Principal Network Engineer

About Montera

At Montera, we’re building the future of digital infrastructure. Founder-led with $1.5B backed by Stonepeak, Montera is driven by a future-focused vision: to develop and operate hyperscale data centers essential for tomorrow's technology. Our mission is to deliver strategically located, hyperscale data centers designed for speed, reliability, and scalability. Backed by decades of experience in design, construction, and operations, we don’t just build-we execute with purpose.

Our Values

• Client First Alignment: We align every solution to our clients’ goals.

• Speed with Certainty: Velocity matters. We deliver with urgency and precision.

• Operational Excellence: Decades of experience drive our high standards.

• Safety & Integrity: Safety is non-negotiable. We lead with integrity and transparency.

• Ownership Mentality: We think like owners, because we are.

The Opportunity

Montera is seeking a Principal Network Engineer that owns the architecture, security, and governance of all Montera-operated networking - spanning corporate IT, critical-infrastructure OT (BMS, SCADA, DCIM, life-safety), administrative, guest, and Wi-Fi networks - and the secure demarcation to customer-managed fabrics. This role owns Montera’s public IP strategy: ARIN/RIR address application and justification, ASN and BGP strategy, IPAM, and the governance of all network allocations, firewalls, and security policy across the fleet.

The role works hand-in-glove with the Principal Controls Engineer. Controls defines the data - the points, tags, and exposure scope Montera surfaces to itself and to the customer; Network delivers the secure transport, segmentation, and demarcation that lets that data be consumed without compromising OT. Montera facilities are single-tenant - one customer per building or campus - so the customer data-access model (what the customer sees, how they reach it, and where the trust boundary sits) is defined with that single customer and governed jointly by these two roles. Neither can deliver it alone.

What You'll Do

Internal Network Architecture (IT / OT / Guest)

• Own and standardize all Montera-operated networks: corporate IT, OT controls (BMS/SCADA/DCIM), life-safety interfaces, administrative, guest, and Wi-Fi.

• Define segmentation, zoning, and isolation strategy across IT, OT, and customer domains (e.g., Purdue-model / IEC 62443 alignment for OT).

• Establish redundancy and survivability standards for mission-critical internal services, monitoring transport, and management networks.

IP Strategy, Addressing & Allocation Governance

• Own the public IP strategy: ARIN/RIR address-space application and justification, ASN acquisition, and BGP/peering/transit strategy for Montera-operated services.

• Own IPAM and the governance of all address allocations across sites - internal, OT, shared services, and Montera-side customer handoff ranges.

• Define addressing, routing, and DNS standards that scale cleanly across a multi-site portfolio.

Security, Firewalls & Critical Infrastructure Networking

• Own firewall architecture and policy, secure remote-access patterns, role-based access control, micro-segmentation, and audit logging across IT and OT.

• Design high-security architectures for OT and critical-infrastructure systems; partner with controls, cybersecurity, and operations on baseline hardening, monitoring, and incident-response workflows.

• Lead risk reviews of exposure paths between customer, IT, and OT domains and drive mitigations through design and governance (supporting Montera’s ISO 27001 posture).

Customer Data Access & Demarcation

• Executed jointly with the Principal Controls Engineer.

• Translate the controls-defined data-exposure scope into the secure delivery path: DMZ/broker placement, read-only least-privilege boundaries, firewall policy, and the customer-facing network demarcation for OT/telemetry data.

• Define demarcation models, handoff points, and clear IT/OT/customer responsibility boundaries between Montera-operated shared infrastructure and customer-managed fabrics.

• Provision the secure network path for AI optimization platforms (e.g., Phaidra) consuming Montera telemetry - edge, on-prem, or cloud - in partnership with the Controls Engineer.

• Support customer technical reviews and acceptance testing for data-access and connectivity commitments tied to leases and SLAs.

Customer AI & Compute Networking Enablement

• Engage the customer directly to capture AI/compute networking requirements: fabric type, bandwidth, latency, scale, storage connectivity, and operational model.

• Translate customer requirements into deployable designs within facility constraints (space, pathways, power/cooling, operational standards).

• Define the demarcation between Montera-operated shared infrastructure and customer-managed compute/storage fabrics, with clear handoff and responsibility.

Delivery, Commissioning & Operations Readiness

• Define configuration, documentation, and automation standards (IPAM, addressing, routing, access control) using Git-based / infrastructure-as-code workflows.

• Support construction and commissioning milestones: testing, validation, and turnover readiness for internal and shared-service networks.

• Establish observability standards and operational runbooks for troubleshooting and incident response.

Vendor Strategy & Standardization

• Lead technical evaluation and selection of network OEMs, firewall/security, Wi-Fi/access, and cabling/optics partners for Montera-owned systems.

• Drive standardization and cost-optimized BOM strategy aligned to availability, lead time, power, and operational risk.

• Own technical change control and vendor issue resolution through deployment and lifecycle support.

Requirements

Who You Are:

• Bachelor’s degree in Controls, Electrical, Mechanical, or Systems Engineering, or related field; Master’s degree in Controls, Electrical, Mechanical, or Systems Engineering, or a related field.

• 10+ years of experience designing and operating data center networks for hyperscale, mission-critical, or regulated environments.

• Direct experience with RIR/ARIN address application and justification, ASN/BGP, and enterprise IPAM at multi-site scale.

• Deep firewall, segmentation, and secure-remote-access expertise across both IT and OT environments, including OT environments such as BMS, SCADA, and DCIM, with IT/OT segmentation and IEC 62443 / Purdue-model familiarity.

• Proven experience defining single-tenant customer demarcation and data-access models in secure environments.

• Strong customer-facing capability: translating customer requirements into implementable designs and clear demarcation models.

• Network automation and configuration management using Git-based workflows, templating, and infrastructure-as-code.

Benefits

Why Join Montera?

At Montera, you’ll shape the next generation of digital infrastructure while being supported by a team that values integrity, collaboration, and long-term partnership. We’re a remote-first company that empowers our people with flexibility, ownership, and meaningful rewards.

Compensation:

At Montera, we believe great work starts with investing in great people. That is why we offer a competitive and thoughtful total compensation package designed to recognize the value each team member brings.

Our compensation ranges are informed by market data and aligned to job level and role. When making hiring and compensation decisions, we consider a variety of factors, including skills, experience, education, training, competencies, and overall business needs.

The reasonable compensation range for this role is $160,000 - $220,000 per year.

Our Benefits at a Glance:

• Comprehensive Health Coverage: We pay 90% of health premiums for employees and their dependents.
• Generous Time Off: Up to 8 weeks of paid time off per year, which includes holidays, PTO, and sick time.
• Parental Leave: Up to 8 weeks of paid time off after 6 months of employment.
• Financial Security: 401(k) plan with immediate eligibility, no vesting requirement, and employer match contributions up to 6%.
• Learning & Development Reimbursement: Up to $3,500 reimbursed annually for approved courses, certifications, conferences and professional development opportunities.
• Extra Support: Remote work stipend to help you stay connected.

At Montera, you’ll have the autonomy to do great work and the benefits to thrive personally and professionally.