Job VC
Infrastructure Network Engineer
Responsibilities
Own corporate identity in Okta: user lifecycle, group-based access, SSO/SAML/SCIM app integrations, MFA, and automated joiner-mover-leaver flows.
Own and evolve the corporate network across offices: LAN/WiFi, switching, routing, VLAN segmentation, DHCP/DNS, and VPN — design, configuration, and L3 troubleshooting.
Own FortiGate firewalls: policy, segmentation, and VPN, in partnership with security.
Own the corporate GCP footprint: IAM, PAM, VPC and cloud networking, firewall rules, and the services backing corporate tooling.
Administer Google Workspace at the org level.
Use GitLab as the backbone for configuration-as-code, CI/CD, and IaC: manage repos and pipelines for IT automation.
Build automation that removes manual work and JML toil: scripting (Bash, Python) and API integration across Okta, Google Workspace, JSM, and GCP.
Author the runbooks and configuration-as-code that onsite engineers operate from
Provide L3 escalation for identity, network, cloud, and SaaS issues the onsite tier cannot resolve.
Configure MDM
Keep technical documentation current.
Requirements
4+ years in infrastructure / systems / network engineering, ideally at a cloud-native company.
Strong networking — hands-on design and troubleshooting of LAN/WiFi, switching, routing, VLANs, DHCP/DNS, and VPN.
Okta hands-on: user lifecycle, SSO/SAML/SCIM integrations, MFA.
GCP: IAM and cloud networking (VPC, firewall rules, routing).
Google Workspace administration.
GitLab: repositories, CI/CD pipelines.
IaC workflows (terraform).
Demonstrable automation/scripting (Bash, Python) with real examples you can walk us through.
Good security instincts: credential hygiene, segmentation, patching urgency, incident discipline.
Functional English — enough to coordinate with the global team and document your work clearly. Writing polish can lean on AI tooling; what matters is that your documentation and updates are accurate and understandable.
Nice to have
Jamf / Intune MDM
Certificate-based access: SCEP, LDAP, RADIUS.
FortiGate hands-on: policy, VPN, and segmentation.
ZTNA (Zero Trust Network Access) concepts and rollout experience.
AI-assisted IT operations — building tier-0 deflection in JSM/Slack, ticket triage/summarization, or agentic runbooks.
HRIS-driven identity automation.