Lead Network Engineer

EviSmart

FPE — Network Engineer

"Most network engineers spend their career reacting to what breaks. This one asks you to design the infrastructure that 28 countries of live dental operations depend on — before it ever has a chance to."

📍 BGC, Taguig, Philippines • On-site • Full-Time • Shifting

WHAT EVISMART IS BUILDING

EviSmart is the leading dental Autopilot system operating across 28 countries in a $40B healthcare industry — and the Manila team builds and ships it. Not an MVP. Not a pilot. Live, in production, with thousands of dental labs and dentists depending on the platform every day to run their business.

We have multiple in-house AI teams building the next generation of dental design automation — and Manila is where it gets operationalized. We are one of the few genuinely AI-first companies in the Philippines. The models are being built here. The product is scaling here. The opportunity is here.

WHY THIS ROLE, WHY NOW

The AI layer for the dental industry is being built right now — and the network and security architecture that carries it needs to be designed ahead of that growth, not scrambled when it arrives. The person who joins now as FPE — Network Engineer doesn't step into a finished blueprint. You will be the first to design EviSmart's cloud-to-physical migration architecture, define the network security posture that every product handoff is measured against, and own the physical infrastructure that 200+ engineers and operators in Manila depend on every day.

Early joiners define the architecture. That is not a slogan — it is how every senior technical role here got built.

WHY EVISMART

• Leading dental Autopilot system in a $40B global healthcare industry — operating across 28 countries, live in production
• Multiple in-house AI teams building proprietary models — not just consuming APIs. Claude, Cursor, Luvable, and LLM-powered workflows are part of the daily stack
• Manila is not a back office. It is the delivery engine — operations, AI, product, and engineering all run from here. Your work ships globally
• We promote based on output, not tenure. The people who move fastest here are the ones who own their work completely
• 300+ people and growing — the career path is real because the company is growing into it

"I need a network engineer who treats security as architecture, not a layer you bolt on at the end. This person will be technically accountable to me directly — on every decision that touches the global engineering blueprint, the security posture, and infrastructure strategy. If you are the kind of engineer who waits for a vulnerability report to act, this role will be uncomfortable. If you design ahead of the problem, we should talk."

— Des Peraren, CTO / GM, EviSmart Manila

WHAT YOU'LL OWN

• Physical Network — Manila Office — own and operate all physical network infrastructure: office Wi-Fi, switches, routers, ISP management, and ExpressRoute hardware. Network issues are productivity emergencies for 200 people — proactive monitoring, not reactive support
• Network Security — own VPN access, firewalls (WAF), load balancer security, IP management, DNS (internal and external), SSL certificates, and the IP whitelisting framework for all systems that require it
• Cloud-to-Physical Migration Architecture — design the blueprint for migrating test environments from cloud to physical machines before the decision to migrate is made; partner with Jester (FPE — DevOps & Cloud) on infrastructure layer; the design is Des-approved before any migration begins
• Compliance — own the technical controls for HIPAA and/or SOC2 compliance; build and maintain them continuously, not scrambled before an audit
• Security Incident Response — diagnose, contain, and produce a post-mortem with prevention measures for every live security incident; you are the technical resolver, not a manager who was informed
• Security posture signal — you are the first to know when a vulnerability, a compliance gap, or a network risk is emerging. You act on it before it reaches a product handoff or a Des review

WHAT YOU'LL GET

• A seat at the AI table — work directly alongside in-house AI model teams using Claude, Cursor, Luvable, and LLM-powered workflows. You'll work with these tools daily, not read about them in a newsletter
• Global reach, Manila-built — EviSmart operates across 28 countries. The network security posture and infrastructure architecture you define protects live dental data across North America, Europe, and beyond — from your desk in Manila
• Architecture ownership — your network design, your security blueprint, your name on the infrastructure decisions that scale with the platform
• A concrete career path — FPE Network Engineer → Senior Network & Security Architect → Head of Infrastructure. As the platform expands, the infrastructure scope expands with it
• Above-market compensation (starting at ₱200,000) for engineers who have personally owned production network reliability. Range disclosed at first screen.
• HMO coverage, 13th month pay, and all government-mandated benefits

HOW WE WORK

We share work before it's ready. We debate decisions loudly and execute them quietly. We default to fixing problems instead of escalating them. Manila is the delivery engine for a global platform — the standard is high and the pace is real.

A critical vulnerability that sits unpatched for 24 hours is a risk we don't accept. A product handoff that introduces a security gap is rejected. We fix things before they escalate, and we expect everyone here to do the same.

If you've spent time reacting to incidents instead of designing ahead of them — you'll notice the difference on your first week.

"Why EviSmart and not a bigger company? Because at a bigger company, your work goes into a queue. Your output is handled by a template. Here, what you build ships to 28 countries. That's the kind of ownership most roles never give you — and we think the best people want it."

— EviSmart Talent Team

HOW SUCCESS IS MEASURED

KPI	TARGET	WHAT IT MEASURES
VPN connectivity	≥99.9% uptime	Anything below has a same-day root cause and prevention plan
Critical vuln patching	<24 hours from discovery	No critical vulnerability stays open
Security incident response	<5 min to confirmed response	P0 security incidents are responded to immediately — not triaged

WHAT SUCCESS LOOKS LIKE

30 Days	Full audit of physical network and security posture complete; monitoring dashboard reviewed with Jester
60 Days	Migration architecture draft begun; VPN and certificate expiry queue clean
90 Days	Des-approved migration architecture in progress; all compliance controls documented and current

A NOTE ON WHAT WE'RE NOT

This role is not a cloud-only infrastructure position. You will own physical switches, routers, office Wi-Fi hardware, and ISP management — not just security policies and cloud configurations. If your experience has been exclusively in cloud environments, this will challenge you in ways that matter.

This is not a cost-center role and Manila is not a support function. Our Manila team leads engineering and operations — the product ships from here. If you've seen "Philippines office" mean something smaller at other companies, that is not what this is.

On AI: EviSmart's AI is not a marketing claim. We have in-house model research and development teams, and the tools we use daily — Claude, Cursor, Luvable, LLM-powered workflows — are part of the actual stack, not a slide in a deck. The next 12 months will see expanded AI pipeline infrastructure supporting dental design automation at increased scale across new markets — and the network and security architecture that carries it is being designed now.

WHAT WE NEED

• 5+ years owning both physical network infrastructure (switches, routers, Wi-Fi, ISP) and network security (VPN, firewalls, WAF, DNS) — not one or the other, both
• Hands-on experience with HIPAA and/or SOC2 compliance as the technical owner — building and maintaining the controls, not writing the documentation
• Experience personally responding to live security incidents as the technical resolver: diagnosing, containing, and producing a post-mortem with prevention measures
• DNS management at depth: A/CNAME/TXT records, SSL certificate provisioning, subdomain management, and IP allocation across complex environments; secret management and encryption vault setup
• Communication that is clear, fast, and written — we are distributed and async writing is a core skill, not a soft one
• Experience designing hybrid cloud-physical network architectures and familiarity with zero-trust network principles, Azure ExpressRoute, MFA/SSO at organizational scale (Okta, SAML, or equivalent) is a strong advantage

Apply at https://job-boards.greenhouse.io/evismart

EviSmart • Philippines • evismart.com