Remote Network Engineer — Zero-Trust & VPN

Sequester; United States; Remote; USD 100,000 - 160,000; Full time

Benefits offered by this job

Remote-friendly / async collaboration

Job summary

Sequester is seeking a network engineer to design and operate the underlying network fabric for a privacy-first vault of personal photos and videos. You will own LAN/WAN, VPN, firewalls, and load balancing to ensure fast, well-segmented, and resilient traffic.

Collaborate with security on zero-trust access paths and policy updates to maintain strong defenses. You will configure routers, switches, and security controls across production and staging, maintain comprehensive network diagrams, and

Qualifications

• BGP, VPN technologies, TLS termination and mTLS familiarity required.
• Experience with enterprise firewall platforms and load balancers.
• Disciplined change management with rollback planning.

Responsibilities

• Configure and maintain routers, switches, firewalls, and load balancers across production and staging environments.
• Implement network segmentation between admin, application, and database tiers.
• Monitor latency, packet loss, and the effectiveness of DDoS mitigation controls.
• Produce and maintain network diagrams plus change plans suitable for audit and disaster recovery reviews.
• Work with security on zero-trust access design and VPN policy updates.

Skills

BGP

VPN technologies

TLS termination

mTLS

Load balancing patterns

Change management

Education

CCNP or JNCIP certification

Tools

Enterprise firewall platforms

Load balancers

Job description

Sequester is seeking a network engineer to design and operate the underlying network fabric for a privacy-first vault of personal photos and videos. You will own LAN/WAN, VPN, firewalls, and load balancing to ensure fast, well-segmented, and resilient traffic.

Collaborate with security on zero-trust access paths and policy updates to maintain strong defenses. You will configure routers, switches, and security controls across production and staging, maintain comprehensive network diagrams, and