Network Security Engineer

We are seeking a Network Security Engineer to design, build, and operate critical production network infrastructure supporting a global trading environment.

This is a hands-on role within a small, high-performing infrastructure team. You will contribute to architectural decisions, deliver projects end-to-end, and support systems used directly by trading and research teams globally.

The role demands strong technical depth, operational discipline, and a structured approach to troubleshooting. You must be comfortable operating in a production environment where stability, performance, and controlled change management are essential.

Responsibilities:

· Design, implement, and support resilient enterprise network infrastructure across data center and cloud environments

· Contribute to network architecture and capacity planning in collaboration with global infrastructure teams

· Configure and manage routing and switching across core, edge, and data center networks (EIGRP, BGP, OSPF, VLANs, STP)

· Support global WAN connectivity, including carriers, exchanges, and third-party connectivity providers

· Monitor performance and availability; troubleshoot complex production issues and perform structured root cause analysis

· Implement and maintain network security controls, including segmentation, firewalls, and access policies

· Maintain accurate documentation, network diagrams, and operational standards

· Participate in an on-call rotation and provide escalation support for critical production incidents

Experience:

· 5+ years of hands-on experience in network engineering within complex, high-availability production environments and university degree in related domain.

· Strong expertise in routing and switching (EIGRP, BGP, OSPF, VLANs, STP, multicast)

· Proven experience designing enterprise network architecture and performing capacity planning

. SASE experience with tools like (Cato, Zscaler)

· Hands-on experience with NGFW (Palo Alto preferable)

· Strong troubleshooting capability across layers 1–4

· Experience with packet capture and analysis tools such as tcp dump and Wireshark

· Solid understanding of network security principles and implementation

· Experience managing WAN connectivity and working with carriers

· Experience operating within structured change control and incident management processes