Senior Network Engineer / Network Architect – HFT Infrastructure

Job Summary & Responsibilities:

• Design, build and own the end-to-end trading network: exchange colocation, data centres (DC),

WAN and offices.

• Exchange connectivity: NSE, BSE and MCX colocation, exchange handoffs, cross-connects, IP

whitelisting, mock trading sessions and DR drills.

• US network: international circuits, US data centre and exchange venue connectivity, India–US

routing and failover.

• WAN and links: MPLS, ILL (Internet Leased Line), P2P (point-to-point) links, leased lines and link

redundancy.

• Market data networks: IP multicast (PIM-SM, IGMP, RP design), A/B feed redundancy.

• Data centre networking: 10G / 25G / 40G / 100G, core switches, L3 switches, WAN switches,

spine-leaf, LACP, MC-LAG (MLAG / vPC).

• Low latency: L1 switches (Arista, Fusion), cut-through switching, latency optimization, microburst

and buffer analysis, QoS.

• Routing: BGP (eBGP / iBGP, route policies, prefix filters, communities, BFD), OSPF, static routing.

• Firewalls and VPN: FortiGate NGFW (FortiGate 90G, 120G, 200G) in HA, SD-WAN, IPsec site-to-site

VPN, IPsec remote access VPN, SSL VPN, network segmentation, firewall rule review.

• Visibility and timing: port mirroring (SPAN), network TAPs, packet capture, PTP / NTP time

synchronization.

• Monitoring and incident management: Zabbix, SNMP, NetFlow / sFlow, syslog; quick incident

resolution with root cause analysis (RCA) and permanent fixes.

• Network performance optimization: latency, jitter, packet loss and capacity planning.

• Change management: planned changes and upgrades outside market hours with rollback plans.

• Vendor management: ISPs, telecom carriers, OEMs, data centre and colocation providers; RMA and

escalations.

• Compliance: VAPT remediation, ISO 27001, SEBI CSCRF and exchange audit support.

• Automation and documentation: Python, Ansible, HLD / LLD, network diagrams, runbooks; mentor

junior network engineers.

Required Skills:

• 4–12 years of hands-on network engineering experience in data centre, WAN or enterprise

networks; trading, broking, stock exchange or financial services experience preferred.

• Expert in BGP and OSPF design and troubleshooting.

• Hands-on with LACP, MC-LAG, STP, VLAN, L3 switching and high-availability core network design.

• Experience with 100G networks, optics (SFP28 / QSFP28), DAC / AOC and fibre.

• Strong FortiGate firewall, SD-WAN, IPsec VPN and SSL VPN experience.

• Experience with MPLS, ILL and P2P links and working with ISPs and telecom providers.

• Good working knowledge of IP multicast.

• Expert packet analysis (tcpdump, Wireshark), port mirroring and Linux command line.

• Colocation and data centre experience: cross-connects, remote hands, rack and cabling design.

Behavioural Competencies:

• Highly committed, with strong ownership and accountability.

• Proactive: identifies and fixes issues before they impact trading.

• Fixes incidents quickly and resolves them at the root cause.

• Thinks outside the box to solve complex network problems.

• Focus on continuous optimization of performance, cost and reliability.

• Strong vendor handling and negotiation skills.

• Thrives in a fast-paced, high-pressure trading environment; calm during live incidents.

• Clear communication with traders, developers, exchanges and vendors.

• Willing to support Indian and US market hours, on-call rotation and site travel.

Good to Have:

• NSE / BSE / MCX colocation or US exchange venue experience.

• Arista EOS, Cisco Nexus and L1 switching experience.

• Solarflare / AMD X3 NICs, PTP and latency measurement tools.

• Understanding of market data and order-entry flows.

• Certifications: CCNP / CCIE, Fortinet NSE 4–7 (FCP / FCSS), Arista ACE.

Key Skills:

Network Architect, Senior Network Engineer, HFT, High Frequency Trading, Low Latency, NSE, BSE, MCX,

Colocation, Data Centre, US Network, 100G, BGP, OSPF, MPLS, ILL, P2P Links, LACP, MC-LAG, MLAG, vPC,

Core Switch, L3 Switch, L1 Switch, Arista, Fusion, Cisco Nexus, FortiGate, FortiGate 90G, FortiGate 120G,

FortiGate 200G, SD-WAN, IPsec VPN, SSL VPN, Remote Access VPN, Firewall, Multicast, PIM, IGMP, Port

Mirroring, SPAN, TAP, Packet Capture, Wireshark, tcpdump, PTP, NTP, Zabbix, SNMP, NetFlow, Root Cause

Analysis, Incident Management, Network Optimization, Vendor Management, Python, Ansible, Network

Automation, ISO 27001, SEBI CSCRF, VAPT

Interested can apply at [Confidential Information]