Network & Systems Engineer

IndustrialEnet; Oakland (CA); On-site; USD 120,000 - 170,000; Full time

Job summary

IndustrialEnet is seeking a hands-on Network Engineer to own and support a Bay Area network spanning industrial switching, routing, security, servers, storage, cameras, and field connectivity.

The role involves configuring Layer 2/3 networks, firewalls, VMS, and OT cybersecurity, with field deployments across transportation and critical infrastructure environments in the Bay Area.

Qualifications

• 4+ years of hands-on network engineering in production environments
• Strong Layer 2 knowledge: VLANs, 802.1Q, STP/RSTP, LACP, MAC/ARP, LLDP/CDP, multicast/broadcast troubleshooting
• Strong Layer 3 knowledge: IPv4, static routing, OSPF, inter-VLAN routing, VRRP/HSRP, ACLs, route troubleshooting
• Hands-on experience configuring managed switches, routers, and firewalls
• Strong Layer 1 troubleshooting with fiber, copper, optics, PoE, wireless, and physical connectivity
• Working knowledge of network security, segmentation, firewalls, VPNs, AAA/RADIUS, access control, and device hardening
• Strong Windows Server and Active Directory administration skills, plus virtualization and storage
• Ability to read network diagrams and troubleshoot across layers independently
• Ability to learn unfamiliar hardware/software quickly using vendor docs, labs, AI tools
• Self-driven and proactive; strong communication with customers, contractors, vendors, engineers
• Comfortable working outdoors/industrial environments
• Bachelor-level degree or equivalent hands-on experience

Responsibilities

• Configure, troubleshoot, and maintain Layer 2/3 industrial Ethernet networks
• Manage VLANs, trunks, STP/RSTP, LACP, OSPF, inter-VLAN routing, VRRP
• Troubleshoot using CLI, logs, MAC/ARP tables, routing tables, captures, NMS
• Configure/ support firewalls, ACLs, VPNs, AAA/RADIUS, NAC, device hardening
• Support industrial networking hardware (switches, routers, firewalls, wireless)
• Maintain diagrams, documentation, backups, and as-built info
• Support IP cameras, LPR, video analytics and ITS applications
• Administer Windows Server/AD, DNS, DHCP, NTP, GPO; VM provisioning
• Collaborate with agencies, contractors; engage in field deployments
• Travel Bay Area on-site support as needed

Skills

Layer 2 networking

Layer 3 networking

VLANs

OSPF

VRRP/HSRP

Firewall configuration

Network security

Windows Server/AD

Virtualization/Storage

Python/PowerShell/APIs

Network diagrams & troubleshooting

Communication with stakeholders

Education

Bachelor's degree in Electrical Engineering, Computer Engineering, Computer Science, or related field

Tools

Cisco Catalyst/Industrial Ethernet

Hirschmann

HiVision

SolarWinds

ManageEngine OpManager/OpUtils/IPAM

VMware

Job description

We are looking for a hands‑on Network Engineer to support and take day‑to‑day technical ownership of the Bay Area network and supporting systems. This is a large, multi‑year transportation and critical infrastructure environment across the Bay Area, with industrial switching and routing, firewalls, wireless links, cameras, servers, virtualization, storage, and monitoring platforms.

This is not a traditional help‑desk or ticket‑based support role. The right person has strong networking and security fundamentals, solid system administration skills, learns unfamiliar technologies quickly, and is comfortable investigating problems independently from Layer 1 through the application layer. You will work directly with transportation agencies, contractors, vendors, and internal engineering teams.

YOUR PRIMARY RESPONSIBILITIES

Network & Security

• Configure, troubleshoot, and maintain Layer 2 and Layer 3 industrial Ethernet networks
• Work with VLANs, 802.1Q trunks, STP/RSTP, LACP, OSPF, inter‑VLAN routing, and redundancy protocols such as VRRP
• Troubleshoot connectivity using CLI, logs, MAC/ARP tables, routing tables, packet captures, NMS tools, and physical testing
• Configure and support firewalls, network segmentation, ACLs, VPN/secure remote access, AAA/RADIUS, NAC concepts, and device hardening
• Support fiber, copper, SFP/SFP+ optics, PoE, wireless, microwave, and cellular communications
• Maintain configuration backups, network diagrams, IP/VLAN documentation, and accurate as‑built information
• Support industrial Ethernet networks used for transportation and other critical infrastructure
• Work with ruggedized switches, routers, firewalls, wireless radios, cameras, controllers, sensors, and roadside/field equipment
• Support industrial redundancy technologies such as MRP and similar high‑availability designs
• Configure and support IP cameras, LPR, video analytics, Bosch BVMS, and other VMS/ITS applications
• Understand the operational impact of network changes and perform controlled testing, cutovers, and maintenance
• Administer and troubleshoot Windows Server and Active Directory environments, including users/groups, DNS, DHCP, NTP/SNTP, and basic Group Policy
• Install, configure, patch, and troubleshoot server‑based engineering and monitoring applications
• Support VMware, Hyper‑V, and other virtual environments, including VM provisioning, networking, and basic host/storage troubleshooting
• Work with NAS, iSCSI, shared storage, and video recording/storage systems
• Be comfortable troubleshooting across both network and server/application layers when an issue crosses system boundaries

Network Management, Automation & AI

• Monitor and manage the environment using NMS and IPAM platforms such as HiVision and ManageEngine OpManager/OpUtils
• Use SNMP, Syslog, alerting, discovery, configuration backup, and performance data to identify and troubleshoot issues proactively
• Use Python, PowerShell, APIs, or similar tools to automate repetitive engineering and operational tasks when practical
• Use modern AI tools such as Claude / Claude Cowork, or equivalent assistants for engineering research, troubleshooting, documentation, scripting, and workflow improvement
• Validate AI‑assisted output before applying changes to production or customer systems

Field, Customer & Project Support

• Participate in field installations, cabinet work, testing, cutovers, and physical site inspections
• Work in roadside facilities, bridges, tunnels, equipment rooms, and other industrial environments, including elevated or confined locations when required
• Work directly with transportation agencies, contractors, vendors, and end users to troubleshoot and resolve technical issues
• Communicate technical findings clearly and take ownership of issues through resolution
• Travel throughout the Bay Area as required for on‑site project support

ROLE OWNERSHIP

This engineer is expected to understand the network environment end to end and become a primary technical owner for its day‑to‑day operation. That includes networking, security, monitoring, virtualization, servers, storage, cameras, and field connectivity. The role requires a proactive engineer who can identify the next step, learn new platforms quickly, document changes, and drive troubleshooting without waiting for detailed instructions or a ticket.

QUALIFICATIONS

Required

• 4+ years of hands‑on network engineering, implementation, and troubleshooting experience in production environments
• Strong Layer 2 knowledge: VLANs, 802.1Q trunking, STP/RSTP, LACP, MAC address tables, ARP, LLDP/CDP, and multicast/broadcast troubleshooting
• Strong Layer 3 knowledge: IPv4 addressing/subnetting, static routing, OSPF, inter‑VLAN routing, VRRP/HSRP concepts, ACLs, and route troubleshooting
• Hands‑on experience configuring managed switches, routers, and firewalls - not only monitoring, ticket escalation, or vendor coordination
• Strong Layer 1 troubleshooting skills with fiber, copper, optics, PoE, wireless, and physical connectivity
• Working knowledge of network security, segmentation, firewalls, VPNs, AAA/RADIUS, access control, and device hardening
• Strong Windows Server and Active Directory administration skills, plus working knowledge of virtualization and storage
• Ability to read network diagrams, understand traffic flow, identify the affected layer, and troubleshoot independently
• Ability to learn unfamiliar hardware and software quickly using vendor documentation, lab testing, AI tools, and hands‑on research
• Self‑driven and proactive; comfortable identifying the next step without waiting for a ticket or detailed instructions
• Strong communication skills when working with customers, contractors, vendors, and other engineers
• Comfortable working outdoors, at heights, and in roadside or industrial environments
• Bachelor's degree in Electrical Engineering, Computer Engineering, Computer Science, or a related field, or equivalent hands‑on experience

Preferred Experience

• Industrial Ethernet, OT, ITS, transportation, utilities, manufacturing, or other critical‑infrastructure networks
• Cisco Catalyst / Industrial Ethernet and Hirschmann / Belden switching and routing
• OSPF, VRRP, MRP, RSTP, LACP, SNMP, NTP/PTP, DHCP, DNS, and network redundancy
• Cisco or Fortinet firewall/security platforms, VPN, network segmentation, and OT cybersecurity
• Hirschmann HiVision NMS, SolarWinds, Cisco Catalyst Center, and ManageEngine OpManager / OpUtils / IPAM
• VMware, Windows Server, Active Directory, and shared storage
• Bosch IP cameras, BVMS, LPR, video analytics, or similar video surveillance systems
• Python, PowerShell, APIs, network automation, and practical use of AI engineering assistants
• Prior work with government agencies, general contractors, and end‑user clients on technical projects

Preferred Certifications

• Cisco CCNA or CCNP Enterprise or equivalent hands‑on experience strongly preferred
• Fortinet, Cisco Security, or equivalent security certification is a plus
• VMware or equivalent virtualization certification is a plus
• CompTIA Network+ or Security+ may be considered but does not replace hands‑on networking experience

ADDITIONAL INFORMATION

• Location: On‑site in Oakland, CA
• Reports to: Manager, Network Engineering & Services
• Job type: Full‑Time
• Travel: Regular travel throughout the Bay Area required