Workplace Network Engineer
On-siteNew York City, New York, United States
Job Summary
Own the network and connectivity estate across every Legora location, managing the Meraki and Tailscale footprint from wired and wireless to WAN and zero-trust mesh. Define reference designs for LAN, Wi-Fi, and SD-WAN, then run the Meraki Dashboard as the single source of truth for configuration and capacity planning. Operate the Tailscale mesh alongside Information Security, monitor connectivity proactively, and drive incidents to resolution with root-cause analysis. Plan and program-manage network installs for new-site buildouts, directing on-site leads and vendors while holding them to acceptance tests. Manage ISP and vendor relationships, forecast network spend with Finance, and partner with Helpdesk on Tier-2/3 escalations.
Required Qualifications
- 6+ years in network engineering or network-focused IT infrastructure
- owning a multi-site corporate network end to end as the final escalation point
- Deep Cisco Meraki experience at multi-site scale
- understanding what the Dashboard abstracts away
- ability to design and reason about the routing, segmentation, and RF beneath the dashboard
- ability to keep the network running when the abstraction leaks
- fluency with the GUI
- Vendor-agnostic command of network fundamentals
- designing from first principles
- L2 / L3 boundaries
- IP addressing and subnetting (IPAM)
- routing including BGP with ISPs
- dual-circuit / SD-WAN failover
- VLAN segmentation
- DNS / DHCP
- QoS
- firewall policy
- troubleshooting at the packet level (e.g. Wireshark)
- ability to walk us through a multi-site network you designed end to end
- describing the trade-offs you made
- describing a failure mode you engineered out
- describing a cutover or migration you ran without taking the business down
- being a standards-setter
- preferring to define one blueprint every site copies
- keeping the next buildout cleaner than the last
- being automation-minded
- reaching for the Meraki API, Pulumi or Terraform
- scripting to manage the network as code
- being a calm operator under pressure
- being methodical, communicative, and relentless about root cause
- being a program manager who delivers through others
- comfortable owning timelines, vendors, and a budget
- getting work done through on-site teams you don't directly manage
Desired Qualifications
- Cisco depth at CCNP / CCIE level
- certified or demonstrably equivalent
- CCNA alone is below the bar for this role
- Meraki CMNA / ECMS
- Production experience operating Tailscale or comparable zero-trust network access (ZTNA)
- certificate / mTLS fundamentals
- Office buildouts and structured / low-voltage cabling
- commissioning networked building systems
- coordinating installers
- Physical-security and AV networking
- getting cameras / access-control (e.g. Verkada) onto the network
- keeping cameras / access-control available
- getting conferencing (Neat, Zoom) onto the network
- keeping conferencing available
- Comfortable running work through an ITSM / service-desk platform
- adopting AI-assisted, agentic automation
- running an AI-native ITSM (Serval)
- Connectivity and SaaS-reachability monitoring across sites
- synthetic / path monitoring (e.g. ThousandEyes, Catchpoint)
- a multi-site NMS (e.g. Auvik, PRTG, or Datadog)
- SNMP / syslog telemetry
- on top of Meraki's native alerting
- Wi-Fi design and validation tooling
- RF surveys and heat-mapping (e.g. Ekahau or Hamina)
- Experience with Meraki, Tailscale, Neat, Zoom, Verkada, Okta, and 1Password
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.