ABOUT US At Arbor Energy & Resources Corporation ("Arbor Energy"), we’re creating technology to power our lives while protecting the planet that sustains them.  Our advanced power systems deliver clean, reliable baseload electricity with zero operating emissions—modular, fuel-flexible, and engineered for the realities of today’s energy demand. At the core is a supercritical CO₂ turbine with integrated carbon capture, designed to bring carbon-neutral power online quickly at meaningful scale.  Our team includes aerospace engineers, combustion experts, and systems thinkers with a shared goal: to build technology worthy of the world we want to live in. While many of us began our journeys looking to the stars, we’re applying that expertise here at home to deliver dependable, emission-free baseload power and a future of lasting abundance.   If you share our values and are drawn to rigorous work with lasting impact, we’d love to learn more about you. Come build what the future will run on. Steward our planet: We build for tomorrow, ensuring every bolt we tighten and every hand we lend leaves our environment stronger than we found it. Lead with Love: We champion the success of our people, partners, and planet, nurturing excellence through camaraderie and rigor. Explore the Uncharted: We embrace the unknown with curiosity, using courage and discipline to transform uncertainty into opportunity. ROLE OVERVIEW We're seeking a Network and Systems Engineer to own the deployment, performance, and scalability of our network infrastructure across current operations and upcoming facility expansions. You'll architect and execute network solutions, manage enterprise identity across Azure and Google Workspace, and serve as the technical authority on all infrastructure and security decisions. This is a hands-on role that requires both strategic thinking and tactical execution. The ideal candidate thrives in fast-paced, hardware-focused environments and operates with a high degree of autonomy. This is an onsite opportunity in our El Segundo, CA office.  RESPONSIBILITIES Network Architecture & Infrastructure * Design and execute enterprise and mission-critical network architectures across offices, test facilities, and remote environments, with deep hands-on expertise in routing protocols (BGP, OSPF), L2/L3 design, VPC/VDC, Spanning Tree, VRF, VTP, VLANs, VPNs, site-to-site connectivity, and secure tunneling architectures. * Lead end-to-end infrastructure buildout for our new headquarters and manufacturing facilities — scoping, installing, and validating physical cabling, switches, firewalls, and wireless security appliances in collaboration with contractors. * Implement QoS policies to prioritize critical data streams; monitor performance, proactively identify bottlenecks, and resolve complex connectivity issues. * Design and maintain scalable, resilient network infrastructure capable of supporting high-throughput automated operations as we scale. MSP Governance & Enterprise Systems Oversight * Serve as the primary technical authority and escalation path for our outsourced IT partner, holding them accountable to SLAs covering tier-1/tier-2 helpdesk, device procurement, provisioning, and end-user onboarding — this role owns the outcomes, not the tickets. * Define, audit, and enforce configuration standards across enterprise systems managed by the MSP: Windows Server, Linux (RHEL, Ubuntu, CentOS), Active Directory, DNS/DHCP, hybrid cloud, and virtualization platforms (VMware / Hyper-V). * Govern identity and access management across Azure AD / Entra ID and Google Workspace, including SSO and MFA policies — you don't need to be a deep cloud sysadmin, but you need to own the standards and hold the MSP to them. * Oversee infrastructure lifecycle management: backup and DR strategies, endpoint policies, patching routines, and server provisioning — directing execution through the MSP rather than doing it yourself. OT, Data Pipelines & AI Infrastructure * Support secure integration of edge automation hardware, PLCs, SCADA, and data acquisition systems with backend infrastructure, maintaining strict isolation between corporate and testing environments. * Partner with software and systems teams on data ingestion pipelines, telemetry infrastructure, and real-time monitoring dashboards. * Design network containment and isolation layers for AI tools and automated workflows to ensure data security and audibility. Security & Compliance * Partner with external compliance advisors and the MSP to implement and maintain network-level controls for NIST 800-171 and CMMC within a Zero Trust framework. * Manage transport-layer security and encryption standards (TLS, OpenSSL, SHA-256); coordinate system hardening and vulnerability assessments through the outsourced security team. * Develop and own security policies for endpoint management, VPN access, and data protection — setting the standard, not necessarily executing every control. REQUIREMENTS * 8+ years of experience in IT systems engineering or infrastructure roles * Deep expertise in network protocols and fundamentals: TCP/IP, VLANs, BGP, OSPF, MPLS, routing, switching, firewalls * Strong understanding of networking design models (L2/L3, VPC, VDC, Datacenter Zones, Spanning Tree, VRF, VTP, VLANs, and cabling) * Hands-on experience with at least one major cloud platform (AWS, Azure, or GCP) * Proven experience managing Windows Server, Linux (RHEL, Ubuntu, CentOS), and Active Directory environments * Strong knowledge of systems security, access control, hardening, and encryption protocols * Experience with identity and access management frameworks (Azure AD, Entra ID, Google Workspace, SSO/MFA) * Proficiency in scripting and automation using PowerShell, Bash, Python, or similar * Ability to work independently, make high-impact technical decisions, and lead projects from planning through execution * Strong documentation habits and ability to communicate technical concepts clearly to non-technical stakeholders PREFERRED QUALIFICATIONS * Familiarity with IEEE 1588 Precision Time Protocol (PTP) and experience designing or supporting time-synchronized network architectures for data acquisition, telemetry, industrial control, or distributed systems environments is preferred. * Experience with real-time data acquisition systems, time-series databases (QuestDB, InfluxDB), or industrial control environments * Familiarity with edge automation hardware (Opto22, PLCs) or industrial networking protocols * Background in regulated or compliance-driven environments (defense, aerospace, critical infrastructure) * Experience with monitoring and observability tools (Grafana, Prometheus, Datadog) * Certifications such as CCNP, CCIE, Network+, MCSE, Security+, or relevant industry credentials * Familiarity with NIST frameworks (800-171, 800-53) or CMMC standards * Experience with IaC tools like Terraform, Ansible, or similar configuration management platforms COMPENSATION & BENEFITS * Pre-IPO stock options * Medical, dental, and vision insurance (Arbor covers 90% for employees) * Basic life insurance fully covered * Health savings account (HSA) with matching * Flexible savings account (FSA) * Unlimited PTO   * 12+ company holidays, including Earth Day!   * 401(k) * Commuter benefits * Annual learning and development stipend * And more! Base Pay: $140,000 - $165,000 USD/year. The salary is subject to the applicant's skills, qualifications, experience, and geographic location. OUR COMMITMENT Arbor Energy is proud to be an equal opportunity employer. We evaluate qualified applicants without regard to race, religion, national origin, gender identity or expression, sexual orientation, age, marital or veteran status, disability, or any other protected characteristic under applicable law. Solving global energy challenges requires a wide range of perspectives and experiences, and we are committed to building a team that reflects the world we serve. Our hiring process is designed to be accessible, fair, and focused on the work that matters most for this role. Reasonable accommodations are available throughout the hiring process and employment—please let us know if you need one.