Job description

ABOUT US Legora is redefining how legal work gets done. Not built for lawyers, built with them. We work alongside the world’s best legal teams, who expect excellence, precision, and speed, and we hold ourselves to the same bar. Our AI-native workspace lets legal professionals move faster, think more clearly, and operate with sharper precision. By analysing thousands of documents in minutes and powering end-to-end workflows, we cut through complexity, teams can focus on what matters: judgment, strategy, and outcomes. 2,100+ customers across 80+ countries trust us, including Cleary Gottlieb, Goodwin, Linklaters, White & Case, Dentons, and Barclays. We’ve scaled to $200M+ in ARR, with teams across Europe, North America and APAC, and continue to expand through acquisitions including Qura, Walter AI, Graceview, Cadastral, and Wexler. We partner with world-class performers: including Aaron Judge and the New York Yankees, Ludvig Åberg (and his caddie), and campaigns featuring Jude Law. Joining Legora means three things. - We lean in: ownership over titles, outcomes over intentions. - We fight for excellence: high standards, direct, ego-free feedback. - We grow together: as a team and with our customers. Mission before ego. Everyone contributes. No one coasts. If you’re driven by impact, pace, and raising the bar. This is the place. THE ROLE The IT and AI Enablement function exists to make Legora itself run as well as the product we sell: secure, automated, and compounding over time. The Workplace Network Engineer owns the network and connectivity estate across every Legora location - the Meraki and Tailscale footprint, from wired and wireless to WAN and the zero-trust mesh - accountable for keeping every site fast, secure, and connected. You set the network standards the whole company is built to, and the Workplace Technology Leads at each site are your hands for installs and upgrades. Our device fleet is overwhelmingly Apple, so familiarity with the networking nuances of Apple hardware and macOS is important. What You'll Be Doing - Own the reference design every site is rolled out from - LAN, Wi-Fi, WAN / SD-WAN, segmentation (VLANs), DNS / DHCP, and firewall policy - so each new office comes up the same proven way. - Run the Meraki Dashboard as the single source of truth - configuration templates, firmware lifecycle, licensing and inventory, alerting, and capacity planning across all sites. - Operate the Tailscale zero-trust mesh - ACLs, device posture, and access routing - alongside Information Security, who owns identity and the access policy itself. - Monitor connectivity proactively and own uptime: catch degradation before users feel it, drive incidents to resolution, run root-cause analysis, and keep mean-time-to-recover falling. - Plan and program-manage network installs and upgrades for new-site buildouts and refreshes - scope the design, order and stage hardware, and direct the on-site Workplace Technology Leads and cabling / ISP vendors who do the physical work, holding them to Legora’s acceptance tests. - Manage ISP, circuit, and connectivity-vendor relationships - procurement, contracts, SLAs, and escalations - and forecast network spend with Finance. - Partner with the IT Systems and Helpdesk teams on Tier-2 / Tier-3 network escalations, and document the estate so it stays legible to the rest of the function. Who You Are - 6+ years in network engineering or network-focused IT infrastructure, including owning a multi-site corporate network end to end as the final escalation point - with no senior network engineer above you to hand it to. For the Staff end of the band, ~10+ years and a track record of defining network architecture across a multi-site organization. - Hands-on experience supporting and troubleshooting networking for an Apple-heavy device fleet, including the networking nuances of Apple hardware and macOS. - Deep Cisco Meraki experience at multi-site scale - and you understand what the Dashboard abstracts away. You can design and reason about the routing, segmentation, and RF beneath it, and keep the network running when the abstraction leaks. Fluency with the GUI is assumed, not the job. - Vendor-agnostic command of network fundamentals - you design from first principles, not from templates: L2 / L3 boundaries, IP addressing and subnetting (IPAM), routing including BGP with ISPs, dual-circuit / SD-WAN failover, VLAN segmentation, DNS / DHCP, QoS, and firewall policy - and you troubleshoot at the packet level (e.g. Wireshark) when the dashboard isn’t enough. - Able to walk us through a multi-site network you designed end to end - the trade-offs you made, a failure mode you engineered out, and a cutover or migration you ran without taking the business down. - A standards-setter - you’d rather define one blueprint every site copies than improvise each office, and you keep the next buildout cleaner than the last. - Automation-minded - you reach for the Meraki API, Pulumi or Terraform, and scripting to manage the network as code, rather than clicking through dashboards by hand. - A calm operator under pressure - when a site drops, you’re methodical, communicative, and relentless about root cause, not just the quick fix. - A program manager who delivers through others - comfortable owning timelines, vendors, and a budget, and getting work done through on-site teams you don’t directly manage. Nice To Have - Cisco depth at CCNP / CCIE level - certified or demonstrably equivalent. CCNA alone is below the bar for this role; Meraki CMNA / ECMS a plus. - Production experience operating Tailscale or comparable zero-trust network access (ZTNA), and certificate / mTLS fundamentals. - Office buildouts and structured / low-voltage cabling - commissioning networked building systems and coordinating installers. - Physical-security and AV networking - getting cameras / access-control (e.g. Verkada) and conferencing (Neat, Zoom) onto the network and keeping them available. - Comfortable running work through an ITSM / service-desk platform and adopting AI-assisted, agentic automation - we run an AI-native ITSM (Serval). - Connectivity and SaaS-reachability monitoring across sites - synthetic / path monitoring (e.g. ThousandEyes, Catchpoint), a multi-site NMS (e.g. Auvik, PRTG, or Datadog), and SNMP / syslog telemetry, on top of Meraki’s native alerting. - Wi-Fi design and validation tooling - RF surveys and heat-mapping (e.g. Ekahau or Hamina). - Experience with Meraki, Tailscale, Neat, Zoom, Verkada, Okta, and 1Password. WHAT’S IN IT FOR YOU - Global collaboration: Partner with teams and clients across Europe, APAC, and North America. - Competitive package: Comprehensive salary, benefits, and tools for success. - Meaningful work: Your efforts shape how thousands of lawyers use AI daily. - In-person environment: Union Square office designed for ambitious builders and company provided lunch daily. - Benefits & Perks: We invest in our people with a comprehensive, thoughtfully designed benefits package: Medical, Dental & Vision - Multiple medical plan options through Aetna and Kaiser Permanente - HSA or Healthcare FSA (based on plan selection) - Dental plans via MetLife - Vision plans via Vision Care Family Support - Generous parental leave - Free access to Maven Clinic - Dependent Care FSA - Free One Medical membership for employees and dependents Additional Perks - Pre-tax commuter benefits - Life Insurance + STD/LTD - 401(K) with generous company match - Unlimited PTO - Robust voluntary benefits, including identity protection (via Aura), legal coverage via MetLife, pet savings programs, and more Legora is an Equal Opportunity Employer At Legora, we believe great teams are built on diversity of thought and experience. We’re proud to be an equal opportunity employer and committed to creating an inclusive, high-performance culture where everyone can do their best work. We welcome people of all backgrounds and don’t discriminate based on race, color, religion, national origin, gender, gender identity or expression, sexual orientation, age, disability, veteran status, or any other characteristic protected by law.

Requirements

Must-haves

Our device fleet is overwhelmingly Apple, so familiarity with the networking nuances of Apple hardware and macOS is important.
What You'll Be Doing
Own the reference design every site is rolled out from - LAN, Wi-Fi, WAN / SD-WAN, segmentation (VLANs), DNS / DHCP, and firewall policy - so each new office comes up the same proven way.
Run the Meraki Dashboard as the single source of truth - configuration templates, firmware lifecycle, licensing and inventory, alerting, and capacity planning across all sites.
Operate the Tailscale zero-trust mesh - ACLs, device posture, and access routing - alongside Information Security, who owns identity and the access policy itself.
Monitor connectivity proactively and own uptime: catch degradation before users feel it, drive incidents to resolution, run root-cause analysis, and keep mean-time-to-recover falling.
Manage ISP, circuit, and connectivity-vendor relationships - procurement, contracts, SLAs, and escalations - and forecast network spend with Finance.
Partner with the IT Systems and Helpdesk teams on Tier-2 / Tier-3 network escalations, and document the estate so it stays legible to the rest of the function.
Hands-on experience supporting and troubleshooting networking for an Apple-heavy device fleet, including the networking nuances of Apple hardware and macOS.
Able to walk us through a multi-site network you designed end to end - the trade-offs you made, a failure mode you engineered out, and a cutover or migration you ran without taking the business down.
A standards-setter - you’d rather define one blueprint every site copies than improvise each office, and you keep the next buildout cleaner than the last.
Automation-minded - you reach for the Meraki API, Pulumi or Terraform, and scripting to manage the network as code, rather than clicking through dashboards by hand.
A calm operator under pressure - when a site drops, you’re methodical, communicative, and relentless about root cause, not just the quick fix.
A program manager who delivers through others - comfortable owning timelines, vendors, and a budget, and getting work done through on-site teams you don’t directly manage.
Global collaboration: Partner with teams and clients across Europe, APAC, and North America.
Competitive package: Comprehensive salary, benefits, and tools for success.
Meaningful work: Your efforts shape how thousands of lawyers use AI daily.

Nice-to-haves

Cisco depth at CCNP / CCIE level - certified or demonstrably equivalent. CCNA alone is below the bar for this role; Meraki CMNA / ECMS a plus.
Production experience operating Tailscale or comparable zero-trust network access (ZTNA), and certificate / mTLS fundamentals.
Office buildouts and structured / low-voltage cabling - commissioning networked building systems and coordinating installers.
Physical-security and AV networking - getting cameras / access-control (e.g. Verkada) and conferencing (Neat, Zoom) onto the network and keeping them available.
Comfortable running work through an ITSM / service-desk platform and adopting AI-assisted, agentic automation - we run an AI-native ITSM (Serval).
Wi-Fi design and validation tooling - RF surveys and heat-mapping (e.g. Ekahau or Hamina).
Experience with Meraki, Tailscale, Neat, Zoom, Verkada, Okta, and 1Password.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

airestapi

Platform: ashby
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Pto

Parental Leave