We are seeking a Network Security Engineer to design, build, and operate critical production network infrastructure supporting a global trading environment.

This is a hands-on role within a small, high-performing infrastructure team. You will contribute to architectural decisions, deliver projects end-to-end, and support systems used directly by trading and research teams globally.

The role demands strong technical depth, operational discipline, and a structured approach to troubleshooting. You must be comfortable operating in a production environment where stability, performance, and controlled change management are essential.

Responsibilities:
• Design, implement, and support resilient enterprise network infrastructure across data center and cloud environments
• Contribute to network architecture and capacity planning in collaboration with global infrastructure teams
• Configure and manage routing and switching across core, edge, and data center networks (EIGRP, BGP, OSPF, VLANs, STP)
• Support global WAN connectivity, including carriers, exchanges, and third-party connectivity providers
• Monitor performance and availability; troubleshoot complex production issues and perform structured root cause analysis
• Implement and maintain network security controls, including segmentation, firewalls, and access policies
• Maintain accurate documentation, network diagrams, and operational standards
• Participate in an on-call rotation and provide escalation support for critical production incidents

Experience:
• 5+ years of hands-on experience in network engineering within complex, high-availability production environments and university degree in related domain.
• Strong expertise in routing and switching (EIGRP, BGP, OSPF, VLANs, STP, multicast)
• Proven experience designing enterprise network architecture and performing capacity planning

. SASE experience with tools like (Cato, Zscaler)
• Hands-on experience with NGFW (Palo Alto preferable)
• Strong troubleshooting capability across layers 1-4
• Experience with packet capture and analysis tools such as tcp dump and Wireshark
• Solid understanding of network security principles and implementation
• Experience managing WAN connectivity and working with carriers
• Experience operating within structured change control and incident management processes