Workplace Network Engineer

Legora Legora · Vertical AI · New York, NY · IT

This role is for a Workplace Network Engineer responsible for the network and connectivity estate across all Legora locations, ensuring sites are fast, secure, and connected. The role involves owning the reference design for LAN, Wi-Fi, WAN, segmentation, DNS/DHCP, and firewall policy, managing the Meraki Dashboard, operating the Tailscale zero-trust mesh, monitoring connectivity, planning network installs, managing vendor relationships, and partnering with IT Systems and Helpdesk teams. The company uses AI-native tools and AI-assisted automation.

What you'd actually do

  1. Own the reference design every site is rolled out from — LAN, Wi-Fi, WAN / SD-WAN, segmentation (VLANs), DNS / DHCP, and firewall policy — so each new office comes up the same proven way.
  2. Run the Meraki Dashboard as the single source of truth — configuration templates, firmware lifecycle, licensing and inventory, alerting, and capacity planning across all sites.
  3. Operate the Tailscale zero-trust mesh — ACLs, device posture, and access routing — alongside Information Security, who owns identity and the access policy itself.
  4. Monitor connectivity proactively and own uptime: catch degradation before users feel it, drive incidents to resolution, run root-cause analysis, and keep mean-time-to-recover falling.
  5. Plan and program-manage network installs and upgrades for new-site buildouts and refreshes — scope the design, order and stage hardware, and direct the on-site Workplace Technology Leads and cabling / ISP vendors who do the physical work, holding them to Legora’s acceptance tests.

Skills

Required

  • Network engineering
  • Network-focused IT infrastructure
  • Multi-site corporate network ownership
  • Cisco Meraki
  • Network fundamentals (L2/L3, IP addressing, routing, BGP, SD-WAN, VLANs, DNS/DHCP, QoS, firewall policy)
  • Packet-level troubleshooting (Wireshark)
  • Network architecture design
  • Network standards definition
  • API automation (Meraki API, Pulumi, Terraform)
  • Scripting
  • Incident management
  • Root cause analysis
  • Program management
  • Vendor management
  • Budget management

Nice to have

  • Cisco CCNP/CCIE level certification
  • Meraki CMNA/ECMS
  • Tailscale or comparable zero-trust network access (ZTNA)
  • Certificate/mTLS fundamentals
  • Office buildouts
  • Structured/low-voltage cabling
  • Physical security networking
  • AV networking
  • ITSM/service-desk platform operation
  • AI-assisted, agentic automation
  • Connectivity and SaaS-reachability monitoring (ThousandEyes, Catchpoint)

What the JD emphasized

  • 6+ years in network engineering or network-focused IT infrastructure, including owning a multi-site corporate network end to end as the final escalation point
  • Deep Cisco Meraki experience at multi-site scale
  • Vendor-agnostic command of network fundamentals
  • Able to walk us through a multi-site network you designed end to end
  • A standards-setter
  • Automation-minded
  • A calm operator under pressure
  • A program manager who delivers through others