EviSmart

Network & IT Support Engineer

"Most IT roles fix problems after people notice them. This one is the reason people never notice — because the network is always up, the device is always ready, and the account is always right."

📍 Manila, Philippines • On-site • Full-Time • Scope: Philippines, Canada, South Korea, China

WHAT EVISMART IS BUILDING

EviSmart is the leading dental Autopilot system operating across 28 countries in a $40B healthcare industry — and the Manila team builds and ships it. Not an MVP. Not a pilot. Live, in production, with thousands of dental labs and dentists depending on the platform every day to run their business.

We have multiple in-house AI teams building the next generation of dental design automation — and Manila is where it gets operationalized. We are one of the few genuinely AI-first companies in the Philippines. The models are being built here. The product is scaling here. The opportunity is here.

WHY THIS ROLE, WHY NOW

EviSmart runs a live global platform that 300 people across four countries depend on every single day. Right now, that infrastructure relies on a small team managing a growing surface area — devices, accounts, network, security controls, and compliance — without a dedicated engineer who owns the full stack from the Manila office outward.

The Network & IT Support Engineer is the role that closes that gap. The person who joins now will own the Manila physical network end-to-end, build out the endpoint support model for all four countries, and embed security controls into the network layer in close partnership with our Cybersecurity FPE. When a new hire's device isn't ready on Day 1, the whole company sees it. When the Manila network goes down, 200 people stop working. When an account stays live after a departure, it's a security incident.

None of those failures should be possible — and this hire builds the system that makes them impossible.

WHY EVISMART

• Leading dental Autopilot system in a $40B global healthcare industry — operating across 28 countries, live in production
• Multiple in-house AI teams building proprietary models — not just consuming APIs. Claude, Cursor, Luvable, and LLM-powered workflows are part of the daily stack
• Manila is not a back office. It is the delivery engine — operations, AI, product, and engineering all run from here. Your work ships globally
• We promote based on output, not tenure. The people who move fastest here are the ones who own their work completely
• 300+ people and growing — the career path is real because the company is growing into it

"We are running a global platform on a network that one person will own entirely. When that network is stable and every device is ready and every account is clean, I barely hear about this role — and that's exactly what success looks like. I need someone who takes the absence of incidents as seriously as the incidents themselves." — Des Peraren, CTO / GM, EviSmart Manila

WHAT YOU'LL OWN

Area	What You Do
Physical Network — Manila	Own and operate the Manila office network: Wi-Fi, switches, routers, ISP management, and ExpressRoute hardware. ~200 staff depend on this daily. Network issues are productivity emergencies, not help desk tickets.
Network Security (with Joseph)	Own the enforcement and operation of network security controls — firewall rules, VPN, WAF, IP management, DNS, SSL certificates. Joseph sets the standards; you implement and maintain them on the network and device layer. Nothing changes on the security posture without Joseph's awareness.
Endpoint Support — Four Countries	All employee devices and accounts across Philippines, Canada, South Korea, and China. Device ready before Day 1 for every new hire. Issues resolved same business day. IT asset inventory current within 24 hours of any change.
Account Provisioning & Deprovisioning	Accounts created before Day 1 when People Ops confirms a new hire. Accounts locked on the last day when a departure is triggered. No delays — a live account after departure is a security risk.
HIPAA / SOC2 Network Controls	Implement and maintain the network-layer technical controls that feed into Joseph's compliance program. Maintained continuously — not assembled before an audit.
Cloud-to-Physical Migration Architecture	Design and document the architecture for eventual test environment migration from cloud to physical machines. Joint design with DevOps. Blueprint must be Des-approved before any migration begins. Updated quarterly.

WHAT SUCCESS LOOKS LIKE

Milestone	What It Looks Like
30 Days	Full network audit of Manila infrastructure complete. IT asset inventory confirmed across all four countries. Endpoint helpdesk queue process established and running.
60 Days	All security controls operational and documented with Joseph. Account provisioning and deprovisioning running at 100% — no new hire starts without a device, no departure leaves a live account. HIPAA/SOC2 network controls mapped and verified.
90 Days	KPIs hitting target: Manila Network Uptime ≥99.9%, VPN Availability ≥99.9%, Critical Vulnerability Patching <24 hours, Security Incident Response <5 minutes. Cloud-to-physical migration architecture drafted and submitted for Des review.

WHAT YOU'LL GET

• Global infrastructure ownership — the Manila network, the endpoint layer, and the security controls that four countries depend on. Your uptime numbers are the numbers the business runs on
• A real security partnership — you work alongside Joseph (Cybersecurity FPE) and carry a direct technical accountability line to Des (CTO) for all architectural decisions. This is not a help desk role with a better title
• Scope that grows — Philippines, Canada, South Korea, China today. EviSmart is in 28 countries and the infrastructure footprint grows with the business
• A concrete career path — Network & IT Support Engineer → Senior Infrastructure Engineer → Head, Engineering Operations. As the platform scales, the infrastructure scope scales with it
• Above-market compensation for engineers who have personally owned enterprise network infrastructure end-to-end. Range disclosed at first screen
• HMO coverage, 13th month pay, and all government-mandated benefits

HOW WE WORK

We share work before it's ready. We debate decisions loudly and execute them quietly. We default to fixing problems instead of escalating them. Manila is the delivery engine for a global platform — the standard is high and the pace is real.

A network issue that gets deprioritized under project pressure is a network issue that escalates. An account that stays live after a departure because the trigger was missed is a security incident waiting to happen. We fix things before they escalate, and we expect everyone here to do the same.

If you've spent time waiting for someone else to own the infrastructure — you'll notice the difference on your first week.

"Why EviSmart and not a bigger company? Because at a bigger company, your network change goes through a change advisory board. Your ticket goes into a queue. Here, you own the infrastructure that 300 people across four countries depend on. That's the kind of ownership most roles never give you — and we think the best people want it." — EviSmart Talent Team

A NOTE ON WHAT WE'RE NOT

The most common hesitation we hear from strong candidates for this role: "Is this actually an infrastructure ownership role, or is it a help desk job with a better title?"

It is a fair question. This role exists to own infrastructure that a global company runs on — not to manage a ticket queue or follow a runbook someone else wrote. You will design and operate the physical network, enforce security controls in partnership with Joseph, build the endpoint support model across four countries, and carry a direct accountability line to the CTO for every architectural decision. That is not help desk work.

This is not a cost-center role and Manila is not a support function. Our Manila team leads engineering and operations — the platform ships from here. If you've seen "Philippines office" mean something smaller at other companies, that is not what this is.

WHAT WE NEED

Must Have

• Hands-on experience designing, configuring, and operating enterprise network infrastructure — switches, routers, Wi-Fi, ISP, VPN, firewalls (WAF)
• Strong working knowledge of network security: firewall rules, VPN configuration, DNS, IP management, SSL certificates, and VLAN segmentation
• Experience supporting employee endpoint devices and accounts at scale — device setup, helpdesk, asset inventory, account provisioning and deprovisioning
• Solid understanding of HIPAA and/or SOC2 network-layer controls
• Comfortable working across time zones — supporting staff in Philippines, Canada, South Korea, and China
• Able to respond fast under pressure and contain security incidents at the network or device layer before escalating
• Comfortable with a dual reporting line — operational manager for day-to-day, CTO for technical and security decisions

Good to Have

• Experience with Azure networking, ExpressRoute, or hybrid cloud-physical environments
• Familiarity with cloud-to-physical migration architecture
• Experience with VAPT processes or supporting external security certifications
• Any CCNA, CompTIA Network+, or equivalent network certification
• Prior experience in a DevSecOps or security-adjacent engineering role

Not Required

• Dental or healthcare industry background
• Software development or coding skills
• Deep expertise in any single cloud platform

What Makes This Role	What That Means
Speed and reliability	When the network fails, 200 people stop working. When a new hire's device isn't ready, it is visible to the whole company. When an account is still live after a departure, it is a security incident. This role is measured on speed — not eventually.
Security partnership with Joseph	You do not build security in isolation.