Manager, Network Engineering (L2/L3)
Leads the network engineering discipline at a digital infrastructure investment firm, owning design and build of L2/L3 networks across data center campuses — EVPN/VXLAN fabric, IP routing, SD-WAN, firewalls, site-to-site VPN, Wi-Fi/Private 5G, and OT networks — from pre-construction design through commissioning. A hands-on player-coach role managing a three-person specialist team, based in Denver
- Compensation
- $175K–$200K / yr
- Location
- Denver, Colorado, United States; Seattle, Washington, United States
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Full time
- Experience
- 3+ years
- Category
- Network engineering
- Posted
Skills
Must have
- 10+ years in network engineering — L2/L3 design, routing and switching, network security, and build delivery — with substantial data center experience
- 3+ years directly managing a small technical team, plus leading integrators, vendors, and projects delivering network infrastructure
- Deep hands-on IP routing and switching expertise — VLANs, trunking, link aggregation, first-hop redundancy, VRFs, IP addressing plans, dynamic routing (OSPF, BGP, IS-IS)
- Hands-on VXLAN experience — designing, deploying, and troubleshooting leaf-spine EVPN/VXLAN fabrics in a production data center environment
- Deep hands-on secure connectivity experience — site-to-site VPNs (IPsec/IKEv2), next-generation firewalls, micro-segmentation, out-of-band management
- OT networking experience — segmented networks carrying BMS, SCADA/EPMS, DCIM, access control; knowledge of Modbus TCP, BACnet/IP, DNP3, OPC UA
- Experience evaluating metro connectivity and carrier DIA, plus SD-WAN and enterprise wireless familiarity (Wi-Fi 6/6E, mesh)
- Experience authoring network standards, policies, and configuration baselines, and defining performance monitoring (SNMP, streaming telemetry, flow, syslog, synthetic testing)
- Working fluency with the physical layer — structured cabling, MDF/IDF, rack elevations, fiber pathways
- Strong vendor/integrator management and proficiency with design/documentation tools (Visio, AutoCAD, IPAM/DDI, configuration management tooling)
- Bachelor's degree in Engineering, Computer Science, Telecommunications, IT, or related field, or equivalent practical experience
Nice to have
- CCNP Enterprise (or equivalent professional-level routing/switching certification), or progress toward it
- Network security certifications (Palo Alto PCNSE, Fortinet NSE, CCNP Security) and OT/ICS credentials (ISA/IEC 62443, GICSP)
- PMP or wireless certifications (CWNA/CWDP)
- Hands-on experience with Arista switching and Arista CloudVision
- Experience delivering network infrastructure for hyperscale/cloud campuses or large capital projects across multiple concurrent sites
- Experience designing OT network segmentation to a recognized framework (Purdue model, ISA/IEC 62443, NIST SP 800-82)
- Experience with network automation and infrastructure-as-code (Ansible, Python, Git) and monitoring/observability platforms
- Experience establishing network standards, SOPs, and QA/QC programs, and driving commissioning turnover into a 24×7 NOC
Full description
Location: Denver, CO; Seattle, WA
Job Type: Full-Time
Department: Tract Capital Management — Site Communications & Network Infrastructure
Reports To: VP, Site Communications & Network Infrastructure
Company Overview
Tract Capital adopts a unique approach to digital infrastructure investment. Leveraging experience and strategic insights honed over three decades of creating successful companies in the space, we excel in nurturing and advancing leading-edge digital infrastructure enterprises. Our team of specialized experts are united by a singular purpose: to support the growth of digital infrastructure. Tract Capital goes beyond simple investment by acting as a strategic partner and catalyst for innovation within the sector. We ensure our engagements not only generate strong financial results but also develop essential digital infrastructure to meet growing demands.
Position Overview
The Manager, Network Engineering leads the active network engineering discipline within Tract Capital’s Site Communications & Network Infrastructure organization, owning the pre-construction design and construction-phase delivery of all Layer 2 / Layer 3 network infrastructure across the company’s data center campuses.
It is accountable for the design and build of campus LAN and EVPN/VXLAN fabric, IP routing and addressing, segmentation, SD-WAN and WAN edge, firewall policy, metro and carrier connectivity, site-to-site VPN, mesh Wi-Fi and Private 5G, and the OT network layer carrying BMS, SCADA/EPMS, DCIM, and physical security systems — along with the network standards, policy set, performance-monitoring definition, and as-built record for every campus.
Reporting to the VP, Site Communications & Network Infrastructure, this leader manages a team that includes the Senior Network Engineer, the Wireless & Private 5G Engineer, and the Network Commissioning Technician, and works shoulder-to-shoulder with the peer Managers of Inside Plant (ISP) and Outside Plant (OSP) Engineering — Network Engineering delivers the active L2/L3 layer riding on the physical plant those teams build, so the three disciplines are planned, sequenced, and commissioned as one campus package.
The Manager translates design intent into buildable, secure, schedule-certain network packages and works with the Network Operations Center and Operations leadership to turn commissioned environments over cleanly. This is a Design & Build role — 24×7 monitoring, incident response, and moves/adds/changes are owned by the separate Daily Operations organization.
This is a player-coach leadership role anchored in hands-on IP networking: the Manager sets direction and standards, holds genuine routing, switching, and network security depth, and holds vendors accountable for quality and schedule — while leaning on the team’s specialists in wireless/Private 5G and commissioning.