust connectivity globally.

You will manage firewalls, VPNs, and cloud network services, collaborating across IT to keep services highly available. Hybrid work model offered; security screening may apply.

Qualifications

• 3+ years of hands‑on experience administering enterprise wired and wireless network environments (equivalent to CCNA level or working toward CCNP).
• Practical experience configuring and operating enterprise switches and routers (Cisco IOS, Juniper JUNOS).
• Hands‑on experience administering Next‑Generation Firewalls, with practical exposure to Palo Alto Networks.
• Solid understanding of core networking protocols (TCP/IP, VLANs, DNS/DHCP) and dynamic routing (OSPF, BGP).
• Practical understanding of Zero Trust Network Access (ZTNA) principles, least‑privilege network segmentation, and 802.1X/RADIUS.
• Experience configuring and troubleshooting VPN technologies (IPsec site‑to‑site, SSL VPN, or WireGuard).
• Pragmatic problem‑solving skills with a collaborative, service‑minded approach to resolving technical incidents.
• Willingness to travel (new site setup / existing site management) up to 2 times a month.

Responsabilités

• Deploy, configure, and maintain enterprise network devices across ICEYE’s Espoo HQ, international sites, and data centers.
• Administer and maintain Next‑Generation Firewalls and cloud security solutions, focusing on Palo Alto Networks and Prisma Access.
• Implement, support, and audit ZTNA policies, network microsegmentation, and modern remote‑access workflows.
• Manage and troubleshoot VPN technologies (IPsec/SSL, WireGuard).
• Proactively monitor network performance, link health, and system availability to prevent bottlenecks.
• Investigate and resolve Tier 2/3 network incidents and service requests globally.
• Maintain accurate network topology diagrams, rack elevations, IP schemes, and SOP documentation.

Connaissances

CCNA level

Enterprise switches/routers

OSPF/BGP

ZTNA principles

VPN technologies

Network incident troubleshooting

Travel readiness

Outils

Cisco IOS

Juniper JUNOS

Palo Alto Prisma Access

Prisma SD‑WAN

WireGuard

Tailscale

NetBird

Ansible

Terraform

Description du poste

Role highlights:

• Network Engineer




• Location: Espoo, Finland




• Department: IT




• Reports to: IT Infrastructure Lead




• Employment type: Permanent




• Workplace model: Hybrid




• Employment is subject to applicable security screening (incl. SUPO, where required)

Why this role matters:

As a Network Engineer, you’ll help build, maintain, and safeguard the core network infrastructure connecting our global ground stations, satellite data pipelines, and international offices. Working closely with cross-functional IT and security teams, you will champion modern connectivity—combining rock-solid enterprise hardware with Palo Alto Prisma, Zero Trust architecture, and high-performance overlay networks.

Who We Are

ICEYE is the world leader in sovereign intelligence from space. We deliver persistent monitoring capabilities to detect and respond to changes in any location on Earth.

ICEYE owns the world's largest and most advanced SAR (synthetic aperture radar) satellite constellation. To our customers we provide intelligence with unmatched quality, latency and revisit times, in any weather, day or night. To governments who choose to operate their own constellation we provide this proven capability as a sovereign system.

ICEYE-built constellations serve customers in defence and intelligence, environmental monitoring, insurance and emergency management. We enable fast decisions that contribute to a safer future.

Founded and headquartered in Finland, ICEYE operates globally with over 1000 employees across Europe, North America, the Middle East, and Asia-Pacific.

Your day-to-day responsibilities

• Deploy, configure, and maintain enterprise network devices (switches, routers, firewalls, and access points) across ICEYE’s Espoo headquarters, international sites, and data center facilities.




• Administer and maintain Next-Generation Firewalls and cloud-delivered security solutions, focusing primarily on Palo Alto Networks and Prisma Access.




• Implement, support, and audit Zero Trust Network Access (ZTNA) policies, network microsegmentation, and modern remote-access workflows.




• Manage and troubleshoot secure transport and tunneling protocols, spanning enterprise IPsec/SSL VPNs and modern WireGuard-based connectivity solutions.




• Proactively monitor network performance, link health, and system availability to detect and resolve bottlenecks before they impact operations.




• Investigate and resolve Tier 2/3 network incidents and service requests submitted across global offices and operations.




• Maintain accurate network topology diagrams, rack elevations, IP addressing schemes, and standard operating documentation.

What we’re looking for

Must haves:

• 3+ years of hands‑on experience administering enterprise wired and wireless network environments (equivalent to CCNA level or working toward CCNP).




• Practical experience configuring and operating enterprise switches and routers (e.g., Cisco IOS, Juniper JUNOS).




• Hands‑on experience administering Next‑Generation Firewalls, with practical exposure to Palo Alto Networks.




• Solid understanding of core networking protocols (TCP/IP, VLANs, subnetting, DNS/DHCP) and dynamic routing (OSPF, BGP fundamentals).




• Practical understanding of Zero Trust Network Access (ZTNA) principles, least‑privilege network segmentation, and identity‑aware access controls (802.1X, RADIUS).




• Experience configuring and troubleshooting VPN technologies (IPsec site‑to‑site, SSL VPN, or WireGuard).




• Pragmatic problem‑solving skills with a collaborative, service-minded approach to resolving technical incidents.




• Willingness to travel (new site setup / existing site management) up to 2 times a month.

Nice to haves:

• Direct hands‑on experience with Palo Alto Prisma Access, Prisma SD‑WAN, or broader SASE architectures.




• Familiarity with modern overlay or mesh networking technologies (e.g., WireGuard implementations, Tailscale, NetBird).




• Foundational knowledge of public cloud networking architectures (e.g., AWS VPCs, Azure VNets, Transit Gateways).




• Basic scripting skills (Python, Bash) for routine task automation and configuration audits.




• Familiarity with Infrastructure as Code (Ansible, Terraform)




• Relevant industry certifications (e.g., CCNA, PCNSA/PCNSE, Network+).

Application Process

• Talent Acquisition screening call (30 minutes)




• Interview with the Hiring Manager (45 minutes)




• Technical interview and practical problem‑solving discussion with the team (60 minutes)




• Final stakeholder and culture alignment conversation (30 minutes)

Working at ICEYE

At ICEYE, you’ll join a diverse and highly engaged team united by the ambition to make the impossible possible. As a global scale‑up, we combine speed and ambition with the opportunity to take real ownership from day one. Your growth, wellbeing, and success are a priority, with continuous professional development, training opportunities, and a culture where collaboration is how we win.

How We Work (Our Values)

Make the impossible possible: We set ambitious goals and stay calm under pressure. We bring grit, optimism, and ownership when things get hard, and we keep moving until we find a way.

• Be curious: Go deep, ask questions, listen carefully, and think critically. Understand the “why” behind decisions.




• See the big picture: Stay close to what’s happening across the company so you can make better decisions. Consider how your work affects others.




• Drive effective teamwork: Create psychological safety, invite different perspectives, and build inclusive teams. There are no bad questions.




• Act as one team: We win together. We match tasks to the right owner and stay agile as priorities shift.




• Have fun: What we do matters—and it should be enjoyable. Celebrate progress, take pride in results, and share the wins.

Benefits

Our benefits are designed to support your health and wellbeing, at work and beyond. We keep improving them based on employee feedback, and offerings vary by location. Talent Acquisition will confirm what applies for this role and location during the process.

Our Commitment to Diversity, Equity, and Inclusion

We want ICEYE to be a place where people can be themselves and do great work. Different backgrounds and perspectives make us stronger, which is why we work to create an environment where people feel included, respected, and able to speak up. Whatever your background, we want you to bring your authentic self to the table.

We’re committed to fair, inclusive hiring and equal opportunity. Everyone is welcome to apply. If you need any adjustments or support during the recruitment process, tell us—we’ll do our best to help.