Senior IT Network Engineer

We are looking for an experienced Senior IT Network Engineer to own and support Spire’s corporate and back-office network environment.

Reporting to the Global IT Director, this is a hands-on role with primary responsibility for the design, implementation, operation, reliability, and lifecycle management of the corporate network. You will own the networking that supports Spire’s offices, remote users, corporate services, and back-office systems, while working closely with Security, Infrastructure, Facilities, and other technical teams.

The role includes responsibility for corporate routing, firewalls, VPN and remote access, office-to-office connectivity, DNS, wireless networking, network authentication, and related network infrastructure. You will also help modernize legacy and bespoke network services, improve resiliency, and reduce operational dependency on individual subject-matter experts.

We are looking for someone who is proactive, self-directed, and comfortable owning complex technical problems from architecture through implementation and ongoing operation. The right person will combine strong network-engineering fundamentals with disciplined operational practices, including documentation, change management, monitoring, lifecycle management, and follow-through.

Role & Responsibilities

Own the architecture, implementation, operation, and reliability of Spire’s corporate and back-office network environment.

Design, configure, maintain, and troubleshoot corporate routing, switching, wired and wireless networking, firewalls, VPNs, and office-to-office connectivity.

Own the corporate remote-access environment, including VPN architecture, operation, authentication integration, user connectivity, and troubleshooting.

Manage corporate firewall platforms and policies in partnership with Security, including implementation, rule changes, lifecycle management, and troubleshooting.

Design and maintain network segmentation and routing between corporate offices, corporate cloud services, remote-access environments, and approved external connections.

Own corporate DNS operations and related network services supporting identity, email, SaaS, endpoints, and other business systems.

Manage office-to-office and corporate site-to-site VPN connectivity, including IPsec tunnels and related routing.

Support corporate cloud networking for IT-owned systems and services, including routing, connectivity, security controls, and integration with office and remote-access networks.

Maintain and improve corporate wireless networking and network-authentication services.

Serve as the senior technical escalation point for complex corporate network outages and connectivity issues.

Troubleshoot difficult problems involving routing, VPNs, firewalls, DNS, authentication, certificates, wireless networking, cloud connectivity, and interdependent network services.

Partner closely with Security on network-security architecture, firewall policy, segmentation, secure-access requirements, PKI, and other security controls.

Partner with Infrastructure and Engineering teams on connectivity between corporate and engineering environments, ensuring secure, reliable, and well-defined network boundaries.

Maintain accurate network diagrams, configurations, IP addressing, circuit information, operating procedures, and recovery documentation.

Develop and maintain scripts, infrastructure-as-code, and automation used to deploy, configure, monitor, or manage corporate network services.

Implement and maintain monitoring and alerting to identify network availability, reliability, capacity, and performance issues.

Plan and execute network hardware, software, certificate, circuit, and service lifecycle activities.

Support office openings, moves, expansions, consolidations, closures, and network infrastructure changes in partnership with End User Technology, Facilities, carriers, and vendors.

Manage or coordinate ISP, carrier, circuit, and network-vendor relationships where required.

Follow disciplined change-management practices, including planning, peer review, testing, documentation, rollback planning, and post-change validation.

Proactively identify architectural, reliability, lifecycle, capacity, and operational risks and drive them through resolution.

Participate in after-hours escalation or on-call support for critical corporate network incidents when required.

Contribute to broader IT initiatives involving infrastructure modernization, reliability, automation, cloud services, workplace technology, and security.

Basic Qualifications

5+ years of experience in network engineering, network operations, infrastructure engineering, or a similar hands-on technical role.

Strong knowledge of TCP/IP, routing, switching, DNS, DHCP, NAT, VPNs, firewalls, VLANs, and network segmentation.

Hands-on experience designing, operating, and troubleshooting enterprise routing and switching environments.

Experience administering enterprise firewall platforms and implementing firewall policy and rule changes.

Experience designing, operating, and troubleshooting remote-access and site-to-site VPN technologies, including IPsec and SSL-based VPNs.

Strong troubleshooting skills and the ability to diagnose complex connectivity and network-service issues across multiple layers and systems.

Experience supporting multi-site corporate networks, including office connectivity, WAN services, wireless networking, and Internet circuits.

Experience with cloud networking in AWS, Azure, or similar environments.

Working knowledge of identity, authentication, MFA, certificates, and PKI as they relate to network access and infrastructure services.

Experience with network monitoring, logging, alerting, and operational troubleshooting tools.

Experience with scripting, infrastructure-as-code, or automation using Terraform, Python, PowerShell, shell scripting, APIs, or similar tools.

Demonstrated ability to take ownership of technical systems and projects through completion with limited supervision.

Strong documentation, change-management, and operational practices.

Ability to communicate clearly and collaborate effectively across IT, Security, Infrastructure, Facilities, Engineering, vendors, and carriers.

Ability to participate in after-hours escalation or on-call support for critical network incidents.

Preferred Qualifications

Experience with Palo Alto Networks firewalls or similar enterprise firewall platforms.

Experience with BGP and other dynamic routing protocols.

Experience with OpenVPN or other enterprise remote-access platforms.

Experience with AWS networking, including VPCs, Transit Gateway, Route 53, security groups, routing, and related services.

Experience with enterprise wireless platforms and 802.1X or certificate-based network authentication.

Experience with DNS administration, domain-management platforms, and related infrastructure services.

Experience managing PKI, certificates, or certificate-based authentication for network services.

Experience modernizing legacy or bespoke network environments and migrating toward more standardized enterprise platforms.

Experience supporting geographically distributed offices and hybrid cloud environments.

Experience managing network hardware lifecycle, carrier circuits, Internet providers, and vendor relationships.

Experience designing resilient corporate networks and reducing single points of failure or operational dependency.

Experience supporting environments with security, regulatory, or compliance requirements.

Experience working closely with Security teams on segmentation, firewall policy, secure access, infrastructure hardening, and incident response.

Spire operates a hybrid work model, and this position will require you to work a minimum of three days per week in the office.

Access to US export-controlled software and/or technology may be required for this role. If needed, Spire will arrange the necessary licenses—this is not something candidates need to have before applying. #LI-MI1

The anticipated base salary range for this position is listed below. Final base salary for this role will be based on the location, skills, experience and qualifications. In addition to base compensation, this role may be eligible for annual equity awards and our employee benefits program, including vacation, sick, and personal time off; optional medical, dental, vision, life, and disability coverage; a 401(K) plan; health and wellness reimbursement program; and participation in Spire’s Employee Stock Purchase Plan.

Salary Range$130,000—$150,000 USD

Global Perks

🛰️ Name Your Satellite Program (NYSP)🚀 Launch Attendance🌴 Generous Time Off Policy🎓 Education Assistance Program🥰 Employee Assistance Program (EAP)📈 Employee Stock Purchase Program (ESPP)👣 Family Leave💪 Fitness Reimbursement🧡 Employee Referral Program🍉 Healthy snacks & beverages in every office

About Spire

We improve life on Earth with data from space.

Spire Global is a space-to-cloud analytics company that owns and operates the largest multi-purpose constellation of satellites. Its proprietary data and algorithms provide the most advanced maritime, aviation, and weather tracking in the world. In addition to its constellation, Spire’s data infrastructure includes a global ground station network and 24/7 operations that provide real-time global coverage of every point on Earth.

Spire is Global and our success draws upon the diverse viewpoints, skills and experiences of our employees. We are proud to be an equal opportunity employer and are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital status, disability, gender identity or veteran status.

To help maintain a safe and secure workplace for Spire employees, all candidates who receive a conditional offer will be required to complete a background check. This may include criminal history and employment verification.

Please take a moment to review Spire's Global Data Privacy Notice for Employees, Contractors, Candidates and Visitors, as well as Spire's Privacy Policy.

Kindly be advised that communication regarding your application may come from @spire.com, @recruiting.spire.com, or from Candidate.fyi (our scheduling tool).