Network & Systems Engineer

WHATS THE ROLE

We are looking for a hands-on Network Engineer to support and take day-to-day technical ownership of the Bay Area network and supporting systems. This is a large, multi-year transportation and critical infrastructure environment across the Bay Area, with industrial switching and routing, firewalls, wireless links, cameras, servers, virtualization, storage, and monitoring platforms.

This is not a traditional help-desk or ticket-based support role. The right person has strong networking and security fundamentals, solid system administration skills, learns unfamiliar technologies quickly, and is comfortable investigating problems independently from Layer 1 through the application layer. You will work directly with transportation agencies, contractors, vendors, and internal engineering teams.

YOUR PRIMARY RESPONSIBILITIES

Network & Security

• Configure, troubleshoot, and maintain Layer 2 and Layer 3 industrial Ethernet networks
• Work with VLANs, 802.1Q trunks, STP/RSTP, LACP, OSPF, inter-VLAN routing, and redundancy protocols such as VRRP
• Troubleshoot connectivity using CLI, logs, MAC/ARP tables, routing tables, packet captures, NMS tools, and physical testing
• Configure and support firewalls, network segmentation, ACLs, VPN/secure remote access, AAA/RADIUS, NAC concepts, and device hardening
• Support fiber, copper, SFP/SFP+ optics, PoE, wireless, microwave, and cellular communications
• Maintain configuration backups, network diagrams, IP/VLAN documentation, and accurate as-built information

Industrial/OT & ITS Systems

• Support industrial Ethernet networks used for transportation and other critical infrastructure
• Work with ruggedized switches, routers, firewalls, wireless radios, cameras, controllers, sensors, and roadside/field equipment
• Support industrial redundancy technologies such as MRP and similar high-availability designs
• Configure and support IP cameras, LPR, video analytics, Bosch BVMS, and other VMS/ITS applications
• Understand the operational impact of network changes and perform controlled testing, cutovers, and maintenance

Systems Administration & Virtualization

• Administer and troubleshoot Windows Server and Active Directory environments, including users/groups, DNS, DHCP, NTP/SNTP, and basic Group Policy
• Install, configure, patch, and troubleshoot server-based engineering and monitoring applications
• Support VMware, Hyper-V, and other virtual environments, including VM provisioning, networking, and basic host/storage troubleshooting
• Work with NAS, iSCSI, shared storage, and video recording/storage systems
• Be comfortable troubleshooting across both network and server/application layers when an issue crosses system boundaries

Network Management, Automation & AI

• Monitor and manage the environment using NMS and IPAM platforms such as HiVision and ManageEngine OpManager/OpUtils
• Use SNMP, Syslog, alerting, discovery, configuration backup, and performance data to identify and troubleshoot issues proactively
• Use Python, PowerShell, APIs, or similar tools to automate repetitive engineering and operational tasks when practical
• Use modern AI tools such as Claude / Claude Cowork, or equivalent assistants for engineering research, troubleshooting, documentation, scripting, and workflow improvement
• Validate AI-assisted output before applying changes to production or customer systems

Field, Customer & Project Support

• Participate in field installations, cabinet work, testing, cutovers, and physical site inspections
• Work in roadside facilities, bridges, tunnels, equipment rooms, and other industrial environments, including elevated or confined locations when required
• Work directly with transportation agencies, contractors, vendors, and end users to troubleshoot and resolve technical issues
• Communicate technical findings clearly and take ownership of issues through resolution
• Travel throughout the Bay Area as required for on-site project support

ROLE OWNERSHIP

This engineer is expected to understand the network environment end to end and become a primary technical owner for its day-to-day operation. That includes networking, security, monitoring, virtualization, servers, storage, cameras, and field connectivity. The role requires a proactive engineer who can identify the next step, learn new platforms quickly, document changes, and drive troubleshooting without waiting for detailed instructions or a ticket.

 

QUALIFICATIONS

Required

• 4+ years of hands-on network engineering, implementation, and troubleshooting experience in production environments
• Strong Layer 2 knowledge: VLANs, 802.1Q trunking, STP/RSTP, LACP, MAC address tables, ARP, LLDP/CDP, and multicast/broadcast troubleshooting
• Strong Layer 3 knowledge: IPv4 addressing/subnetting, static routing, OSPF, inter-VLAN routing, VRRP/HSRP concepts, ACLs, and route troubleshooting
• Hands-on experience configuring managed switches, routers, and firewalls - not only monitoring, ticket escalation, or vendor coordination
• Strong Layer 1 troubleshooting skills with fiber, copper, optics, PoE, wireless, and physical connectivity
• Working knowledge of network security, segmentation, firewalls, VPNs, AAA/RADIUS, access control, and device hardening
• Strong Windows Server and Active Directory administration skills, plus working knowledge of virtualization and storage
• Ability to read network diagrams, understand traffic flow, identify the affected layer, and troubleshoot independently
• Ability to learn unfamiliar hardware and software quickly using vendor documentation, lab testing, AI tools, and hands-on research
• Self-driven and proactive; comfortable identifying the next step without waiting for a ticket or detailed instructions
• Strong communication skills when working with customers, contractors, vendors, and other engineers
• Comfortable working outdoors, at heights, and in roadside or industrial environments
• Bachelor's degree in Electrical Engineering, Computer Engineering, Computer Science, or a related field, or equivalent hands-on experience

Preferred Experience

• Industrial Ethernet, OT, ITS, transportation, utilities, manufacturing, or other critical-infrastructure networks
• Cisco Catalyst / Industrial Ethernet and Hirschmann / Belden switching and routing
• OSPF, VRRP, MRP, RSTP, LACP, SNMP, NTP/PTP, DHCP, DNS, and network redundancy
• Cisco or Fortinet firewall/security platforms, VPN, network segmentation, and OT cybersecurity
• Hirschmann HiVision NMS, SolarWinds, Cisco Catalyst Center, and ManageEngine OpManager / OpUtils / IPAM
• VMware, Windows Server, Active Directory, and shared storage
• Bosch IP cameras, BVMS, LPR, video analytics, or similar video surveillance systems
• Python, PowerShell, APIs, network automation, and practical use of AI engineering assistants
• Prior work with government agencies, general contractors, and end-user clients on technical projects

Preferred Certifications

• Cisco CCNA or CCNP Enterprise or equivalent hands-on experience strongly preferred
• Hirschmann / Belden industrial networking certification preferred
• Fortinet, Cisco Security, or equivalent security certification is a plus
• VMware or equivalent virtualization certification is a plus
• CompTIA Network+ or Security+ may be considered but does not replace hands-on networking experience

ADDITIONAL INFORMATION

• Location: On-site in Oakland, CA
• Reports to: Manager, Network Engineering & Services
• Job type: Full-Time
• Travel: Regular travel throughout the Bay Area required