WireGuard VPN - Network Engineer (W2 Role)

Location: Remote, US + Travel

Mode: Contract

Job Description:- 

We are seeking a highly motivated Security/Network Engineer to manage, secure, and stabilize the industrial network infrastructure critical for the deployment of our manufacturing execution system

(MES) platform, This part-time role demands a pragmatic, hands-on approach combining deep expertise in network security with practical skills for on-site wireless and physical network

troubleshooting in factory environments. The engineer will ensure the reliability and security of data flow between IoT hardware, on-premise infrastructure, and cloud services as the company rapidly expands its client base.

Location

This is position based in the US, with availability required for periodic on-site visits to client manufacturing facilities for network deployment, troubleshooting, and support. Flexibility for occasional on-call response to urgent network or hardware issues is expected.

Responsibilities

Network Infrastructure; On-Site Support

• Design, deploy, and maintain robust industrial networks at client sites, focusing on reliable Wi-Fi coverage, device placement, and mitigating sources of interference (vibration, ultrasonic noise)

• Provide hands-on troubleshooting for complex, intermittent connectivity issues caused by physical factors in manufacturing environments

• Act as critical escalation point for on-site network and hardware failures

VPN; Secure Connectivity

• Lead deployment, configuration, and management of WireGuard VPN solutions to secure communication channels

• Establish and manage security policies across networking devices and endpoints, including industrial routers (Microtech router OS)

• Implement zero-trust concepts and configure network access lists and firewall rules

Identity & Endpoint Management

• Integrate corporate identity and access management solutions using Microsoft Entra ID

• Manage endpoint control via Windows Intune (MDM) to ensure security governance for internal and remote resources

Automation & Documentation

• Utilize Ansible to manage hardware inventory, network policies, and OS/firmware updates across remote client networks

• Develop and maintain comprehensive runbooks and simplified procedures for network deployment and troubleshooting to enable non-technical consultants

• Implement monitoring solutions for network performance with APIs for centralized telemetry visibility

Required Qualifications

• Network Engineering: Extensive experience designing, deploying, and troubleshooting enterprise or industrial-grade wireless and wired networks, including physical deployment and performance

diagnostics

• Security & VPN: Expert proficiency implementing modern network security solutions, including VPNs with specific expertise in WireGuard, access lists, and firewall rules

• Cloud Identity/Endpoints: Practical experience with Microsoft Entra ID and endpoint management using MDM or similar tooling

• Configuration Management: Strong experience with infrastructure automation tools, preferably Ansible, for managing remote Linux servers and devices

• Troubleshooting: Demonstrated ability to diagnose complex connectivity issues caused by physical factors in manufacturing environments (interference, vibration, suboptimal placement)

Nice to Have

• Experience conducting security audits and assessments of technical architecture, with ability to provide recommendations for improving overall security posture

• Prior experience providing on-call or rapid response support for network or hardware failures

• Familiarity with embedded devices or SBCs used for IoT sensor integration (Raspberry Pi, ESP32)

• Direct experience with industrial protocols such as MQTT or OPC/Modbus

• Exposure to manufacturing security or compliance standards (CMMC, ISO 27001, SOC2)

• Experience in consulting or high-growth environments requiring rigorous documentation standards.