Senior Network Engineer — Mesh Security Architect (Hybrid)

Torus Inc.; Salt Lake City (UT); Hybrid; USD 150,000 - 170,000; Full time

Benefits offered by this job

Equity

401(k)

Health benefits

Life and AD&D Insurance

Disability insurance

Dental and Vision

Telehealth

Parental leave

Job summary

Torus Inc. is expanding its Salt Lake City campus and seeks a Senior Network Engineer to own the network architecture underpinning Torus Protect.

You’ll lead VLAN design, IOx workloads, and the mesh VPN across sites, ensuring secure, scalable, and compliant networks for a growing energy infrastructure. You will collaborate with security, hardware, and product teams, mentor engineers, and travel to Torus locations in Utah as needed.

Qualifications

• Active CCIE certification (Enterprise Infrastructure, Security, or equivalent track) required
• 10+ years of progressive network engineering experience, including design and ownership of production, multi-site network architectures
• Strong working knowledge of VPN mesh technologies (WireGuard, Tailscale, or similar), including HA subnet router and ACL design
• Proven experience designing network segmentation for environments with mixed IT/OT requirements, including compensating controls for devices that cannot run standard security agents
• Comfortable working with Linux-based network appliances (Raspberry Pi or similar COTS hardware), EDR agents, and MDM-managed endpoints
• Experience with protocol analysis and packet capture tools (tshark/Wireshark) for troubleshooting and forensic investigation
• Clear, precise technical communicator, comfortable documenting architecture decisions and presenting them to both engineering and compliance stakeholders
• A self-starter who identifies what needs to be done and executes without waiting to be directed

Responsibilities

• Own protect's Network Architecture — Serve as the principal technical authority for the network design underlying Torus Protect, including switch/router hardware hardening, VLAN segmentation, and WAN/LAN topology across the fleet
• Advance IOx Containerization — Own the technical gating for containerized workloads hosted on switch/router IOx application hosting, including kernel-level EDR compatibility, access requirements, and persistent state volume design
• Design & Harden the Tailscale Mesh — Own the mesh VPN architecture connecting Security Routers across sites, including HA subnet router design, dual-route advertisement, and ACL scoping
• Own VLAN & Segmentation Strategy — Maintain and evolve the VLAN architecture spanning Security Router, Maintenance, BESS, and FESS/PLC segments, ensuring appropriate isolation and documented compensating controls where standard agents cannot run
• Validate Redundancy & Failover — Design and test failover paths across dual-NIC Security Routers, redundant switching, and VPN tunnels, with particular attention to segments relying on VPN ACL and segmentation as primary compensating controls
• Partner on Security Architecture — Work closely with the security architecture team to ensure network design decisions align with protect's broader threat model, EDR/MDM requirements, and compliance posture (IEC 62443, NERC CIP, CMMC Level 2)
• Troubleshoot Fielded Networks — Serve as the escalation point for complex network issues across deployed Torus Stations, using packet capture and protocol analysis (including OT protocols) to diagnose and resolve field incidents
• Document & Mentor — Produce clear reference architecture documentation and runbooks, and mentor other engineers on network design principles specific to protect's constraints
• Cross-Functional Partnership — Collaborate with hardware procurement, firmware, security, and product teams to ensure network design keeps pace with new Station product lines and evolving compliance requirements

Skills

CCIE certification

10+ years network engineering

VPN mesh technologies

network segmentation design

Linux-based network appliances

packet capture & analysis

clear technical communication

self-starter

Education

Bachelor's degree in CS/Network Engineering or related

Tools

Meraki

Catalyst switches/routers

IOx application hosting

Tailscale

WireGuard

Cisco routing protocols

Job description

Torus Inc. is expanding its Salt Lake City campus and seeks a Senior Network Engineer to own the network architecture underpinning Torus Protect.

You’ll lead VLAN design, IOx workloads, and the mesh VPN across sites, ensuring secure, scalable, and compliant networks for a growing energy infrastructure. You will collaborate with security, hardware, and product teams, mentor engineers, and travel to Torus locations in Utah as needed.