Skip to main content
Montera

Principal Network Engineer

RemoteUnited States only
Published
Role
DevOps
Experience
Principal
Employment
Full-time
$160k–$220k/yr
Check eligibility

Open to US only. Set where you work from to check your eligibility.

No BS summary

Principal Network Engineer to own architecture, security, and governance of all Montera-operated networking (IT, OT, guest, Wi-Fi) and customer demarcation in hyperscale data centers. Requires 10+ years of experience in data center networks, deep firewall/segmentation expertise in IT/OT environments, and strong customer-facing capabilities. Must have direct experience with ARIN/RIR, ASN/BGP, and enterprise IPAM at multi-site scale.

Core skills

IPAMFirewallNetwork Architecture

Required skills

ARINBGPIEC 62443Purdue-modelGitInfrastructure-as-code

What you'll do

  • Owns the architecture, security, and governance of all Montera-operated networking — spanning corporate IT, critical-infrastructure OT (BMS, SCADA, DCIM, life-safety), administrative, guest, and Wi-Fi networks — and the secure demarcation to customer-managed fabrics.
  • Owns Montera’s public IP strategy: ARIN/RIR address application and justification, ASN and BGP strategy, IPAM, and the governance of all network allocations, firewalls, and security policy across the fleet.
  • Works hand-in-glove with the Principal Controls Engineer.
  • Own and standardize all Montera-operated networks: corporate IT, OT controls (BMS/SCADA/DCIM), life-safety interfaces, administrative, guest, and Wi-Fi.
  • Define segmentation, zoning, and isolation strategy across IT, OT, and customer domains (e.g., Purdue-model / IEC 62443 alignment for OT).
  • Establish redundancy and survivability standards for mission-critical internal services, monitoring transport, and management networks.
  • Own the public IP strategy: ARIN/RIR address-space application and justification, ASN acquisition, and BGP/peering/transit strategy for Montera-operated services.
  • Own IPAM and the governance of all address allocations across sites — internal, OT, shared services, and Montera-side customer handoff ranges.
  • Define addressing, routing, and DNS standards that scale cleanly across a multi-site portfolio.
  • Own firewall architecture and policy, secure remote-access patterns, role-based access control, micro-segmentation, and audit logging across IT and OT.
  • Design high-security architectures for OT and critical-infrastructure systems; partner with controls, cybersecurity, and operations on baseline hardening, monitoring, and incident-response workflows.
  • Lead risk reviews of exposure paths between customer, IT, and OT domains and drive mitigations through design and governance (supporting Montera’s ISO 27001 posture).
  • Translate the controls-defined data-exposure scope into the secure delivery path: DMZ/broker placement, read-only least-privilege boundaries, firewall policy, and the customer-facing network demarcation for OT/telemetry data.
  • Define demarcation models, handoff points, and clear IT/OT/customer responsibility boundaries between Montera-operated shared infrastructure and customer-managed fabrics.
  • Provision the secure network path for AI optimization platforms (e.g., Phaidra) consuming Montera telemetry — edge, on-prem, or cloud — in partnership with the Controls Engineer.
  • Support customer technical reviews and acceptance testing for data-access and connectivity commitments tied to leases and SLAs.
  • Engage the customer directly to capture AI/compute networking requirements: fabric type, bandwidth, latency, scale, storage connectivity, and operational model.
  • Translate customer requirements into deployable designs within facility constraints (space, pathways, power/cooling, operational standards).
  • Define the demarcation between Montera-operated shared infrastructure and customer-managed compute/storage fabrics, with clear handoff and responsibility.
  • Define configuration, documentation, and automation standards (IPAM, addressing, routing, access control) using Git-based / infrastructure-as-code workflows.
  • Support construction and commissioning milestones: testing, validation, and turnover readiness for internal and shared-service networks.
  • Establish observability standards and operational runbooks for troubleshooting and incident response.
  • Lead technical evaluation and selection of network OEMs, firewall/security, Wi-Fi/access, and cabling/optics partners for Montera-owned systems.
  • Drive standardization and cost-optimized BOM strategy aligned to availability, lead time, power, and operational risk.
  • Own technical change control and vendor issue resolution through deployment and lifecycle support.

What they require

  • Bachelor’s degree in Controls, Electrical, Mechanical, or Systems Engineering, or related field; Master’s degree in Controls, Electrical, Mechanical, or Systems Engineering, or a related field.
  • 10+ years of experience designing and operating data center networks for hyperscale, mission-critical, or regulated environments.
  • Direct experience with RIR/ARIN address application and justification, ASN/BGP, and enterprise IPAM at multi-site scale.
  • Deep firewall, segmentation, and secure-remote-access expertise across both IT and OT environments, including OT environments such as BMS, SCADA, and DCIM, with IT/OT segmentation and IEC 62443 / Purdue-model familiarity.
  • Proven experience defining single-tenant customer demarcation and data-access models in secure environments.
  • Strong customer-facing capability: translating customer requirements into implementable designs and clear demarcation models.
  • Network automation and configuration management using Git-based workflows, templating, and infrastructure-as-code.

Benefits

  • Competitive and thoughtful total compensation package designed to recognize the value each team member brings.
  • Comprehensive Health Coverage: We pay 90% of health premiums for employees and their dependents.
  • Generous Time Off: Up to 8 weeks of paid time off per year, which includes holidays, PTO, and sick time.
  • Parental Leave: Up to 8 weeks of paid time off after 6 months of employment.
  • Financial Security: 401(k) plan with immediate eligibility, no vesting requirement, and employer match contributions up to 6%.
  • Learning & Development Reimbursement: Up to $3,500 reimbursed annually for approved courses, certifications, conferences and professional development opportunities.
  • Extra Support: Remote work stipend to help you stay connected.
  • Autonomy to do great work and the benefits to thrive personally and professionally.

At Montera, we’re building the future of digital infrastructure. Founder-led with $1.5B backed by Stonepeak, Montera is driven by a future-focused vision: to develop and operate hyperscale data centers essential for tomorrow's technology.

Data CentersStartup
$160k–$220k/yr