Systems Engineer, Network & Security

About the Company: Sungrow North America is a leading provider of renewable energy solutions, specializing in the development and manufacturing of photovoltaic inverters and energy storage systems. The company offers a comprehensive range of products and services designed to optimize the performance and efficiency of solar power installations. Sungrow North America aims to provide sustainable and reliable energy solutions to meet the growing demand for clean power and is known for its commitment to innovation, high-quality standards, and exceptional customer service.

About the Role: The Systems Engineer is responsible for designing, implementing, and maintaining Sungrow USA's enterprise systems and secure network infrastructure across on premises and cloud environments while owning the certificate lifecycle and PKI infrastructure to enable secure and scalable certificate based authentication across cloud, network, and endpoint platforms, with a primary focus on network security design, security architecture, API integration, systems engineering, and SaaS platform optimization; this role leads the development of scalable and highly available systems that ensure reliable network performance and strong data protection through modern security controls, and works closely with Infrastructure, Security, and IT Operations teams while also serving as a backup to Infrastructure Engineers to maintain continuity of critical services by supporting core enterprise systems and foundational IT services during absences, coverage gaps, and periods of increased workload.

Responsibilities:

• Design, implement, and support enterprise network infrastructure, including LAN/WAN, SD-WAN, wireless, VPN, and hybrid cloud connectivity across corporate and remote locations.
• Administer and optimize Fortinet, Zscaler (ZIA/ZPA), and cloud networking solutions to deliver secure access, Zero Trust connectivity, network segmentation, and resilient perimeter security.
• Design and manage network access control and certificate-based authentication using IEEE 802.1X, RADIUS, Microsoft Intune, Microsoft Cloud PKI, and enterprise PKI platforms.
• Lead end-to-end certificate lifecycle management, including issuance, deployment, monitoring, renewal, revocation, and ACME-based automation using CyberArk Certificate Manager, Keyfactor Command, AppViewX CERT+, EJBCA, HashiCorp Vault, and DigiCert solutions.
• Architect and manage Azure and AWS networking, including virtual networks, routing, DNS, firewall policies, and hybrid connectivity between cloud and on-premises environments.
• Manage ISP, cellular, and satellite connectivity services while monitoring network performance, availability, bandwidth utilization, and service reliability.
• Troubleshoot and resolve complex infrastructure, network, authentication, and integration issues affecting performance, availability, and security.
• Design, develop, and support enterprise integrations using Microsoft Graph API, REST APIs, PowerShell, Python, and automation platforms to streamline business processes and system operations.
• Administer identity and access management platforms, including Microsoft Entra ID and Okta, supporting SSO, MFA, RBAC, identity federation, and secure cross-platform integrations.
• Design and enforce Data Loss Prevention (DLP), security monitoring, and compliance controls using Microsoft Purview, Zscaler, and enterprise security platforms.
• Design, implement, and support enterprise systems and SaaS platforms, ensuring scalability, high availability, disaster recovery, and operational resilience.
• Provide Tier 3 escalation support for complex infrastructure, network, and system issues while partnering with cross-functional teams on strategic IT initiatives and platform improvements.
• Ensure audit readiness and support compliance programs, including ISO 27001 and SOC 2, by implementing controls, maintaining evidence, and addressing audit requirements.
• Develop and maintain architecture diagrams, operational documentation, SOPs, and knowledge base content to support standardization, knowledge sharing, and operational excellence.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or related field.
• Relevant certifications (e.g., CCNA, Zscaler ZDTE, Fortinet NSE 4+, AZ-700) preferred.

Required Skills:

• Mandarin fluency preferred but not required.
• Strong analytical and problem-solving skills.
• Ability to work independently and collaboratively in a fast-paced environment.
• Excellent communication and documentation skills.
• Organization, detail-oriented nature, and strong initiative.
• Proactive approach to infrastructure optimization and automation.

Preferred Skills:

• None specified.

Pay range and compensation package:

• Compensation commensurate with experience.
• Competitive salary and annual bonus eligibility.
• Comprehensive benefits package including health, dental, vision, and retirement plans.
• Strong personal and company growth opportunities.

Equal Opportunity Statement: Sungrow is an equal opportunity employer. Due to strong interests in this position, Sungrow will only reach out to those candidates who best meet the requirements. Thank you for your interest in Sungrow.

#LI-LB1