IT Infrastructure Delivery Engineer

Your Job

As an IT Infrastructure Delivery Engineer at Koch, your primary goal is to move the organization away from rigid, legacy hardware and toward a fluid, software-defined ecosystem. You aren't just "fixing routers" you are the architect of a global fabric that connects branches, data centers, and multi-cloud environments (AWS/Azure/Alkira) into one seamless, secure entity.

This role will be instrumental in designing, implementing, and managing solutions that protect enterprise users, applications, and data in a modern, cloud & on-prem environment. The engineer will work closely with architecture, security, operations, and vendors to ensure high-quality, scalable, and secure access.

Our Team

The KOCH Infrastructure team provides reliable, flexible, and secure connectivity solutions that enable business solutions and perpetual transformation. We manage network and network security infrastructure, including wide area networking, local area networking, wireless, firewalls, datacentre networking, load balancing, endpoint security, and proxies. We provide enterprise infrastructure monitoring for IT components across the enterprise. We are currently focused on the following transformation strategies: talent, proactive management, process optimization and automation, security by design, and adopting a service focused organization.

What will you do

• Design & Standards Leadership: You don’t just follow templates; you build them. You’ll be responsible for developing new global standards for the network, creating high-level designs (HLD), and ensuring every site rollout follows a clean, documented blueprint (LLD).
• Cisco & Meraki Mastery: You’ll live in the "Command Centers"-Cisco vManage for the complex Viptela enterprise sites and theMeraki Dashboard for lean branch deployments. You’ll be the go-to expert for configuring global control policies, managing the vSmart controllers, and ensuring the fabric stays healthy.
• The Wireless Experience: Beyond the WAN, you’ll own theMeraki Wireless environment. This means designing high-density Wi-Fi layouts, managing SSID policies, and ensuring seamless roaming and connectivity for users across the office.
• Deep-Dive Routing: While SD-WAN simplifies things, the "underlay" is still complex. You’ll need a master-level understanding ofBGP, OSPF, and EIGRP to ensure that traffic flows correctly between your new SD-WAN tunnels and existing legacy circuits.
• Security Integration & SOC Collaboration: You’ll bridge the gap between Networking and Security. This includes deploying and managingPalo Alto, Cisco FTD (Firepower), andFortiGate firewalls. You’ll work closely with theSOC to implement real-time security measures, IPS/IDS, and threat-prevention policies.
• Cloud & Next-Gen Connectivity: You’ll lead the "Cloud On-Ramp" strategy. Whether it’s connecting toAWS Transit Gateways,Azure Virtual WAN, or usingAlkira to stitch together multi-cloud environments, you make sure the cloud feels like it's part of the local network.
• Full-Stack Troubleshooting: When things break, you’re the "Level 3" expert. You’ll handle complex issues across the entire Cisco stack-fromCatalyst switching and Wireless Controllers (WLC) to global routing loops.
• Automating the Boring Stuff: You’ll usePython orAnsible to automate repetitive tasks. Instead of manual clicks, you’ll write scripts to push bulk configuration changes, pull health reports, or integrate the network with other business tools.

Automation & Quality Improvement

• Contribute to automation and standardization efforts (Ansible, Terraform, APIs).
• Identify inefficiencies and drive process, quality, and documentation improvements.
• Participate in design reviews, quality checks, and peer mentoring.

Stakeholder & Vendor Engagement

• Work directly with internal customers, project managers, and global stakeholders.
• Coordinate with OEMs, and system integrators for implementation and issue resolution.
• Provide clear communication on project status, risks, and dependencies.

Who You Are (Basic Qualifications)

• SD-WAN: Cisco (Viptela), Meraki.
• Security: Palo Alto, Cisco FTD, Fortinet, IPsec/SSL protocols.
• Cloud: AWS, Azure, Alkira (Multi-cloud networking).
• Infrastructure: Cisco Catalyst (LAN), Meraki & Cisco Wireless.
• DevOps: Python, Ansible, or API-based automation.
• Familiarity with SIEM/Observability tools (e.g., Splunk, Grafana, LogicMonitor).

What will put you ahead

• Exposure to network automation (Python, Ansible, DevNet concepts).
• Knowledge of cloud platforms such asAWS, Azure, or GCP.
• An open-minded individual who embraces challenges positively, KOCH Fit.
• Experience working in global delivery or follow-the-sun models.

At Koch companies, we are entrepreneurs. This means we openly challenge the status quo, find new ways to create value and get rewarded for our individual contributions. Any compensation range provided for a role is an estimate determined by available market data. The actual amount may be higher or lower than the range provided considering each candidate's knowledge, skills, abilities, and geographic location. If you have questions, please speak to your recruiter about the flexibility and detail of our compensation philosophy.

Who We Are

At Koch, employees are empowered to do what they do best to make life better. Learn how our business philosophy helps employees unleash their potential while creating value for themselves and the company.

Additionally, everyone has individual work and personal needs. We seek to enable the best work environment that helps you and the business work together to produce superior results.