Senior Network & Identity Security Engineer (TSaaS)

VITRONIC Machine Vision is the world's leading innovation driver for industrial image processing and automated traffic enforcement equipment. The Senior Network & Identity Security Engineer will support network connectivity and secure access for various systems, ensuring high availability and efficient communication between components.

Responsibilities:

• Support network connectivity for US TSaaS roadside systems, customer environments, staging/production environments, and support tools
• Configure, validate, and troubleshoot secure connectivity paths, including VPN/IPSec, routing, firewall policy, DNS, NAT, application gateway, reverse-proxy, and certificate-dependent access paths
• Validate end-to-end communication between field equipment, application environments, monitoring systems, customer-facing service components, and external integration points
• Support production incident response when network or access issues affect service availability, evidence flow, monitoring, or customer-facing workflows
• Coordinate with cloud and security teams on IAM-related access dependencies, privileged access paths, service accounts, break-glass access, and access logging
• Maintain network diagrams, access path documentation, IP plans, firewall dependencies, certificate dependencies, IAM/access notes, and troubleshooting records
• Work with Implementation / Rollout Engineers to confirm network readiness before handover into operations
• Work with Service Engineers to separate network issues from hardware, power, router, cabling, signal, or field-condition issues
• Help define repeatable network readiness checks for rollout, staging validation, and production support

Requirements:

• Degree in Information Technology, Computer Networking, Engineering, or equivalent practical experience
• Experience with enterprise network infrastructure and secure connectivity, including LAN/WAN, routing, switching, firewall policy, VPN/IPSec or similar remote-access technologies, DNS, NAT, certificate-dependent access paths, and troubleshooting across distributed field sites and cloud-connected environments
• Working knowledge of IAM-related access patterns that affect network and system connectivity, including user access, service accounts, least-privilege access, privileged access paths, break-glass access, and access logging
• Hands-on troubleshooting experience with routers, secure access paths, hybrid network environments, application gateways, reverse proxies, and production service connectivity
• Ability to validate end-to-end communication paths between field equipment, application environments, monitoring systems, customer-facing service components, and external integration points
• Experience supporting systems where uptime, customer impact, secure access control, auditability, and regulated data handling matter
• Strong documentation habits, including network diagrams, access paths, IP plans, routing notes, firewall dependencies, certificate dependencies, IAM/access dependencies, and troubleshooting records
• Ability to work with field teams, support teams, cloud teams, security teams, vendors, and customer-facing stakeholders
• Ability to support urgent issues outside normal business hours when service availability is affected
• Experience with LTE/cellular routers, industrial networks, ITS systems, public safety systems, or distributed field technology
• Experience with hybrid cloud connectivity, site-to-site VPN, secure remote support models, reverse proxies, application gateways, certificate lifecycle, and monitoring tools
• Experience working with municipal, government, law enforcement, or regulated customer environments
• Familiarity with CJIS or similar public-sector security requirements