SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Legora is an AI-native legal workspace trusted by 2,100+ customers across 80+ countries, including top law firms like Cleary Gottlieb, Goodwin, and Linklaters. The company has scaled to $200M+ ARR with teams across Europe, North America, and APAC.
As Workplace Network Engineer, you will own the network and connectivity infrastructure across all Legora office locations globally. You are the final escalation point for network operations, accountable for keeping every site fast, secure, and connected. You will set the network standards that the entire company is built upon, with Workplace Technology Leads at each site executing your designs and standards.
Key responsibilities include:
- Own the reference design for every site rollout: LAN, Wi-Fi, WAN/SD-WAN, VLAN segmentation, DNS/DHCP, and firewall policy, ensuring consistency across new offices.
- Operate Cisco Meraki Dashboard as the single source of truth for configuration templates, firmware lifecycle, licensing, inventory, alerting, and capacity planning across all sites.
- Operate the Tailscale zero-trust mesh network, managing ACLs, device posture, and access routing in partnership with Information Security.
- Monitor connectivity proactively and own uptime SLAs; catch degradation before users experience it, drive incident resolution, perform root-cause analysis, and continuously reduce mean-time-to-recover.
- Plan and program-manage network installs and upgrades for new-site buildouts and refreshes, including design scoping, hardware procurement and staging, and directing on-site teams and vendors.
- Manage ISP, circuit, and connectivity-vendor relationships including procurement, contracts, SLAs, escalations, and network spend forecasting with Finance.
- Partner with IT Systems and Helpdesk teams on Tier-2/Tier-3 network escalations and maintain comprehensive documentation of the network estate.
The device fleet is overwhelmingly Apple, so deep familiarity with macOS networking nuances is essential. You will work from the Union Square office in New York, designed for ambitious builders, with company-provided lunch daily.
Requirements:
- 6+ years in network engineering or network-focused IT infrastructure, with direct experience owning a multi-site corporate network end-to-end as the final escalation point (no senior network engineer above you). For Staff-level candidates, ~10+ years with a track record of defining network architecture across multi-site organizations.
- Hands-on experience supporting and troubleshooting networking for Apple-heavy device fleets, including macOS networking nuances.
- Deep Cisco Meraki experience at multi-site scale; understand what the Dashboard abstracts and can design/reason about routing, segmentation, and RF fundamentals. Fluency with the GUI is assumed; the job requires understanding the underlying architecture.
- Vendor-agnostic command of network fundamentals: L2/L3 boundaries, IP addressing and subnetting (IPAM), routing including BGP with ISPs, dual-circuit/SD-WAN failover, VLAN segmentation, DNS/DHCP, QoS, firewall policy, and packet-level troubleshooting (e.g., Wireshark).
- Ability to walk through a multi-site network you designed end-to-end, explaining trade-offs, engineered failure modes, and cutover/migration execution without business downtime.
- Standards-setter mindset: prefer defining one blueprint every site copies over improvising each office; continuously improve buildout processes.
- Automation-minded: comfortable using Meraki API, Pulumi, Terraform, and scripting to manage network as code rather than manual dashboard configuration.
- Calm operator under pressure: methodical, communicative, and relentless about root cause analysis, not just quick fixes.
- Program manager who delivers through others: comfortable owning timelines, vendors, budgets, and getting work done through on-site teams you don't directly manage.
Nice-to-have qualifications:
- Cisco CCNP/CCIE certification or demonstrably equivalent expertise (CCNA alone is below the bar; Meraki CMNA/ECMS a plus).
- Production experience operating Tailscale or comparable zero-trust network access (ZTNA) and certificate/mTLS fundamentals.
- Office buildout and structured/low-voltage cabling experience; commissioning networked building systems and coordinating installers.
- Physical security and AV networking experience (cameras, access control like Verkada, conferencing systems like Neat/Zoom).
- Comfort with ITSM/service-desk platforms and AI-assisted agentic automation (Legora uses Serval).
- Connectivity and SaaS-reachability monitoring across sites using synthetic/path monitoring (ThousandEyes, Catchpoint), multi-site NMS (Auvik, PRTG, Datadog), and SNMP/syslog telemetry.
- Wi-Fi design and validation tooling (RF surveys, heat-mapping with Ekahau or Hamina).
- Experience with Meraki, Tailscale, Neat, Zoom, Verkada, Okta, and 1Password.
