Network Engineer - IT Infrastructure - United States

Responsibilities IT Infrastructure and Communication Technology, part of Group IT, provides the enterprise IT and audio/video infrastructure behind ByteDance's offices worldwide. Our work spans three directions, Networking and Systems, Audio/Video, and Office Buildout, covering the full lifecycle from construction through operations. Networking and Systems builds and operates our global office network and the compute platforms behind office computing. Audio/Video owns enterprise audio and video infrastructure, working toward meetings that feel like being in the same room, with diagnostics that catch problems before users report them. Office Buildout manages IT infrastructure across global office projects, from new builds through renovations and decommissions. Building infrastructure across regions means working with different national regulations, network environments, and vendor ecosystems, while keeping services stable through global expansion and AI transformation. You will work across the full lifecycle, from planning and design through deployment and operations, on infrastructure that reaches offices worldwide, and on how AI applies to networking, systems management, and audio/video. Global RE is part of Network and System in IT-Infra & Comm Tech. The team runs IT network and system infrastructure for offices, points of presence (POPs), backbone connectivity, and core infrastructure services across the Americas, EMEA, and APAC. Our direction is to build one network and system team across regions. This is a hands-on network role in Global RE's Americas region. Most of the work is day-to-day operations, incident handling, and site delivery for offices in the region. The role works with the Americas Region Owner and follows the designs of the Global RE Architecture Virtual Team, along with the global baselines and playbooks. Responsibilities - Handle network operations and incidents for offices across the Americas, with sites in and around the base city as the main focus. Join Global RE's around-the-clock network on-call rotation across time zones, work carrier and vendor escalations, and run root cause reviews through to corrective action. - Act as a technical contact for regional business teams and users. Take in their network requirements, agree on solutions with the Americas Region Owner, and follow the issues they report until they are closed. - Support new site builds, expansions, and relocations from design input to handover, including equipment list review, rack and cabling plans, IP allocation, zero-touch provisioning, cutover, and Day 1 support. Take part in operations acceptance and track open items until they are fixed. - Onboard new and remaining sites to the SD-WAN and WAN edge standard, and run firmware baseline upgrades from change preparation and rollback planning through cutover and post-change checks. - Implement high-density wireless designs from the Global RE Architecture Virtual Team, and roll out baseline configurations, switch and wireless controller upgrades, and end-of-life hardware replacements at campus sites. Work with security teams on network segmentation and out-of-band management. - Coordinate carriers and vendors on circuit installs, upgrades, acceptance tests, and hardware replacements. Keep circuit, device, and asset records current in NetBox and the configuration management database. - Help Global RE system engineers with on-site infrastructure, such as network access for servers and virtualization hosts, out-of-band hardware management, and network-dependent services like DNS, DHCP, RADIUS, and NTP. - Keep monitoring in place for managed devices and circuits, and write the runbooks and alarm handling guides that on-site IT support and operations center teams use for routine alarms. Qualifications Minimum Qualifications - Bachelor's degree or above in Computer Science, Network Engineering, Telecommunications, or a related technical discipline, or equivalent practical experience. - Hands-on experience operating, troubleshooting, and delivering enterprise networks across multiple sites, including campus switching, wireless, WAN, internet edge, and carrier circuits. - Solid knowledge of TCP/IP, routing and switching, BGP, OSPF, VLANs, firewalls and NAT, DNS, and DHCP, and the ability to isolate faults from the physical layer up. - Hands-on experience configuring and troubleshooting enterprise switches, wireless controllers and access points, firewalls, and SD-WAN or WAN edge devices. - Experience running production changes end to end, from risk assessment and approval through rollback planning and post-change validation, with clear records that others can follow. - Strong English communication skills, with the ability to work with business teams, carriers, vendors, and colleagues across time zones, and to write change plans, runbooks, and incident reviews. - As a condition of employment, all successful candidates must be able to establish authorization to work in the United States. For this position, the Company does not provide sponsorship or any immigration-related benefits, and must be able to work on site in offices and equipment rooms, participate in an around-the-clock on-call rotation, and travel to other sites across the Americas as needed. Preferred Qualifications - Experience delivering office builds or relocations, SD-WAN migrations, or software upgrades across many sites with minimal user impact, including sites with strict access and change control. - Experience managing enterprise circuits with US carriers, from ordering and installation through acceptance testing and escalations. - Familiarity with mainstream network and security platforms such as Cisco, Arista, Aruba, Fortinet, and Palo Alto Networks. - Experience with QoS, IPsec VPN, VRF-based segmentation, and IPv6 dual-stack deployments. - Experience with high-density wireless deployments and site surveys, and with 802.1X network access control using ClearPass or Cisco ISE. - Working knowledge of server hardware and out-of-band controllers, common hypervisors such as VMware, and network services like TACACS+ and syslog. - Experience using Python, Shell, Ansible, Git, or similar tools for configuration checks, inventory, and health inspection, and with monitoring and source-of-truth tools such as Zabbix, Grafana, ELK, and NetBox. - Network or security certifications such as CCNP, CCIE, Aruba ACMP or ACMX, Fortinet NSE, Palo Alto PCNSE, or equivalent. Job Information [For Pay Transparency]Compensation Description (Annually) The base salary range for this position in the selected city is $162000 - $387600 annually. Compensation may vary outside of this range depending on a number of factors, including a candidate's qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units. Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short-term and long-term disability coverage, life insurance, wellbeing benefits, among others. Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure). The Company reserves the right to modify or change these benefits programs at any time, with or without notice.