Principal Network Engineer

Key Responsibilities (What you’ll do)

• Network Architecture and Engineering
• Design, deploy, administer, andmaintainthe enterprise network across all sites, including routing, switching, wireless, network access control, and IP address management.
• Own corporate site interconnectivity, including wide area network and SD-WAN topology, carrier and circuitselection, redundancy and failover design, and inter-site capacity planning.
• Design and administer data center and server room networking, including core and top-of-rack switching, high-availability topologies, and out-of-band management, and maintain dedicated connectivity to cloud platforms, including private interconnects and virtual network routing, in coordination with the System Administration function.
• Network Security
• Own the design, administration, andrulelifecycle of enterprise firewalls, including policy standards, change review, periodic rule base review, and segmentation between corporate, laboratory, manufacturing, guest, and product environments.
• Design and administer DNS security, web and content filtering, intrusion prevention, and remote access, including site-to-site and client virtual private networking following zero trust principles.
• Develop forward-looking network security plans and roadmaps supporting the organization’s security maturityobjectives, in partnership with Information Security and under the direction of the Senior Director, Information Systems and Security.
• Facilities, Data Center, and Physical Security Infrastructure
• Plan, design, and execute network buildouts for new and expanded facilities, including low-voltage design, wireless surveys and validation, equipment specification, vendor coordination, and cutover planning.
• Own the network andsupportinginfrastructure for physical security systems, including access control and video surveillance, partnering with Facilities and Security on design and operational support.
• Maintainaccuratenetwork documentation, including topology diagrams, addressing schemes, circuit and vendor records, and as-built documentation for each facility.
• Reliability, Observability, and Operations
• Define and implement network monitoring, alerting, flow analysis, and performance reporting, and contribute network telemetry and dashboards to centralized reporting.
• Define service levelobjectives, alert thresholds, and escalation paths for network services supporting mission-critical systems.
• Serve as a senior technical responder for major network incidents, conduct root cause analysis, drivecorrectiveand preventive actions, andparticipatein an on-call rotation for after-hourssupport.
• Automation, Governance, and Standards
• Author andmaintainorganizational network standards for architecture, addressing, configuration baselines, firmwarelifecycle, andchange control, and drive adoption across sites.
• Identifyand automate manual network operational processes, including configuration backup, compliance validation, and reporting, using Python, PowerShell, or comparable languages.
• Serve as control owner for assigned IT controls, provide audit evidence, ensure network configurations and patching adhere to IT policies and applicable regulatory requirements, and support validation of network infrastructure under the HistoSonics Quality Management System.
• Technical Leadership and Collaboration
• Serve as the final internal escalationpoint for complex network issues and provide technical mentorshipand design review to System Administrators and IT Support Specialists.
• Serve as the primary Information Systems network resource to the AI and R&D Infrastructure team,providingarchitecture guidance, design review, and escalation support.
• Represent network infrastructure in architecture reviews, threat modeling, and change control, and advise Security, Data Privacy, Quality, and Regulatory stakeholders.
• Escalate cross-organizational governance conflicts, scope disputes, and resourcing trade-offs to the Senior Director, Information Systems and Security, and evaluate, recommend, and implement network hardware, circuits, and SaaS solutions to address business needs.