Security Engineer and Network Engineer
MPCH is a dual-use cryptographic infrastructure company providing governed signing, key management, recovery, secure facilities, and AI authorization controls. It serves institutional finance, regulated blockchain ecosystems, digital asset platforms, government, defense, and national security clients.
Maintainer signals as of 8/23/2026
Funding history
Projects
About MPCH
Founded in 2021, MPCH integrates physical security infrastructure, hardware-backed cryptography, policy enforcement, and operational governance under one system. Its offerings include Stronghold-KMS for authority-key management, Stronghold-DR for offline disaster recovery, regulated blockchain validator infrastructure, MPCH Vault Services, and the ATLAS and APEX AI governance products. MPCH operates secure facilities and managed security operations for institutions, custodians, financial organizations, government agencies, and defense clients, and is a founding infrastructure provider to Canton.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will design and implement a highly secure enterprise network using hardware and software. The role covers scalable VPN deployment, protocol evaluation, firewall and IDS/IPS integration, authentication and encryption, access control, risk assessment, compliance, monitoring, performance optimization, patching, incident response, documentation, and IT staff training.
Requirements
- 5+ years of experience in network engineering and cybersecurity
- Deep understanding of routing, switching, DNS, and BGP
- Expertise with OpenVPN, IPsec, SSL/TLS, and WireGuard
- Proficiency with firewalls, IDS/IPS, and SIEM solutions
- Hands-on experience with AWS, Azure, and Google Cloud in hybrid environments
- Experience implementing MFA and certificate-based authentication
- Experience with AES-256 and key exchange protocols including Diffie-Hellman and IKEv2
- Familiarity with GDPR, HIPAA, and ISO 27001
- Familiarity with Python, Bash, automation, and CI/CD deployment methods
- Preferred certifications include CISSP, CCNP Security, or CEH
- Preferred knowledge of zero-trust architectures and Software-Defined Perimeter frameworks
Responsibilities
- Design scalable, high-performance VPN architectures for hybrid cloud and on-premises environments
- Evaluate and select VPN protocols and encryption methodologies
- Integrate VPNs with firewalls, routers, and IDS/IPS
- Implement multi-factor authentication and certificate-based access
- Apply advanced encryption standards and key exchange protocols
- Develop and enforce access control and user permission policies
- Conduct network analysis to minimize latency and maximize uptime
- Implement load balancing and failover mechanisms for high availability
- Optimize bandwidth utilization and troubleshoot connectivity issues
- Perform risk assessments and implement vulnerability mitigations
- Ensure VPN and network compliance with applicable regulations
- Deploy monitoring tools to detect anomalies and unauthorized access
- Maintain firmware, software, and security patches for network components
- Develop incident response plans for VPN and network security events
- Document architectures, configurations, and standard operating procedures
- Provide training and guidance to IT staff on VPN and network best practices