> Markdown version of [/jobs/ext/4639037-senior-it-network-engineer](https://www.wearedevelopers.com/jobs/ext/4639037-senior-it-network-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior IT & Network Engineer - **Company:** ChargePoint, Inc. - **Location:** Campbell, CA, United States - **Experience:** Expert - **Salary:** $135,000 - $178,250 - **Contract:** Permanent contract - **Skills:** IEEE 802.1X, Microsoft Windows, Application Programming Interfaces (APIs), Amazon Web Services, Microsoft Azure, Bash Shell, Cloud Computing, Cyber Security, Information Systems, System Configuration, Data Governance, Dynamic Host Configuration Protocol, Domain Name System (DNS), Identity and Access Management, Internet Protocol Security (IP SEC), Virtual Private Networks (VPN), Python (Programming Language), Network Security, Microsoft Office, Network Architecture, Routing, Network Segmentation, Packet Analyzer, OpenID, Windows PowerShell, Azure Active Directory, Cloud Services, Security Assertion Markup Language (SAML), Tcpdump, Wireshark, Virtual Local Area Networks, Wireless Networks, Datadog, Scripting, Okta, Delivery Pipeline, Firewalls (Computer Science), Microsoft InTune, Information Technology, Deployment Automation, Palo Alto Networks, Apple Business Manager, Fortinet, Drift Detection, Restful APIs, Api Management, Cisco, SSL VPN - **Published:** November 8, 2026 - **Apply:** https://diversityjobs.com/career/18870976/Senior-It-Network-Engineer-California-Campbell ## About the Role * Bachelor's degree in Computer Science, Information Systems, Network Engineering, or equivalent practical engineering experience. * 5-8 years of hands-on experience in IT systems engineering, cloud infrastructure, and enterprise network engineering. * Solid hands-on network engineering experience: enterprise routing and switching (Cisco, Meraki, Arista), 802.1X enterprise wireless (WPA-Enterprise, RADIUS/EAP-TLS), and VLAN micro-segmentation. * Demonstrated experience configuring and maintaining Next-Generation Firewalls (Palo Alto Networks PAN-OS, Fortinet FortiOS) and high-throughput IPsec/SSL VPN tunnels. * Advanced engineering expertise with enterprise identity architectures: Okta (SSO, MFA, LCM, Workflows, APIs) and Microsoft Entra ID (Conditional Access, PIM, hybrid directory sync). * Proven track record architecting modern MDM/UEM solutions: Microsoft Intune (Windows Autopilot, custom ADMX, compliance policies) and Kandji(macOS scripting, custom profiles, zero-touch deployment). * Proficiency in scripting, automation, and diagnostics using PowerShell, Python, or Bash, Microsoft Graph/REST APIs, and packet analysis tools (Wireshark, tcpdump). * Must be available and committed to working full-time on-site (5 days per week) at ChargePoint's Campbell, CA headquarters. * Relevant engineering certifications such as Okta Certified Consultant/Administrator, Microsoft 365 Certified: Enterprise Administrator Expert, CCNP, or PCNSE (good to have). * Experience with cloud networking (AWS/Azure), IoT/lab testbeds, and compliance frameworks such as SOC 2 or ISO 27001 (good to have). ## Description In this hands-on engineering role, you will replace manual administrative overhead with scalable code and automated workflows. You will build zero-touch provisioning pipelines across macOS and Windows fleets (Kandji, Intune, Autopilot), leverage APIs (Microsoft Graph, Okta Workflows/APIs) to automate lifecycle and access flows, and engineer robust zero-trust conditional access policies. In parallel, you will engineer campus network environments, MDF/IDF infrastructure, and partner with other department teams to design dedicated, secure network fabrics for charging station testing and validation. Operating 100% on-site at Campbell HQ, you will serve as the principal technical escalation and engineering authority for critical identity, endpoint, and network infrastructure. You will bridge software-defined systems automation with physical hardware and campus networking, ensuring ChargePoint's enterprise infrastructure is secure, observable, and built for rapid global scale. What You Will Bring to ChargePoint * Design, configure, and maintain enterprise campus network infrastructure, including core routing, multi-layer switching, and high-density 802.1X wireless (Cisco, Meraki, Aruba) across Campbell HQ and engineering test facilities. * Engineer and harden Next-Generation Firewalls (Palo Alto Networks, Fortinet), architecting micro-segmentation, zone-based security policies, IPsec site-to-site tunnels, and client VPN solutions. * Partner with software, hardware, and embedded engineering teams to deploy isolated network segments, test racks, and IoT fabrics for EV charging station hardware-in-the-loop (HIL) validation. * Oversee campus physical and core network infrastructure, including MDF/IDF room architecture, structured cabling, UPS power systems, DNS/DHCP/IPAM, and 802.1X NAC. * Engineer and automate enterprise identity platforms, configuring Okta and Microsoft Entra ID for SAML/OIDC SSO, SCIM provisioning, dynamic groups, and Privileged Identity Management (PIM). * Engineer modern MDM and endpoint architectures across macOS (Kandji) and Windows (Microsoft Intune), building automated zero-touch deployment pipelines (Autopilot, Apple Business Manager), custom profiles, and compliance baselines. * Build custom automations and API integrations using PowerShell, Python, Bash, and the Microsoft Graph and Okta REST APIs to automate workforce lifecycles, configuration drift detection, and reporting. * Architect and manage the Microsoft 365 cloud ecosystem, engineering collaboration services, data governance, advanced threat protection (Defender for Endpoint/Office 365), and telemetry. * Instrument observability across systems and network infrastructure (Datadog, Google SecOps), engineering proactive telemetry, and serving as Tier-3 escalation authority for complex systems and network incidents.