Senior Network Engineer Job at MongoDB | Palo Alto / SF, CA

We are looking for a Senior Network Engineer to take ownership of key areas of MongoDB’s global network infrastructure. You will design, deploy, and troubleshoot network and VPN solutions, including Palo Alto Prisma Access at global scale, partner with InfoSec to harden network security, and mentor engineers across the team. The role combines deep hands-on networking expertise with the judgment to prioritize and communicate risk and strategy to stakeholders.

Key Responsibilities

• Own the design, deployment, and operation of MongoDB’s global network infrastructure on Cisco Meraki, including routers, switches, firewalls, access points, and IoT sensors
• Lead the rollout and ongoing management of Palo Alto Prisma Access as MongoDB’s SASE, in partnership with InfoSec
• Administer and evolve the network authentication stack, including RADIUS implementations (EAP-TLS, PAP, RadSec, and MAC authentication)
• Partner with InfoSec to implement and improve network security controls, including VLAN configuration, firewall rules, DNS, DHCP, and IDS/IPS
• Design and deploy network infrastructure for new and existing global office sites, working with Real Estate, Workplace, AV, and Physical Security teams
• Serve as a senior (L3) technical escalation point for complex network issues
• Build automation to reduce manual network operations work and improve reliability and observability
• Advise on relationships with ISPs, hardware, low voltage cabling, and other network vendors
• Mentor engineers and contribute to a culture of technical excellence and self-service
• Keep the global network and VPN fault tolerant, reliable, secure, and scalable as the company grows
• Reduce risk and technical debt across network, security, and remote access solutions
• Communicate network strategy, risk, and incidents clearly to technical and non-technical stakeholders
• Uphold strong practices in network documentation, automation, and change management
• Balance long-term architecture work with day-to-day operational support
• Use iterative designs to prototype and deploy new network solutions

Requirements

• Bachelor’s degree in Computer Science or equivalent practical experience
• 6+ years of experience in network or systems engineering, with strong networking fundamentals (OSI model, routing, switching, IP subnetting, cabling, wireless)
• Proven experience designing, deploying, and troubleshooting high-availability network infrastructure at global scale, including routers, switches, firewalls, access points, and IoT sensors
• Hands-on experience with network platforms such as Cisco Meraki and HPE Aruba
• Experience with VPN and secure access solutions such as Palo Alto Prisma Access, Cloudflare IPSEC/L2TP, and Cisco Secure Client/AnyConnect
• Experience with network authentication technologies such as FoxPass, LDAP, and Okta (SAML)
• Solid understanding of enterprise and cloud network design best practices (high availability, VLAN, DHCP, DNS, IP subnetting, firewall rules)
• Experience partnering with InfoSec, Physical Security, and Workplace teams on cross-functional initiatives
• Scripting skills for network automation using infrastructure as code
• Experience with network documentation such as rack elevations, patching matrices, and layer 2 and layer 3 topologies
• Excellent communication skills for a wide range of audiences
• Willingness to work across time zones and travel as the business requires

Skills

Technical Skills

• Cisco Meraki and HPE Aruba
• Palo Alto Prisma Access, Cloudflare, Cisco AnyConnect
• RADIUS, FoxPass, LDAP, Okta (SAML)
• Routing, switching, VLAN, DHCP, DNS, and firewall rules
• Network automation and infrastructure as code
• Network documentation and topology design

Soft Skills

• Clear communication of risk and strategy
• Cross-functional partnership
• Mentoring
• Sound judgment in prioritization

Nice to Have

• CCNA, CCNP, Meraki Solutions Specialist, or an equivalent networking certification
• Experience with cloud infrastructure (AWS, GCP, or Azure) and hybrid network architectures
• Experience mentoring network or systems engineers
• Familiarity with MDM and endpoint tools such as JAMF and Workspace ONE (AirWatch)
• Experience working directly with ISPs and vendors to resolve complex connectivity issues

Success Measures

• 3 months: Fully onboarded, with a thorough understanding of the network and policies, a completed review of the existing environment, and effective L3 support
• 6 months: Led at least one medium-scale network or VPN project end to end (such as a Prisma Access rollout or office network upgrade) and delivered measurable network security improvements
• 12 months: Recognized as a senior technical owner of the global network, having led large-scale projects and mentored other engineer.

Benefits

Benefits for eligible U.S.-based employees may include:

• Equity and an employee stock purchase program
• Flexible paid time off
• 20 weeks of fully paid, gender-neutral parental leave
• Fertility and adoption assistance
• 401(k) plan
• Mental health counseling
• Transgender-inclusive health insurance coverage and other health benefits