Network Engineer

OverviewJoin to apply for the Network Engineer role at GNS Science.GeoNet runs one of Aotearoa New Zealand's largest remote sensing networks, delivering critical geohazard data to the public and scientists.

We're after a Network Engineer who can help connect and protect >

1,200 remote sites over cellular, satellite, and terrestrial links into our local and AWS-based data centres.

You'll join a hands-on Platform / Network team that treats infrastructure as code, automates relentlessly, and designs for resilience.Key ResponsibilitiesOperate and improve a nationwide network : 1,200+ MikroTik routers, 600+ cellular, 100+ satellite connections.Engineer reliable site-to-core connectivity (WireGuard / IPsec, OSPF, VRRP, QoS, NAT).

Design and operate AWS networking (VPCs, Transit Gateway, Site-to-Site VPN / Direct Connect, routing, security groups / NACLs, IPv6).

Automate configuration, monitoring and change management (Git, CI / CD, scripts in Go, IaC where practical).

Troubleshoot complex path / routing issues across cellular, satellite (VSAT / BGAN) and terrestrial backhauls.Improve observability, documentation, and incident readiness in a 24 / 7 context.Collaborate across software, platform, and field teams to land pragmatic, resilient solutions.About YouYou're a pragmatic problem-solver who enjoys tricky networks and edge cases.You're comfortable working independently while remaining collaborative and clear in your communication with stakeholders.You have a natural curiosity to learn, share knowledge, and stay current with new tech.We don't expect perfection — if you feel you're a great fit but don't tick every box, we'd still love to hear from you.What You'll BringMust-havesStrong grasp across the network stack (L2–L7), IPv4 / IPv6, IPAM and scalable subnet design.Proven MikroTik / RouterOS (v7 preferred) experience in production.Solid routing / tunnelling : BGP, OSPF, WireGuard, IPsec, VRRP, QoS.Comfortable on Linux and with CLI tooling; able to script in Python and / or Bash.Firewall fundamentals : stateful inspection, NAT, auditing.Version control with git; habit of writing good docs and clean change history.Nice-to-havesAWS networking depth (Transit Gateway, Direct Connect, GWLB, IPv6 at scale) and / or Fortinet (FortiGate) experience.Automation against RouterOS (API / Ansible), telemetry / monitoring stacks.Familiarity with cellular and satellite networking constraints (MTU, jitter, NAT, CGNAT).

Certifications (e.g., MTCNA / MTCRE, AWS Networking Specialty, Fortinet NSE) are a plus.What We OfferMission-driven work that directly supports public safety and scientific discovery.A high performing organisation with a focus on employee development and wellbeing.Cross-functional team that values openness, automation, and continuous improvement.Supportive, flexible environment with professional development and great colleagues.Generous leave entitlements and employee benefits.A permanent, full-time (38 hours per week) role based in our GNS Business Unit, at our campus in Avalon, Lower Hutt.Salary range : NZ$105,235–NZ$116,928+ depending on experience.Application DetailsPlease include a short note on relevant MikroTik / AWS / Fortinet experience and a tricky network problem you've solved recently.

View the full position description for this role here : / .

For questions, contact

Applications close : 11.55 pm on Thursday, 9 October 2025.

#J-18808-Ljbffr