Network Engineer, Connectivity New Denver, CO

Simplesense; Denver (CO); Hybrid; USD 103,000 - 139,000; Full time

Benefits offered by this job

Equity

Medical insurance

Life insurance

Short-term disability

AD&D insurance

401k matching

Vision coverage

Medical travel coverage

Job summary

Simplesense is seeking a Network Engineer, Connectivity to deploy, operate, and maintain secure network infrastructure connecting customer facilities to our hybrid-cloud platform. You will implement network solutions across enterprise, OT/ICS, and hybrid-cloud environments, ensuring resilience and secure operations.

You will work hands-on across onboarding, configuration, production operations, troubleshooting, and lifecycle management, partnering with Connectivity and engineering teams to

Qualifications

• 5+ years of hands-on network engineering experience.
• Solid understanding of TCP/IP, routing, switching, VLANs, NAT, and dynamic routing protocols (BGP/OSPF).
• Experience configuring firewalls, ACLs, site-to-site VPNs, and secure network access.
• Proficient in network diagnostics, incident response, and troubleshooting.
• Familiarity with scripting, configuration templates, and basic network automation.
• Willingness to travel for deployments and team collaboration.
• U.S. Citizenship and ability to obtain DoD CAC and DoD network access.

Responsibilities

• Design, implement, and validate secure network solutions across enterprise, facility, OT/ICS, and hybrid-cloud environments.
• Onboard customer facilities and translate designs into working configurations.
• Monitor health and performance of network services; investigate and restore production issues.
• Implement network segmentation, firewall policies, and encrypted connectivity per security standards.
• Contribute to reusable configuration templates and automation workflows to reduce manual effort.
• Execute planned changes, patching, and lifecycle activities with standard change management procedures.
• Maintain up-to-date network diagrams, configurations, and troubleshooting guides.

Skills

Network engineering

TCP/IP & routing

Firewall & VPN

Troubleshooting

Automation basics

Team collaboration

Travel readiness

Security clearance eligibility

Tools

Python

Ansible

CCNA

Job description

Simplesense builds, deploys, and sustains the Installation Resilience Platform that enables mission operators to rapidly adapt and respond. The Platform protects critical infrastructure from cyber attack while unlocking previously siloed information to monitor, diagnose, and improve response times to incidents. Our adversaries rapidly adopt the latest technology: we help defense users respond in kind.

Simplesense is a non-traditional defense contractor and prime on the Air Force's Installation Resilience Operations Command and Control (IROC) program, which is now expanding to five additional Air Force, Space Force, and Army installations from the one prototype installation, Tyndall Air Force Base.

Our team combines over 100 years of direct mission experience solving hard problems with 50 years technical expertise deploying DevSecOps, cybersecurity, and cloud infrastructure, giving us a deep appreciation for our customers’ mission and end users’ priorities. We build for scale, architecting and prioritizing technical work for long term sustainability.

Location: We prioritize candidates who reside in the Denver, CO area (hybrid as needed) but we are open to exceptional remote talent.

About Simplesense

Simplesense keeps military installations mission-ready. The infrastructure their operations depend on — power, water, fuel, facilities, security, and communications — runs continuously, often under strain. When it fails without warning, mission readiness is at risk, and the people who run these installations need to see what’s happening in time to act. That’s the foundation of Continuous Mission Assurance.

We securely integrate Operational Technology and Control Systems (OT/CS) from the building edge to the cloud, applying Zero Trust principles to protect critical infrastructure from cyber and physical threats. By unlocking previously siloed data, we put timely awareness in front of the decision-makers who need it. As prime on the Air Force’s Installation Resilience Operations Command and Control (IROC) program, we hold a continuous Authority to Operate (ATO) and have proven the capability at scale at Tyndall Air Force Base. That work is now expanding across the Air Force, Space Force, and Army.

Our team pairs over a century of boots-on-the-ground mission experience with deep technical expertise across DevSecOps, cybersecurity, and cloud infrastructure. We engineer resilient infrastructure — the software, integration, and operational backbone behind it — for the operators who depend on it in the field. Persistent resilience, built for the mission.

About the Role

As our Network Engineer, Connectivity, you will play an important role in deploying, operating, and maintaining the secure network infrastructure that connects customer facilities to our hybrid-cloud platform services. You will implement and validate network solutions across enterprise, facility, OT/ICS, and hybrid-cloud environments, helping ensure our networks remain resilient, secure, and supportable.

You will work hands-on across the lifecycle of Connectivity infrastructure, including customer facility onboarding, network configuration, production operations, troubleshooting, and lifecycle management. You will partner closely with the Connectivity, broader engineering, and customer technical teams to reliably deliver network services, resolve operational challenges, and continuously improve our networking capabilities.

Work Model: We prioritize candidates who reside in the Denver, CO area (hybrid as needed) but we are open to exceptional remote talent.

• Locals: Onsite as needed for collaborative workspace time.
• Remote: Quarterly travel to hub locations for team syncs and alignment.

Our Performance Culture

We measure performance across two key dimensions: How you perform your role (Our Core Values) and What your role entails (Your Execution).

How You’ll Work — Our Core Values

At Simplesense, we value high-trust autonomy. We look for builders who can comfortably navigate ambiguity and are deeply driven by our shared national security mission.

• People Always – Win as One Team: We foster a culture of psychological safety and mutual support. We operate as an integrated team where we assume noble intent as our default setting, ensuring that even the toughest feedback is rooted in trust. We trade our silos for a shared mission because collective impact always outweighs individual achievement.
• Empathize – Obsess Over the Customer: We don't just solve technical problems; we empathize and advocate for the operators using our products. We look beyond the surface to build what our customers—both internal and external—actually need to succeed, not just what they asked for.
• Focus – Ruthlessly Prioritize with Urgency: We focus on the highest-impact work and ruthlessly say no to distractions. We build resilient systems so that our solutions can repeat and scale under pressure.
• Let’s Go – Catalyze the Change You Seek: We don't wait for the industry to change; we drive it. We seek to understand why things are the way they are, but we never use ”the way it’s always been” as an excuse. We aren't afraid to change course when the data or our mission demands it.

What You’ll Do

• Network Design & Implementation: Implement, configure, and validate secure network solutions using established architectures and standards across routing, switching, segmentation, VLANs/VRFs, firewalls, VPNs, high availability, addressing, and facility-to-cloud connectivity. Identify design risks and recommend improvements.
• Customer Network Design & Onboarding: Translate approved customer network designs and implementation plans into working configurations. Execute networking activities across factory preparation, facility installation, testing, validation, acceptance, and operational handoff.
• Network Reliability & Incident Response: Monitor and maintain the health, availability, and performance of assigned network services and customer environments. Investigate escalated production issues, perform network diagnostics, safely restore services using established procedures, and contribute to reliability improvements.
• Security by Design: Implement and maintain network segmentation, firewall policies, access controls, encrypted connectivity, and secure management configurations that align with established security standards and protect customer operational environments.
• Network Automation & Configuration Engineering: Contribute to reusable configuration templates, automated validation, configuration compliance, diagnostics, and deployment workflows that reduce manual effort, improve consistency, and minimize configuration drift across customer environments.
• Lifecycle & Change Management: Execute planned network changes, upgrades, patching, vulnerability remediation, failover testing, hardware replacement, and infrastructure lifecycle activities using established change management, validation, and rollback procedures.
• Engineering Standards & Collaboration: Maintain accurate network diagrams, configurations, implementation records, troubleshooting guidance, and operational documentation. Collaborate with senior engineers on technical designs and complex problems, contribute to engineering reviews, and continuously strengthen the team's network engineering practices.

What You Bring

Required Qualifications:

• Experience: 5+ years of hands-on network engineering experience configuring, deploying, troubleshooting, and supporting production network environments.
• Network Engineering Knowledge: Solid understanding of TCP/IP and Layer-2/Layer-3 networking, including routing and switching, VLANs, subnetting, NAT, network redundancy, and familiarity with dynamic routing protocols such as BGP and OSPF. CompTIA Network+ / Security+ certification or the ability to achieve certification within the first 90 days of employment.
• Network Security: Hands-on experience configuring and troubleshooting firewalls, ACLs, network segmentation, site-to-site VPNs, and secure network access within established security architectures.
• Network Operations & Troubleshooting: Experience diagnosing network connectivity, availability, and performance issues using packet captures, routing and switching information, device logs, monitoring systems, and network diagnostic tools.
• Automation & Configuration Management: Familiarity with scripting, configuration templates, version control, or network automation tools used to improve network provisioning, configuration consistency, validation, and operational workflows.
• Technical Execution & Collaboration: Demonstrated ability to independently execute defined technical work, troubleshoot and resolve operational problems, identify risks and escalation needs, communicate technical findings clearly, and collaborate effectively with other engineers and technical teams.
• Travel: Ability to travel for customer facility deployments and team collaboration.
• Compliance: Must be a U.S. Citizen and capable of obtaining a DoD NIPR network account and Common Access Card (CAC).
• Security Clearance: Must have, or be able to obtain, a DoD Secret Clearance.

Preferred Qualifications:

• Prior experience working within DoD, Air Force, Space Force, or fast-paced Federal contractor/dual-use startup environments.
• Relevant technical certifications such as CCNA or equivalent demonstrated expertise.
• Experience with OT/ICS, critical infrastructure, industrial networks, facility-edge environments, or network architectures requiring IT/OT segmentation and controlled connectivity.
• Familiarity with critical-infrastructure security practices and frameworks such as NIST guidance, ISA/IEC 62443, MITRE ATT&CK for IC, or comparable standards.
• Experience with network automation and configuration-management technologies such as Python, Ansible, configuration templates, or network source-of-truth systems.
• Experience with Linux networking, cloud networking, and hybrid on-premises/cloud connectivity.

What Success Looks Like (First 90 Days)

• 30 Days: Ramp up on Connectivity network architectures, customer environments, configuration standards, monitoring systems, lab environments, facility-onboarding workflows, and the production support model. Build working relationships across Connectivity, Engineering, Security, User Success, and adjacent teams.
• 60 Days: Independently execute well-defined network configuration, validation, maintenance, and troubleshooting tasks. Contribute to active customer onboarding or production operations, identify opportunities to improve documentation, monitoring, configuration consistency, or automation, and demonstrate sound technical judgment when escalating complex issues.
• 90 Days: Reliably own assigned network operations, configuration, or facility-onboarding activities within established architectures and procedures. Deliver a practical improvement that increases network reliability, security, repeatability, or supportability, and demonstrate growing independence in troubleshooting, technical planning, and operational execution.

Compensation and Benefits

Pay Range: $103k-$139k per year. Compensation is determined based on experience, skill level, and location. We review ranges regularly to ensure market competitiveness.

• Equity
• Medical, Life, Short-Term Disability, and AD&D insurance
• Medical travel coverage
• Vision coverage
• 401k matching

Our Typical Hiring Process

• Find Your Fit: Your journey starts here. Explore and apply to our open positions to find the right role for your skills.
• Initial Chat: A brief call with our recruiting team to learn about your background and answer your initial questions about Simplesense.
• Values & Vision: A conversation with a hiring manager to discuss how your aspirations align with our mission and goals of the team.
• Show Your Skills: Complete a technical assessment that reflects the work you’d be doing.
• Team Interview: Interview with the team to discuss your experience and see if we’re a great match.
• Final Handshake: A final conversation to ensure we’ve answered all your questions before making a decision.
• Welcome to Simplesense!

Simplesense is an equal opportunity employer committed to a policy of merit-based employment. All employment decisions—including recruitment, hiring, promotion, compensation, benefits, training, and termination—are made based on individual qualifications, performance, and business needs. We strictly prohibit discrimination or harassment of any kind on the basis of protected characteristics as recognized by federal, state, or local law. As a U.S. government contractor, Simplesense complies with all applicable equal employment opportunity laws, Section 503 of the Rehabilitation Act, and the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA). If you need a reasonable accommodation to complete the application or take part in the interview process, please contact People Operations at [e-mail] .

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Simplesense’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.