Network Engineer II

Torus is headquartered in Utah and is expanding manufacturing at our 545,000-square-foot facility in Salt Lake City called GigaOne. We are the world’s first mesh energy infrastructure, uniting communities through resilient, sustainable, and intelligent power. We design, engineer, manufacture, install, and support our systems end-to-end, standing behind them throughout their lifecycle. Torus systems help reduce costs, lower emissions, and protect facilities from outages, while strengthening the security and reliability of the broader utility grid. Torus is committed to American manufacturing, engineering excellence, and building energy systems that last.

• Develop and execute Shield commissioning procedures for new Torus Station deployments, including Catalyst switch bring-up and router/firewall bring-up
• Design, stage, configure, and validate Shield Security Routers (Ubuntu, dual-NIC, Tailscale, EDR/MDM enrollment) before field shipment
• Design, verify and troubleshoot VLAN configuration and reachability across the Shield segments (Security Router, Maintenance, BESS, FESS) during site turn-up
• Analyze commissioning results and deviations accurately, escalate anything that fails validation, and recommend design changes

• Build and maintain as-built cable maps, port maps, and labeling for switches, patch panels, and fiber enclosures
• Verify optics, DACs, and fiber types against the design before install (media type, reach, vendor coding compatibility, MPO polarity) and flag mismatches early
• Keep accurate records of IP and VLAN assignments, device configs, and firmware versions
• Participate in  rack-and-stack, patching, and link validation during site turn-up to validate the design in the field

• Monitor network health across deployed sites (WAN, Starlink and cellular connectivity, tunnel status, switch and firewall status)
• Analyze and troubleshoot connectivity issues, including WAN failover, VPN tunnel drops, and VLAN or ACL misconfigurations, and determine root cause 
• Support and help design the out-of-band management network (console servers, cellular OOB path, break-glass access procedures)
• Own root-cause analysis for assigned incidents and support the senior network and security engineers during incident response
• Track and manage tickets through resolution, with clear handoff notes

• Develop, test, and apply standardized configuration templates to switches, routers, and firewalls (Cisco and Arista) under change control
• Test and validate firmware and software updates before fleet rollouts, and assist with deployment
• Design and test  Meraki-to-Catalyst migration activities, including cutover prep, testing, and post-migration validation
• Design, configure, and test edge routing and address translation (BGP and BFD sessions, NAT, MLAG and StackWise) with senior review 

• Help design and enforce segmentation and VPN ACL policies, especially for OT devices that cannot run standard agents
• Analyze and recommend  firewall rule changes and reviews on Palo Alto platforms under senior guidance
• Verify and analyze EDR and MDM agent health and enrollment on Shield devices
• Analyze  routine configuration audits and vulnerability remediation
• Follow and help maintain Shield security policies, including the communication device policy

• Create and update network diagrams, runbooks, and commissioning checklists
• Prepare technical documentation and evidence that maps network control to IEC 62443, NERC CIP, and CMMC assessments
• Document known issues, lessons learned, and troubleshooting procedures for the team

• 2-5 years of experience in a network engineering, network administration, or IT infrastructure role (internships, co-ops, and lab or military experience count)
• Working knowledge of core networking concepts: TCP/IP, subnetting, VLANs, trunking, routing basics, DHCP, DNS, and NAT
• Hands-on experience configuring and troubleshooting enterprise switches, routers, or firewalls (Cisco or Arista preferred, but equivalent vendor experience is fine)
• Familiarity with VPN concepts, such as site-to-site tunnels and remote access
• Working familiarity with fiber and copper cabling and optics (SFP/SFP+/SFP28, DAC, single-mode vs multimode)
• Experience with the Linux command line, including basic networking tools (ip, ping, traceroute, tcpdump, iptables or nftables)
• Ability to read network diagrams and write clear technical documentation
• Strong troubleshooting skills and a methodical approach to isolating problems
• Ability to follow change control and checklist-driven procedures accurately
• Willingness to regularly travel within Utah, with occasional travel to remote sites

• Exposure to mesh or overlay VPNs (Tailscale, WireGuard) or zero-trust networking
• Experience with endpoint security or device management tools (EDR, MDM)
• Basic scripting in Python or Bash for automation and validation
• Familiarity with OT/ICS environments or industrial protocols (Modbus, etc.)
• Awareness of security frameworks such as IEC 62443, NERC CIP, NIST, or CMMC
• Experience with satellite or cellular WAN connectivity
• Experience with monitoring or logging tools (Datadog, Splunk, or similar)

• Regularly operates a computer and other peripheral office equipment such as a printer or mouse.
• Ability to communicate information so others can understand. Must be able to exchange accurate information in these situations.
• Must report to work reliably and with the ability to use full and unimpaired skills and judgment to safely execute your job.
• Proficiency in reading, writing, and speaking English required.
• When on the production floor, required to don personal protective equipment to include, but not limited to ear protection, gloves, eye protection and/or safety helmet.
• When on the production floor, ability to observe, detect and respond to audible and visual machine malfunction warnings.
• Ability to lift and carry up to 50 lbs, and to lift heavier equipment with a team lift or mechanical aid.
• Ability to read, identify, observe and recognize details, color-coding and fine print at close range on associated engineering drawings.
• Ability to bend, kneel, crouch, reach, and work in confined spaces such as equipment racks, closets, and enclosures, for up to 2 hours at a time.
• Ability to ascend ladders and work at heights.
• Ability to work in environments with elevated noise and high temperatures, including outdoors in varying weather at remote sites. 
• Ability to handle and visually inspect small components such as fiber connectors, optics, and labeled cables.
• Ability to travel to Torus sites in Salt Lake and Utah counties and occasionally to remote sites.
• Ability to work outside normal business hours for maintenance windows and incident response, with an expectation to be on a rotational on-call schedule.