We are seeking a Network Security Engineer to design, build, and operate critical production network infrastructure supporting a global trading environment.
This is a hands-on role within a small, high-performing infrastructure team. You will contribute to architectural decisions, deliver projects end-to-end, and support systems used directly by trading and research teams globally.
The role demands strong technical depth, operational discipline, and a structured approach to troubleshooting. You must be comfortable operating in a production environment where stability, performance, and controlled change management are essential.
Responsibilities:
- Design, implement, and support resilient enterprise network infrastructure across data center and cloud environments
- Contribute to network architecture and capacity planning in collaboration with global infrastructure teams
- Configure and manage routing and switching across core, edge, and data center networks (EIGRP, BGP, OSPF, VLANs, STP)
- Support global WAN connectivity, including carriers, exchanges, and third-party connectivity providers
- Monitor performance and availability; troubleshoot complex production issues and perform structured root cause analysis
- Implement and maintain network security controls, including segmentation, firewalls, and access policies
- Maintain accurate documentation, network diagrams, and operational standards
- Participate in an on-call rotation and provide escalation support for critical production incidents
Experience:
- 5+ years of hands-on experience in network engineering within complex, high-availability production environments and university degree in related domain
- Strong expertise in routing and switching (EIGRP, BGP, OSPF, VLANs, STP, multicast)
- Proven experience designing enterprise network architecture and performing capacity planning
- SASE experience with tools like (Cato, Zscaler)
- Hands-on experience with NGFW (Palo Alto preferable)
- Strong troubleshooting capability across layers 1-4
- Experience with packet capture and analysis tools such as tcp dump and Wireshark
- Solid understanding of network security principles and implementation
- Experience managing WAN connectivity and working with carriers
- Experience operating within structured change control and incident management processes
