Senior Enterprise Network Architect (Hybrid)

Spire Global Inc.; Boulder (CO); Hybrid; USD 130,000 - 150,000; Full time

Benefits offered by this job

Equity awards

401(K) plan

Health benefits

Paid time off

Hybrid work model

Job summary

Spire Global Inc. is seeking an experienced Senior IT Network Engineer to own and support Spire’s corporate and back-office network environment in Boulder, Colorado.

This is a hands-on role focused on design, implementation, operation, reliability, and lifecycle management of the corporate network. Reporting to the Global IT Director, you will manage routing, firewalls, VPNs, DNS, wireless, and authentication, collaborating with Security, Infrastructure and Facilities to drive modernization,

Qualifications

• 5+ years of experience in network engineering, network operations, infrastructure engineering, or a similar hands-on technical role.
• Strong knowledge of TCP/IP, routing, switching, DNS, DHCP, NAT, VPNs, firewalls, VLANs, and network segmentation.
• Hands-on experience designing, operating , and troubleshooting enterprise routing and switching environments.
• Experience administering enterprise firewall platforms and implementing firewall policy and rule changes.
• Experience designing, operating , and troubleshooting remote-access and site-to-site VPN technologies, including IPsec and SSL-based VPNs.
• Strong troubleshooting skills and the ability to diagnose complex connectivity and network-service issues across multiple layers and systems.
• Experience supporting multi-site corporate networks, including office connectivity, WAN services, wireless networking, and Internet circuits.
• Experience with cloud networking in AWS, Azure, or similar environments.
• Working knowledge of identity, authentication, MFA, certificates, and PKI as they relate to network access and infrastructure services.
• Experience with network monitoring, logging, alerting, and operational troubleshooting tools.
• Experience with scripting, infrastructure-as-code, or automation using Terraform, Python, PowerShell, shell scripting, APIs, or similar tools.
• Demonstrated ability to take ownership of technical systems and projects through completion with limited supervision.
• Strong documentation, change-management, and operational practices.
• Ability to communicate clearly and collaborate effectively across IT, Security, Infrastructure, Facilities, Engineering, vendors, and carriers.
• Ability to participate in after-hours escalation or on-call support for critical network incidents.

Responsibilities

• Own the architecture, implementation, operation, and reliability of Spire’s corporate and back-office network environment.
• Design, configure, maintain , and troubleshoot corporate routing, switching, wired and wireless networking, firewalls, VPNs, and office-to-office connectivity.
• Own the corporate remote-access environment, including VPN architecture, operation, authentication integration, user connectivity, and troubleshooting.
• Manage corporate firewall platforms and policies in partnership with Security, including implementation, rule changes, lifecycle management, and troubleshooting.
• Design and maintain network segmentation and routing between corporate offices, corporate cloud services, remote-access environments, and approved external connections.
• Own corporate DNS operations and related network services supporting identity, email, SaaS, endpoints, and other business systems.
• Manage office-to-office and corporate site-to-site VPN connectivity, including IPsec tunnels and related routing.
• Support corporate cloud networking for IT-owned systems and services, including routing, connectivity, security controls, and integration with office and remote-access networks.
• Maintain and improve corporate wireless networking and network-authentication services.
• Serve as the senior technical escalation point for complex corporate network outages and connectivity issues.
• Troubleshoot difficult problems involving routing, VPNs, firewalls, DNS, authentication, certificates, wireless networking, cloud connectivity, and interdependent network services.
• Partner closely with Security on network-security architecture, firewall policy, segmentation, secure-access requirements, PKI, and other security controls.
• Partner with Infrastructure and Engineering teams on connectivity between corporate and engineering environments, ensuring secure, reliable, and well-defined network boundaries.
• Maintain accurate network diagrams, configurations, IP addressing, circuit information, operating procedures, and recovery documentation.
• Develop and maintain scripts, infrastructure-as-code, and automation used to deploy, configure, monitor , or manage corporate network services.
• Implement and maintain monitoring and alerting to identify network availability, reliability, capacity, and performance issues.
• Plan and execute network hardware, software, certificate, circuit, and service lifecycle activities.
• Support office openings, moves, expansions, consolidations, closures, and network infrastructure changes in partnership with End User Technology, Facilities, carriers, and vendors.
• Manage or coordinate ISP, carrier, circuit, and network-vendor relationships where required.
• Follow disciplined change-management practices, including planning, peer review, testing, documentation, rollback planning, and post-change validation.
• Proactively identify architectural, reliability, lifecycle, capacity, and operational risks and drive them through resolution.
• Participate in after-hours escalation or on-call support for critical corporate network incidents when required.
• Contribute to broader IT initiatives involving infrastructure modernization, reliability, automation, cloud services, workplace technology, and security.

Skills

TCP/IP

Routing

Switching

DNS

DHCP

NAT

VPNs

Firewalls

VLANs

Network segmentation

AWS networking

Azure networking

PKI

Scripting

Terraform

Python

PowerShell

Shell scripting

Tools

Palo Alto Networks firewalls

OpenVPN

Terraform

AWS

Azure

Job description

Spire Global Inc. is seeking an experienced Senior IT Network Engineer to own and support Spire’s corporate and back-office network environment in Boulder, Colorado.

This is a hands-on role focused on design, implementation, operation, reliability, and lifecycle management of the corporate network. Reporting to the Global IT Director, you will manage routing, firewalls, VPNs, DNS, wireless, and authentication, collaborating with Security, Infrastructure and Facilities to drive modernization,