Network Engineer
Hace 3 días
Mexico City
albo
Jornada completa
Gratis con email o Google
Guarda esta oferta y sigue tu búsqueda
Crea una cuenta gratis para guardar empleos, crear alertas y volver a esta oferta desde tu panel.
Gratis con email o Google
Al continuar, aceptas nuestros Términos & Política de Privacidad.
albo
albo is a leading fintech company offering financial products to individuals and SMBs with the mission to bring financial freedom to everyone, everywhere.
About the role
We are seeking a hands-on Network Engineer to own the network our financial products run on, across on-prem, GCP, AWS and private connections to partners. You will decide how traffic gets from A to B: addressing, routing, segmentation, DNS, firewalls and the internet edge. When a packet doesn't arrive, you are the person who finds out why. We run the network as code, so your changes are versioned, reviewed and applied through a pipeline. What You Will Do
• Network Design: Own the IP addressing plan and network segmentation, and evolve our topology towards a central ingress/egress hub.
• Routing & Connectivity: Design and operate site-to-site IPsec VPNs with dynamic routing (BGP), private connectivity across clouds and with partners, and NAT, with redundancy and tested failover.
• Firewalls & Remote Access: Operate cloud-native and next-generation firewalls (FortiGate, Palo Alto or similar) and remote-access VPN, implementing policies defined with the Information Security team.
• DNS: Own public, private and split-horizon DNS across clouds and providers.
• Load Balancing & Edge: Operate L4/L7 load balancing, TLS termination, WAF and rate limiting, and reverse proxies.
• Troubleshooting & Observability: Diagnose connectivity, latency and DNS issues with packet captures and flow logs, build network alerts and dashboards, and lead the network side of incident response.
• Network as Code: Manage network changes with Terraform and pull requests, script repetitive operations, and help make common requests such as IP allowlists self-service.
• Collaboration: Work closely with Platform, DevOps and Information Security, and document the network in runbooks and diagrams so it never depends on a single person. About You & Required Skills
• 4+ years in a network engineering role, designing and operating production networks. Cloud or DevOps backgrounds count only if networking was the core of the job.
• Strong fundamentals: TCP/IP, subnetting/CIDR, routing (BGP path selection and route filtering), NAT, IPsec, DNS, TLS and HTTP.
• Packet-level troubleshooting with tcpdump/Wireshark, traceroute/mtr and dig, including MTU and asymmetric routing issues.
• Hands-on experience with firewalls and site-to-site VPNs.
• Hands-on cloud networking on GCP or AWS: VPCs, routes, firewall rules/security groups, load balancers and private connectivity.
• Working knowledge of Terraform and scripting (Python, Go or Bash). Strong network automation with Ansible or Python also counts.
• Clear communication and documentation, and an extreme ownership mindset.
• Based in Mexico City, with availability to work on-site. Nice to Have
• Kubernetes networking (Services, Ingress, NetworkPolicies) and NGINX.
• Certifications such as CCNP/CCIE, Google Professional Cloud Network Engineer, AWS Advanced Networking or Fortinet NSE.
• Experience in regulated environments such as financial services or payments.
• Experience using AI tools to automate network operations and troubleshooting.
Salary:
TBD
About the role
We are seeking a hands-on Network Engineer to own the network our financial products run on, across on-prem, GCP, AWS and private connections to partners. You will decide how traffic gets from A to B: addressing, routing, segmentation, DNS, firewalls and the internet edge. When a packet doesn't arrive, you are the person who finds out why. We run the network as code, so your changes are versioned, reviewed and applied through a pipeline. What You Will Do
• Network Design: Own the IP addressing plan and network segmentation, and evolve our topology towards a central ingress/egress hub.
• Routing & Connectivity: Design and operate site-to-site IPsec VPNs with dynamic routing (BGP), private connectivity across clouds and with partners, and NAT, with redundancy and tested failover.
• Firewalls & Remote Access: Operate cloud-native and next-generation firewalls (FortiGate, Palo Alto or similar) and remote-access VPN, implementing policies defined with the Information Security team.
• DNS: Own public, private and split-horizon DNS across clouds and providers.
• Load Balancing & Edge: Operate L4/L7 load balancing, TLS termination, WAF and rate limiting, and reverse proxies.
• Troubleshooting & Observability: Diagnose connectivity, latency and DNS issues with packet captures and flow logs, build network alerts and dashboards, and lead the network side of incident response.
• Network as Code: Manage network changes with Terraform and pull requests, script repetitive operations, and help make common requests such as IP allowlists self-service.
• Collaboration: Work closely with Platform, DevOps and Information Security, and document the network in runbooks and diagrams so it never depends on a single person. About You & Required Skills
• 4+ years in a network engineering role, designing and operating production networks. Cloud or DevOps backgrounds count only if networking was the core of the job.
• Strong fundamentals: TCP/IP, subnetting/CIDR, routing (BGP path selection and route filtering), NAT, IPsec, DNS, TLS and HTTP.
• Packet-level troubleshooting with tcpdump/Wireshark, traceroute/mtr and dig, including MTU and asymmetric routing issues.
• Hands-on experience with firewalls and site-to-site VPNs.
• Hands-on cloud networking on GCP or AWS: VPCs, routes, firewall rules/security groups, load balancers and private connectivity.
• Working knowledge of Terraform and scripting (Python, Go or Bash). Strong network automation with Ansible or Python also counts.
• Clear communication and documentation, and an extreme ownership mindset.
• Based in Mexico City, with availability to work on-site. Nice to Have
• Kubernetes networking (Services, Ingress, NetworkPolicies) and NGINX.
• Certifications such as CCNP/CCIE, Google Professional Cloud Network Engineer, AWS Advanced Networking or Fortinet NSE.
• Experience in regulated environments such as financial services or payments.
• Experience using AI tools to automate network operations and troubleshooting.
Salary:
TBD