Senior Network Engineer

Your impact

• Own the multi-region AWS network architecture, including transit gateway topology, VPC design, address-space strategy, and routing across production, clearing, and platform environments.
• Design and enforce segmentation to isolate workload, corporate, and partner traffic, ensuring the network layer is delivered as code via Terraform and GitOps.
• Lead the transition to a zero trust / SASE access model, ensuring application-level access and strong device posture for a distributed engineering team.
• Collaborate closely with Security to translate threat models into durable network designs that meet regulated-industry standards and audit requirements.
• Own the partner connectivity estate, managing site-to-site VPNs, BGP peering, and Direct Connect circuits to financial-services counterparties.
• Manage office and edge networking, including ISP redundancy and connectivity standards for new locations.
• Define network observability and serve as the senior escalation point for incidents, disaster recovery, and cross-region failover.
• Apply an AI-native approach to network operations, using agentic workflows for audit, drift detection, and rapid analysis of configuration and flow data.
• Provide technical leadership by writing standards, reviewing designs across teams, and mentoring engineers to ensure network resiliency.

What you’ll bring

• Experience — 7+ years in network engineering, including 3+ in cloud-native environments. You have owned a production network, not just operated tickets against one.
  • Deep AWS networking: VPC design, Transit Gateway, Direct Connect, VPN, Route 53, PrivateLink, NAT and egress patterns, and security group design at scale.
  • Strong fundamentals — routing and BGP, IPsec, TLS, DNS, DHCP — and the ability to read a packet capture when a vendor says the problem is on your side.
  • Hands-on experience designing or operating network segmentation and traffic inspection, in cloud, on-prem, or hybrid.
  • Zero trust / SASE experience: ZTNA, secure web gateway, CASB, or device-posture-conditioned access. Zscaler, Netskope, or Prisma is a strong plus.
  • Terraform and infrastructure as code as your default, plus scripting ability (Python, Bash, or Go) and comfort with cloud APIs.
  • Working knowledge of Kubernetes networking — CNI behavior, ingress, service exposure, and where east-west traffic actually goes.
• An AI-native approach — a requirement, not a nice-to-have. You already use AI tooling to write and review code, analyze configuration and logs at scale, and reason about large estates, and you verify its output before it touches production.
• A security partnership mindset — you treat security requirements as design input, not obstacle, and can hold a technical disagreement with a security engineer and land somewhere better than where either of you started.
• Judgment and ownership — you have worked somewhere a change window is real, you document accepted risk rather than quietly leaving it undocumented, and you can hold your own with a partner’s network team on a bridge call.
• Education — ideally a B.A. / B.S. in Computer Science, Network Engineering, or a related field, but experience and understanding matter just as much.

Bonus points if you bring

• Financial services, brokerage, or another regulated industry — including connectivity to clearing, custody, banking, or market-data counterparties.
• Network integration through an acquisition or enterprise merger — address-space reconciliation and meeting a larger partner’s standards.
• Expertise with AI (Claude) best practices, including agentic workflows applied to infrastructure operations.
• Service mesh or API gateway operations; edge and CDN security (WAF, bot management); campus and branch networking.
• Certifications such as AWS Advanced Networking Specialty, CCNP/CCIE, or JNCIP.