Network Engineer

Sequester; United States; Remote; USD 100,000 - 160,000; Full time

Benefits offered by this job

Remote-friendly / async collaboration

Job summary

Sequester is seeking a network engineer to design and operate the underlying network fabric for a privacy-first vault of personal photos and videos. You will own LAN/WAN, VPN, firewalls, and load balancing to ensure fast, well-segmented, and resilient traffic.

Collaborate with security on zero-trust access paths and policy updates to maintain strong defenses. You will configure routers, switches, and security controls across production and staging, maintain comprehensive network diagrams, and

Qualifications

• BGP, VPN technologies, TLS termination and mTLS familiarity required.
• Experience with enterprise firewall platforms and load balancers.
• Disciplined change management with rollback planning.

Responsibilities

• Configure and maintain routers, switches, firewalls, and load balancers across production and staging environments.
• Implement network segmentation between admin, application, and database tiers.
• Monitor latency, packet loss, and the effectiveness of DDoS mitigation controls.
• Produce and maintain network diagrams plus change plans suitable for audit and disaster recovery reviews.
• Work with security on zero-trust access design and VPN policy updates.

Skills

BGP

VPN technologies

TLS termination

mTLS

Load balancing patterns

Change management

Education

CCNP or JNCIP certification

Tools

Enterprise firewall platforms

Load balancers

Job description

Role overview

This position designs and operates the network layer underneath a privacy-first encrypted vault for personal photos and videos, covering LAN/WAN, VPN, firewalls, and load balancing. The goal is traffic that is fast, well segmented, and resilient to misconfiguration. You will partner closely with the security team on zero-trust access paths and policy updates.

Responsibilities

• Configure and maintain routers, switches, firewalls, and load balancers across production and staging environments
• Implement network segmentation between admin, application, and database tiers
• Monitor latency, packet loss, and the effectiveness of DDoS mitigation controls
• Produce and maintain network diagrams plus change plans suitable for audit and disaster recovery reviews
• Work with security on zero-trust access design and VPN policy updates

Requirements

• Practical experience with BGP, VPN technologies, and enterprise firewall platforms
• Solid grasp of TLS termination, mTLS, and common L4/L7 load balancing patterns
• Disciplined change management with clear rollback planning
• Industry certification such as CCNP or JNCIP, or equivalent depth of experience

Benefits and work setup

• Remote-friendly with global hiring and async-first collaboration across time zones