Principal Network Engineer

About Montera 

At Montera, we’re building the future of digital infrastructure. Founder-led with $1.5B backed by Stonepeak, Montera is driven by a future-focused vision: to develop and operate hyperscale data centers essential for tomorrow's technology. Our mission is to deliver strategically located, hyperscale data centers designed for speed, reliability, and scalability. Backed by decades of experience in design, construction, and operations, we don’t just build—we execute with purpose. 

Our Values 

• Client First Alignment: We align every solution to our clients’ goals. 

• Speed with Certainty: Velocity matters. We deliver with urgency and precision. 

• Operational Excellence: Decades of experience drive our high standards. 

• Safety & Integrity: Safety is non-negotiable. We lead with integrity and transparency. 

• Ownership Mentality: We think like owners, because we are. 

The Opportunity 

Montera is seeking a Principal Network Engineer to owns the architecture, security, and governance of all Montera-operated networking — spanning corporate IT, critical-infrastructure OT (BMS, SCADA, DCIM, life-safety), administrative, guest, and Wi-Fi networks — and the secure demarcation to customer-managed fabrics. This role owns Montera’s public IP strategy: ARIN/RIR address application and justification, ASN and BGP strategy, IPAM, and the governance of all network allocations, firewalls, and security policy across the fleet. 

The role works hand-in-glove with the Principal Controls Engineer. Controls defines the data — the points, tags, and exposure scope Montera surfaces to itself and to the customer; Network delivers the secure transport, segmentation, and demarcation that lets that data be consumed without compromising OT. Montera facilities are single-tenant — one customer per building or campus — so the customer data-access model (what the customer sees, how they reach it, and where the trust boundary sits) is defined with that single customer and governed jointly by these two roles. Neither can deliver it alone. 

What You'll Do 

Internal Network Architecture (IT / OT / Guest) 

• Own and standardize all Montera-operated networks: corporate IT, OT controls (BMS/SCADA/DCIM), life-safety interfaces, administrative, guest, and Wi-Fi. 

• Define segmentation, zoning, and isolation strategy across IT, OT, and customer domains (e.g., Purdue-model / IEC 62443 alignment for OT). 

• Establish redundancy and survivability standards for mission-critical internal services, monitoring transport, and management networks. 

IP Strategy, Addressing & Allocation Governance 

• Own the public IP strategy: ARIN/RIR address-space application and justification, ASN acquisition, and BGP/peering/transit strategy for Montera-operated services. 

• Own IPAM and the governance of all address allocations across sites — internal, OT, shared services, and Montera-side customer handoff ranges. 

• Define addressing, routing, and DNS standards that scale cleanly across a multi-site portfolio. 

Security, Firewalls & Critical Infrastructure Networking 

• Own firewall architecture and policy, secure remote-access patterns, role-based access control, micro-segmentation, and audit logging across IT and OT. 

• Design high-security architectures for OT and critical-infrastructure systems; partner with controls, cybersecurity, and operations on baseline hardening, monitoring, and incident-response workflows. 

• Lead risk reviews of exposure paths between customer, IT, and OT domains and drive mitigations through design and governance (supporting Montera’s ISO 27001 posture). 

Customer Data Access & Demarcation 

• Executed jointly with the Principal Controls Engineer. 

• Translate the controls-defined data-exposure scope into the secure delivery path: DMZ/broker placement, read-only least-privilege boundaries, firewall policy, and the customer-facing network demarcation for OT/telemetry data. 

• Define demarcation models, handoff points, and clear IT/OT/customer responsibility boundaries between Montera-operated shared infrastructure and customer-managed fabrics. 

• Provision the secure network path for AI optimization platforms (e.g., Phaidra) consuming Montera telemetry — edge, on-prem, or cloud — in partnership with the Controls Engineer. 

• Support customer technical reviews and acceptance testing for data-access and connectivity commitments tied to leases and SLAs. 

Customer AI & Compute Networking Enablement 

• Engage the customer directly to capture AI/compute networking requirements: fabric type, bandwidth, latency, scale, storage connectivity, and operational model. 

• Translate customer requirements into deployable designs within facility constraints (space, pathways, power/cooling, operational standards). 

• Define the demarcation between Montera-operated shared infrastructure and customer-managed compute/storage fabrics, with clear handoff and responsibility. 

Delivery, Commissioning & Operations Readiness 

• Define configuration, documentation, and automation standards (IPAM, addressing, routing, access control) using Git-based / infrastructure-as-code workflows. 

• Support construction and commissioning milestones: testing, validation, and turnover readiness for internal and shared-service networks. 

• Establish observability standards and operational runbooks for troubleshooting and incident response. 

Vendor Strategy & Standardization 

• Lead technical evaluation and selection of network OEMs, firewall/security, Wi-Fi/access, and cabling/optics partners for Montera-owned systems. 

• Drive standardization and cost-optimized BOM strategy aligned to availability, lead time, power, and operational risk. 

• Own technical change control and vendor issue resolution through deployment and lifecycle support. 

About Montera At Montera, we’re building the future of digital infrastructure. Founder-led with $1.5B backed by Stonepeak, Montera is driven by a future-focused vision: to develop ...

Who You Are: 

• Bachelor’s degree in Controls, Electrical, Mechanical, or Systems Engineering, or related field (Master’s preferred). 

• 10+ years of experience designing and operating data center networks for hyperscale, mission-critical, or regulated environments. 

• Direct experience with RIR/ARIN address application and justification, ASN/BGP, and enterprise IPAM at multi-site scale. 

• Deep firewall, segmentation, and secure-remote-access expertise across both IT and OT (BMS/SCADA/DCIM), with IT/OT segmentation and IEC 62443 / Purdue-model familiarity. 

• Proven experience defining single-tenant customer demarcation and data-access models in secure environments. 

• Strong customer-facing capability: translating requirements into implementable designs and clear demarcation models. 

• Network automation and configuration management (Git-based workflows, templating, infrastructure-as-code). 

About Montera 

At Montera, we’re building the future of digital infrastructure. Founder-led with $1.5B backed by Stonepeak, Montera is driven by a future-focused vision: to develop and operate hyperscale data centers essential for tomorrow's technology. Our mission is to deliver strategically located, hyperscale data centers designed for speed, reliability, and scalability. Backed by decades of experience in design, construction, and operations, we don’t just build—we execute with purpose. 

Our Values 

• Client First Alignment: We align every solution to our clients’ goals. 

• Speed with Certainty: Velocity matters. We deliver with urgency and precision. 

• Operational Excellence: Decades of experience drive our high standards. 

• Safety & Integrity: Safety is non-negotiable. We lead with integrity and transparency. 

• Ownership Mentality: We think like owners, because we are. 

The Opportunity 

Montera is seeking a Principal Network Engineer to owns the architecture, security, and governance of all Montera-operated networking — spanning corporate IT, critical-infrastructure OT (BMS, SCADA, DCIM, life-safety), administrative, guest, and Wi-Fi networks — and the secure demarcation to customer-managed fabrics. This role owns Montera’s public IP strategy: ARIN/RIR address application and justification, ASN and BGP strategy, IPAM, and the governance of all network allocations, firewalls, and security policy across the fleet. 

The role works hand-in-glove with the Principal Controls Engineer. Controls defines the data — the points, tags, and exposure scope Montera surfaces to itself and to the customer; Network delivers the secure transport, segmentation, and demarcation that lets that data be consumed without compromising OT. Montera facilities are single-tenant — one customer per building or campus — so the customer data-access model (what the customer sees, how they reach it, and where the trust boundary sits) is defined with that single customer and governed jointly by these two roles. Neither can deliver it alone. 

What You'll Do 

Internal Network Architecture (IT / OT / Guest) 

• Own and standardize all Montera-operated networks: corporate IT, OT controls (BMS/SCADA/DCIM), life-safety interfaces, administrative, guest, and Wi-Fi. 

• Define segmentation, zoning, and isolation strategy across IT, OT, and customer domains (e.g., Purdue-model / IEC 62443 alignment for OT). 

• Establish redundancy and survivability standards for mission-critical internal services, monitoring transport, and management networks. 

IP Strategy, Addressing & Allocation Governance 

• Own the public IP strategy: ARIN/RIR address-space application and justification, ASN acquisition, and BGP/peering/transit strategy for Montera-operated services. 

• Own IPAM and the governance of all address allocations across sites — internal, OT, shared services, and Montera-side customer handoff ranges. 

• Define addressing, routing, and DNS standards that scale cleanly across a multi-site portfolio. 

Security, Firewalls & Critical Infrastructure Networking 

• Own firewall architecture and policy, secure remote-access patterns, role-based access control, micro-segmentation, and audit logging across IT and OT. 

• Design high-security architectures for OT and critical-infrastructure systems; partner with controls, cybersecurity, and operations on baseline hardening, monitoring, and incident-response workflows. 

• Lead risk reviews of exposure paths between customer, IT, and OT domains and drive mitigations through design and governance (supporting Montera’s ISO 27001 posture). 

Customer Data Access & Demarcation 

• Executed jointly with the Principal Controls Engineer. 

• Translate the controls-defined data-exposure scope into the secure delivery path: DMZ/broker placement, read-only least-privilege boundaries, firewall policy, and the customer-facing network demarcation for OT/telemetry data. 

• Define demarcation models, handoff points, and clear IT/OT/customer responsibility boundaries between Montera-operated shared infrastructure and customer-managed fabrics. 

• Provision the secure network path for AI optimization platforms (e.g., Phaidra) consuming Montera telemetry — edge, on-prem, or cloud — in partnership with the Controls Engineer. 

• Support customer technical reviews and acceptance testing for data-access and connectivity commitments tied to leases and SLAs. 

Customer AI & Compute Networking Enablement 

• Engage the customer directly to capture AI/compute networking requirements: fabric type, bandwidth, latency, scale, storage connectivity, and operational model. 

• Translate customer requirements into deployable designs within facility constraints (space, pathways, power/cooling, operational standards). 

• Define the demarcation between Montera-operated shared infrastructure and customer-managed compute/storage fabrics, with clear handoff and responsibility. 

Delivery, Commissioning & Operations Readiness 

• Define configuration, documentation, and automation standards (IPAM, addressing, routing, access control) using Git-based / infrastructure-as-code workflows. 

• Support construction and commissioning milestones: testing, validation, and turnover readiness for internal and shared-service networks. 

• Establish observability standards and operational runbooks for troubleshooting and incident response. 

Vendor Strategy & Standardization 

• Lead technical evaluation and selection of network OEMs, firewall/security, Wi-Fi/access, and cabling/optics partners for Montera-owned systems. 

• Drive standardization and cost-optimized BOM strategy aligned to availability, lead time, power, and operational risk. 

• Own technical change control and vendor issue resolution through deployment and lifecycle support. 

About Montera At Montera, we’re building the future of digital infrastructure. Founder-led with $1.5B backed by Stonepeak, Montera is driven by a future-focused vision: to develop ...

Who You Are: 

• Bachelor’s degree in Controls, Electrical, Mechanical, or Systems Engineering, or related field (Master’s preferred). 

• 10+ years of experience designing and operating data center networks for hyperscale, mission-critical, or regulated environments. 

• Direct experience with RIR/ARIN address application and justification, ASN/BGP, and enterprise IPAM at multi-site scale. 

• Deep firewall, segmentation, and secure-remote-access expertise across both IT and OT (BMS/SCADA/DCIM), with IT/OT segmentation and IEC 62443 / Purdue-model familiarity. 

• Proven experience defining single-tenant customer demarcation and data-access models in secure environments. 

• Strong customer-facing capability: translating requirements into implementable designs and clear demarcation models. 

• Network automation and configuration management (Git-based workflows, templating, infrastructure-as-code).