Senior IT and Network Engineer

Discover what it's like to help build the fueling network of the future — check out our Engineering Blog

Reports To

Manager, IT & Network

What You Will Be Doing

As a Senior IT and Network Engineer, you will engineer, automate, and scale ChargePoint's global workforce systems and campus network infrastructure from our Campbell, California headquarters. You will operate at the intersection of modern systems engineering and enterprise networking—architecting automated endpoint management pipelines, engineering enterprise identity and access platforms (Okta, Microsoft Entra ID), and designing high-performance, resilient campus network and firewall fabrics.

In this hands-on engineering role, you will replace manual administrative overhead with scalable code and automated workflows. You will build zero-touch provisioning pipelines across macOS and Windows fleets (Kandji, Intune, Autopilot), leverage APIs (Microsoft Graph, Okta Workflows/APIs) to automate lifecycle and access flows, and engineer robust zero-trust conditional access policies. In parallel, you will engineer campus network environments, MDF/IDF infrastructure, and partner with other department teams to design dedicated, secure network fabrics for charging station testing and validation.

Operating 100% on-site at Campbell HQ, you will serve as the principal technical escalation and engineering authority for critical identity, endpoint, and network infrastructure. You will bridge software-defined systems automation with physical hardware and campus networking, ensuring ChargePoint's enterprise infrastructure is secure, observable, and built for rapid global scale. 

What You Will Bring to ChargePoint

• Design, configure, and maintain enterprise campus network infrastructure, including core routing, multi-layer switching, and high-density 802.1X wireless (Cisco, Meraki, Aruba) across Campbell HQ and engineering test facilities.
• Engineer and harden Next-Generation Firewalls (Palo Alto Networks, Fortinet), architecting micro-segmentation, zone-based security policies, IPsec site-to-site tunnels, and client VPN solutions.
• Partner with software, hardware, and embedded engineering teams to deploy isolated network segments, test racks, and IoT fabrics for EV charging station hardware-in-the-loop (HIL) validation.
• Oversee campus physical and core network infrastructure, including MDF/IDF room architecture, structured cabling, UPS power systems, DNS/DHCP/IPAM, and 802.1X NAC.
• Engineer and automate enterprise identity platforms, configuring Okta and Microsoft Entra ID for SAML/OIDC SSO, SCIM provisioning, dynamic groups, and Privileged Identity Management (PIM).
• Engineer modern MDM and endpoint architectures across macOS (Kandji) and Windows (Microsoft Intune), building automated zero-touch deployment pipelines (Autopilot, Apple Business Manager), custom profiles, and compliance baselines.
• Build custom automations and API integrations using PowerShell, Python, Bash, and the Microsoft Graph and Okta REST APIs to automate workforce lifecycles, configuration drift detection, and reporting.
• Architect and manage the Microsoft 365 cloud ecosystem, engineering collaboration services, data governance, advanced threat protection (Defender for Endpoint/Office 365), and telemetry.
• Instrument observability across systems and network infrastructure (Datadog, Google SecOps), engineering proactive telemetry, and serving as Tier-3 escalation authority for complex systems and network incidents.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, Network Engineering, or equivalent practical engineering experience.
• 5-8 years of hands-on experience in IT systems engineering, cloud infrastructure, and enterprise network engineering.
• Solid hands-on network engineering experience: enterprise routing and switching (Cisco, Meraki, Arista), 802.1X enterprise wireless (WPA-Enterprise, RADIUS/EAP-TLS), and VLAN micro-segmentation.
• Demonstrated experience configuring and maintaining Next-Generation Firewalls (Palo Alto Networks PAN-OS, Fortinet FortiOS) and high-throughput IPsec/SSL VPN tunnels.
• Advanced engineering expertise with enterprise identity architectures: Okta (SSO, MFA, LCM, Workflows, APIs) and Microsoft Entra ID (Conditional Access, PIM, hybrid directory sync).
• Proven track record architecting modern MDM/UEM solutions: Microsoft Intune (Windows Autopilot, custom ADMX, compliance policies) and Kandji(macOS scripting, custom profiles, zero-touch deployment).
• Proficiency in scripting, automation, and diagnostics using PowerShell, Python, or Bash, Microsoft Graph/REST APIs, and packet analysis tools (Wireshark, tcpdump).
• Must be available and committed to working full-time on-site (5 days per week) at ChargePoint’s Campbell, CA headquarters.
• Relevant engineering certifications such as Okta Certified Consultant/Administrator, Microsoft 365 Certified: Enterprise Administrator Expert, CCNP, or PCNSE (good to have).
• Experience with cloud networking (AWS/Azure), IoT/lab testbeds, and compliance frameworks such as SOC 2 or ISO 27001 (good to have).

Location

Campbell, CA

The base salary range for this role is $135,000 – $178,250 per year. In addition, this position is eligible for annual merit-based RSU grants. The company offers a comprehensive benefits package including health, dental, and vision insurance; 401(k); paid time off; parental leave; life and disability insurance; and wellness resources.

Compensation may be adjusted based on work location.