SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
ICEYE is the world leader in sovereign intelligence from space, operating the world's largest and most advanced SAR (synthetic aperture radar) satellite constellation. The company serves defense, intelligence, environmental monitoring, insurance, and emergency management sectors globally, with over 1,000 employees across Europe, North America, the Middle East, and Asia-Pacific.
As a Network Engineer, you will help build, maintain, and safeguard the core network infrastructure connecting ICEYE's global ground stations, satellite data pipelines, and international offices. You will work closely with cross-functional IT and security teams to champion modern connectivity, combining enterprise hardware with Palo Alto Prisma, Zero Trust architecture, and high-performance overlay networks.
Your day-to-day responsibilities include:
- Deploy, configure, and maintain enterprise network devices (switches, routers, firewalls, and access points) across ICEYE's Espoo headquarters, international sites, and data center facilities
- Administer and maintain Next-Generation Firewalls and cloud-delivered security solutions, focusing on Palo Alto Networks and Prisma Access
- Implement, support, and audit Zero Trust Network Access (ZTNA) policies, network microsegmentation, and modern remote-access workflows
- Manage and troubleshoot secure transport and tunneling protocols, including enterprise IPsec/SSL VPNs and WireGuard-based connectivity solutions
- Proactively monitor network performance, link health, and system availability to detect and resolve bottlenecks
- Investigate and resolve Tier 2/3 network incidents and service requests across global offices
- Maintain accurate network topology diagrams, rack elevations, IP addressing schemes, and standard operating documentation
- Travel up to 2 times per month for new site setup and existing site management
The role reports to the IT Infrastructure Lead and is permanent with a hybrid workplace model in Espoo. Employment is subject to applicable security screening, including SUPO where required.
REQUIREMENTS:
Must haves:
- 3+ years of hands-on experience administering enterprise wired and wireless network environments (equivalent to CCNA level or working toward CCNP)
- Practical experience configuring and operating enterprise switches and routers (e.g., Cisco IOS, Juniper JUNOS)
- Hands-on experience administering Next-Generation Firewalls with practical exposure to Palo Alto Networks
- Solid understanding of core networking protocols (TCP/IP, VLANs, subnetting, DNS/DHCP) and dynamic routing (OSPF, BGP fundamentals)
- Practical understanding of Zero Trust Network Access (ZTNA) principles, least-privilege network segmentation, and identity-aware access controls (802.1X, RADIUS)
- Experience configuring and troubleshooting VPN technologies (IPsec site-to-site, SSL VPN, or WireGuard)
- Pragmatic problem-solving skills with a collaborative, service-minded approach to resolving technical incidents
- Willingness to travel up to 2 times per month
Nice to haves:
- Direct hands-on experience with Palo Alto Prisma Access, Prisma SD-WAN, or broader SASE architectures
- Familiarity with modern overlay or mesh networking technologies (e.g., WireGuard implementations, Tailscale, NetBird)
- Foundational knowledge of public cloud networking architectures (e.g., AWS VPCs, Azure VNets, Transit Gateways)
- Basic scripting skills (Python, Bash) for routine task automation and configuration audits
- Familiarity with Infrastructure as Code (Ansible, Terraform)
- Relevant industry certifications (e.g., CCNA, PCNSA/PCNSE, Network+)
