Lead Network Engineer

EviSmart

FPE — Network Engineer

"Most network engineers spend their career reacting to what breaks. This one asks you to design the infrastructure that 28 countries of live dental operations depend on — before it ever has a chance to."

📍 BGC, Taguig, Philippines • On-site • Full-Time • Shifting

WHAT EVISMART IS BUILDING

EviSmart is the leading dental Autopilot system operating across 28 countries in a $40B healthcare industry — and the Manila team builds and ships it. Not an MVP. Not a pilot. Live, in production, with thousands of dental labs and dentists depending on the platform every day to run their business.

We have multiple in-house AI teams building the next generation of dental design automation — and Manila is where it gets operationalized. We are one of the few genuinely AI-first companies in the Philippines. The models are being built here. The product is scaling here. The opportunity is here.

WHY THIS ROLE, WHY NOW

The AI layer for the dental industry is being built right now — and the network and security architecture that carries it needs to be designed ahead of that growth, not scrambled when it arrives. The person who joins now as FPE — Network Engineer doesnt step into a finished blueprint. You will be the first to design EviSmarts cloud-to-physical migration architecture, define the network security posture that every product handoff is measured against, and own the physical infrastructure that 200+ engineers and operators in Manila depend on every day.

Early joiners define the architecture. That is not a slogan — it is how every senior technical role here got built.

WHY EVISMART

• Leading dental Autopilot system in a $40B global healthcare industry — operating across 28 countries, live in production
• Multiple in-house AI teams building proprietary models — not just consuming APIs. Claude, Cursor, Luvable, and LLM-powered workflows are part of the daily stack
• Manila is not a back office. It is the delivery engine — operations, AI, product, and engineering all run from here. Your work ships globally
• We promote based on output, not tenure. The people who move fastest here are the ones who own their work completely
• 300+ people and growing — the career path is real because the company is growing into it

"I need a network engineer who treats security as architecture, not a layer you bolt on at the end. This person will be technically accountable to me directly — on every decision that touches the global engineering blueprint, the security posture, and infrastructure strategy. If you are the kind of engineer who waits for a vulnerability report to act, this role will be uncomfortable. If you design ahead of the problem, we should talk."

— Des Peraren, CTO / GM, EviSmart Manila

WHAT YOULL OWN

• Physical Network — Manila Office — own and operate all physical network infrastructure: office Wi-Fi, switches, routers, ISP management, and ExpressRoute hardware. Network issues are productivity emergencies for 200 people — proactive monitoring, not reactive support
• Network Security — own VPN access, firewalls (WAF), load balancer security, IP management, DNS (internal and external), SSL certificates, and the IP whitelisting framework for all systems that require it
• Cloud-to-Physical Migration Architecture — design the blueprint for migrating test environments from cloud to physical machines before the decision to migrate is made; partner with Jester (FPE — DevOps & Cloud) on infrastructure layer; the design is Des-approved before any migration begins
• Compliance — own the technical controls for HIPAA and/or SOC2 compliance; build and maintain them continuously, not scrambled before an audit
• Security Incident Response — diagnose, contain, and produce a post-mortem with prevention measures for every live security incident; you are the technical resolver, not a manager who was informed
• Security posture signal — you are the first to know when a vulnerability, a compliance gap, or a network risk is emerging. You act on it before it reaches a product handoff or a Des review

WHAT YOULL GET

• A seat at the AI table — work directly alongside in-house AI model teams using Claude, Cursor, Luvable, and LLM-powered workflows. Youll work with these tools daily, not read about them in a newsletter
• Global reach, Manila-built — EviSmart operates across 28 countries. The network security posture and infrastructure architecture you define protects live dental data across North America, Europe, and beyond — from your desk in Manila
• Architecture ownership — your network design, your security blueprint, your name on the infrastructure decisions that scale with the platform
• A concrete career path — FPE Network Engineer → Senior Network & Security Architect → Head of Infrastructure. As the platform expands, the infrastructure scope expands with it
• Above-market compensation (starting at ₱200,000) for engineers who have personally owned production network reliability. Range disclosed at first screen.
• HMO coverage, 13th month pay, and all government-mandated benefits

HOW WE WORK

We share work before its ready. We debate decisions loudly and execute them quietly. We default to fixing problems instead of escalating them. Manila is the delivery engine for a global platform — the standard is high and the pace is real.

A critical vulnerability that sits unpatched for 24 hours is a risk we dont accept. A product handoff that introduces a security gap is rejected. We fix things before they escalate, and we expect everyone here to do the same.

If youve spent time reacting to incidents instead of designing ahead of them — youll notice the difference on your first week.

"Why EviSmart and not a bigger company? Because at a bigger company, your work goes into a queue. Your output is handled by a template. Here, what you build ships to 28 countries. Thats the kind of ownership most roles never give you — and we think the best people want it."

— EviSmart Talent Team

HOW SUCCESS IS MEASURED

KPI

TARGET

WHAT IT MEASURES

VPN connectivity

≥99.9% uptime

Anything below has a same-day root cause and prevention plan

Critical vuln patching

<24 hours from discovery

No critical vulnerability stays open

Security incident response

<5 min to confirmed response

P0 security incidents are responded to immediately — not triaged

WHAT SUCCESS LOOKS LIKE

30 Days

Full audit of physical network and security posture complete; monitoring dashboard reviewed with Jester

60 Days

Migration architecture draft begun; VPN and certificate expiry queue clean

90 Days

Des-approved migration architecture in progress; all compliance controls documented and current

A NOTE ON WHAT WERE NOT

This role is not a cloud-only infrastructure position. You will own physical switches, routers, office Wi-Fi hardware, and ISP management — not just security policies and cloud configurations. If your experience has been exclusively in cloud environments, this will challenge you in ways that matter.

This is not a cost-center role and Manila is not a support function. Our Manila team leads engineering and operations — the product ships from here. If youve seen "Philippines office" mean something smaller at other companies, that is not what this is.

On AI: EviSmarts AI is not a marketing claim. We have in-house model research and development teams, and the tools we use daily — Claude, Cursor, Luvable, LLM-powered workflows — are part of the actual stack, not a slide in a deck. The next 12 months will see expanded AI pipeline infrastructure supporting dental design automation at increased scale across new markets — and the network and security architecture that carries it is being designed now.

WHAT WE NEED

• 5+ years owning both physical network infrastructure (switches, routers, Wi-Fi, ISP) and network security (VPN, firewalls, WAF, DNS) — not one or the other, both
• Hands-on experience with HIPAA and/or SOC2 compliance as the technical owner — building and maintaining the controls, not writing the documentation
• Experience personally responding to live security incidents as the technical resolver: diagnosing, containing, and producing a post-mortem with prevention measures
• DNS management at depth: A/CNAME/TXT records, SSL certificate provisioning, subdomain management, and IP allocation across complex environments; secret management and encryption vault setup
• Communication that is clear, fast, and written — we are distributed and async writing is a core skill, not a soft one
• Experience designing hybrid cloud-physical network architectures and familiarity with zero-trust network principles, Azure ExpressRoute, MFA/SSO at organizational scale (Okta, SAML, or equivalent) is a strong advantage

Apply at https://job-boards.greenhouse.io/evismart

EviSmart • Philippines • evismart.com