Principal Network Engineer

Montera; United States; Remote; USD 200,000 - 250,000; Full time

Benefits offered by this job

Health coverage

PTO & holidays

Parental leave

401(k) with match

Learning & development reimbursement

Job summary

Montera is seeking a Principal Network Engineer to own architecture, security, and governance of all Montera-operated networking across IT, OT, admin, guest, and Wi‑Fi. You’ll manage public IPs, ASN, BGP, and IPAM while driving secure demarcation to customer-managed fabrics.

Collaboration with Controls Engineer is key for data exposure and secure transport across a single-tenant portfolio. You’ll lead segmentation, redundancy, and policy design for OT/IT, define standards for DNS and routing,

Qualifications

• 10+ years designing and operating data center networks in hyperscale or regulated environments.
• Experience with RIR/ARIN address applications, ASN, and multi-site IPAM.

Responsibilities

• Own and standardize all Montera-operated networks: IT, OT, guest, and Wi‑Fi.
• Define segmentation, zoning, and isolation across IT/OT/customer domains.
• Establish redundancy and survivability standards for internal services and transport.
• Own public IP strategy and IPAM governance across sites.
• Define addressing, routing, and DNS standards for a multi-site portfolio.
• Own firewall architecture, policy, and secure remote-access across IT/OT.
• Design secure OT architectures and drive hardening with controls/cybersecurity.
• Lead risk reviews of exposure paths between customer, IT and OT domains.
• Translate data-exposure scope into secure delivery paths and demarcation models.
• Provide secure network paths for AI platforms (edge/on-prem/cloud).
• Support customer reviews and acceptance testing tied to leases/SLAs.
• Capture AI compute networking requirements and translate into deployable designs.
• Define demarcation between Montera shared infrastructure and customer fabrics.
• Define configuration, documentation and IaC standards for delivery.
• Lead vendor evaluation for network OEMs and standardization.

Skills

Data center networking

IP addressing & IPAM

BGP/ASN

Firewall & segmentation

IT/OT security

Customer demarcation

Network automation (IaC)

IEC 62443/Purdue-model

Networking governance

Education

Bachelor’s degree in Controls/Electrical/Mechanical/Systems engineering

Master’s degree preferred

Tools

IPAM tools

Git-based workflows

Job description

About Montera

At Montera,we’rebuilding the future of digital infrastructure.Founder-ledwith$1.5Bbacked byStonepeak, Montera isdriven by a future-focused vision: to develop and operatehyperscale data centers essential for tomorrow’s technology.Our mission is to deliver strategicallylocated, hyperscale data centers designed for speed, reliability, and scalability. Backed by decades of experience in design, construction, and operations, wedon’tjust build—we execute with purpose.

Our Values

• Client First Alignment:We align every solution to our clients’ goals.

• Speed with Certainty:Velocity matters. We deliver with urgency and precision.

• Operational Excellence:Decades of experience drive ourhigh standards.

• Safety & Integrity:Safety is non-negotiable. We lead with integrity and transparency.

• Ownership Mentality:We think likeowners, becausewe are.

TheOpportunity

Montera is seeking aPrincipalNetworkEngineer toowns the architecture, security, and governance of all Montera-operated networking — spanning corporate IT, critical-infrastructure OT (BMS, SCADA, DCIM, life-safety), administrative, guest, and Wi-Fi networks — and the secure demarcation to customer-managed fabrics. This role owns Montera’s public IP strategy: ARIN/RIR address application and justification, ASN and BGP strategy, IPAM, and the governance of all network allocations, firewalls, and security policy across the fleet.

The role works hand-in-glove with the Principal Controls Engineer. Controlsdefinesthe data — the points, tags, and exposure scope Montera surfaces to itself and to the customer; Network delivers the secure transport, segmentation, and demarcation that lets that data be consumed without compromising OT. Montera facilities are single-tenant — one customer per building or campus — so the customer data-access model (what the customer sees, how they reach it, and where the trust boundary sits) is defined with that single customer and governed jointly by these two roles. Neither can deliver it alone.

What You’llDo

Internal Network Architecture (IT / OT / Guest)

• Own and standardize all Montera-operated networks: corporate IT, OT controls (BMS/SCADA/DCIM), life-safety interfaces, administrative, guest, and Wi-Fi.

• Define segmentation, zoning, and isolation strategy across IT, OT, and customer domains (e.g., Purdue-model / IEC 62443 alignment for OT).

• Establish redundancy and survivability standards for mission-critical internal services,monitoringtransport, and management networks.

IP Strategy, Addressing & Allocation Governance

• Own the public IP strategy: ARIN/RIR address-space application and justification, ASN acquisition, and BGP/peering/transit strategy for Montera-operated services.

• Own IPAM and the governance of all address allocations across sites — internal, OT, shared services, and Montera-side customer handoff ranges.

• Define addressing, routing, and DNS standards that scale cleanly across a multi-site portfolio.

Security, Firewalls & Critical Infrastructure Networking

• Ownfirewallarchitecture and policy, secure remote-access patterns, role-based access control, micro-segmentation, and audit logging across IT and OT.

• Design high-security architectures for OT and critical-infrastructure systems; partner with controls, cybersecurity, and operations on baseline hardening, monitoring, and incident-response workflows.

• Lead risk reviews of exposure paths between customer, IT, and OT domains and drive mitigations through design and governance (supporting Montera’s ISO 27001 posture).

Customer Data Access & Demarcation

• Executed jointly with the Principal Controls Engineer.

• Translate the controls-defined data-exposure scope into the secure delivery path: DMZ/broker placement, read-only least-privilege boundaries,firewallpolicy, and the customer-facing network demarcation for OT/telemetry data.

• Define demarcation models, handoff points, and clear IT/OT/customer responsibility boundaries between Montera-operated shared infrastructure and customer-managed fabrics.

• Provision the secure network path for AI optimization platforms (e.g., Phaidra) consuming Montera telemetry — edge, on-prem, or cloud — in partnership with the Controls Engineer.

• Support customer technical reviews and acceptance testing for data-access and connectivity commitments tied to leases and SLAs.

Customer AI & Compute Networking Enablement

• Engage the customer directly to capture AI/computenetworking requirements: fabric type, bandwidth, latency, scale, storage connectivity, and operational model.

• Translate customer requirements into deployable designs within facility constraints (space, pathways, power/cooling, operational standards).

• Define the demarcation between Montera-operated shared infrastructure and customer-managedcompute/storage fabrics, with clear handoff and responsibility.

Delivery, Commissioning & Operations Readiness

• Define configuration, documentation, and automation standards (IPAM, addressing, routing, access control) using Git-based / infrastructure-as-code workflows.

• Support construction and commissioning milestones: testing, validation, and turnover readiness for internal and shared-service networks.

• Establish observability standards and operational runbooks for troubleshooting and incident response.

Vendor Strategy & Standardization

• Lead technical evaluation andselectionof network OEMs,firewall/security, Wi-Fi/access, and cabling/optics partners for Montera-owned systems.

• Drive standardization and cost-optimized BOM strategy aligned to availability, lead time, power, and operational risk.

• Own technical change control and vendor issue resolution through deployment and lifecycle support.

Who You Are:

• Bachelor’s degree inControls, Electrical, Mechanical,or SystemsEngineering, or related field (Master’spreferred).

• 10+ years ofexperiencedesigning and operating data center networks for hyperscale, mission-critical, or regulated environments.

• Direct experience with RIR/ARIN address application and justification, ASN/BGP, and enterprise IPAM at multi-site scale.

• Deepfirewall, segmentation, and secure-remote-accessexpertiseacross both IT and OT (BMS/SCADA/DCIM), with IT/OT segmentation and IEC 62443 / Purdue-model familiarity.

• Proven experience defining single-tenant customer demarcation and data-access models in secure environments.

• Strong customer-facing capability: translating requirements into implementable designs and clear demarcation models.

• Network automation and configuration management (Git-based workflows, templating, infrastructure-as-code).

Why Join Montera?

At Montera,you’llshape the next generation of digital infrastructure while being supported by a team that values integrity, collaboration, and long-term partnership.We’rea remote-first company that empowers our people with flexibility, ownership, and meaningful rewards.

Compensation:

At Montera, we believe great work starts with investing in great people.That is why we offer a competitive and thoughtful total compensation package designed to recognize the value each team member brings.

Our compensation ranges are informed by market data and aligned to job level and role. When making hiring and compensation decisions, we consider a variety of factors, including skills, experience, education, training, competencies, and overall business needs.

The reasonable compensation range for this role is $200,000 - $250,000.

Our Benefitsat a Glance:

• ComprehensiveHealthCoverage:We pay 90% of health premiums for employeesand their dependents.

• Generous Time Off:Up to8 weeksof paidtime offper year,which includesholidays, PTO, and sick time.

• Parental Leave:Up to8 weeksof paid timeoff after6 months of employment.

• Financial Security:401(k) plan with immediate eligibility, no vesting requirement, and employer match contributions up to 6%.

• Learning & Development Reimbursement:Up to $3,500 reimbursed annually for approved courses, certifications,conferencesand professional development opportunities.

• Extra Support:Remote workstipend tohelp you stay connected.

At Montera,you’llhave the autonomy to dogreat workand the benefits to thrive personally and professionally.