Example Company
Software engineer
- Location
- San Francisco
- Type
- Full time
- Compensation
- $150k-$200k
- Posted
- 2 days ago
Join a team building useful software. Work closely with engineering and design to turn new ideas into products.
Loading job details
Network Engineer
- Location
- Mexico City · Remote
- Type
- Full time
- Posted
- 14D AGO
About the role
albo
albo is a leading fintech company offering financial products to individuals and SMBs with the mission to bring financial freedom to everyone, everywhere.
About the role
We are seeking a hands-on Network Engineer to own the network our financial products run on, across on-prem, GCP, AWS and private connections to partners. You will decide how traffic gets from A to B: addressing, routing, segmentation, DNS, firewalls and the internet edge. When a packet doesn't arrive, you are the person who finds out why. We run the network as code, so your changes are versioned, reviewed and applied through a pipeline.
What You Will Do
- Network Design: Own the IP addressing plan and network segmentation, and evolve our topology towards a central ingress/egress hub.
- Routing & Connectivity: Design and operate site-to-site IPsec VPNs with dynamic routing (BGP), private connectivity across clouds and with partners, and NAT, with redundancy and tested failover.
- Firewalls & Remote Access: Operate cloud-native and next-generation firewalls (FortiGate, Palo Alto or similar) and remote-access VPN, implementing policies defined with the Information Security team.
- DNS: Own public, private and split-horizon DNS across clouds and providers.
- Load Balancing & Edge: Operate L4/L7 load balancing, TLS termination, WAF and rate limiting, and reverse proxies.
- Troubleshooting & Observability: Diagnose connectivity, latency and DNS issues with packet captures and flow logs, build network alerts and dashboards, and lead the network side of incident response.
- Network as Code: Manage network changes with Terraform and pull requests, script repetitive operations, and help make common requests such as IP allowlists self-service.
- Collaboration: Work closely with Platform, DevOps and Information Security, and document the network in runbooks and diagrams so it never depends on a single person.
About You & Required Skills
- 4+ years in a network engineering role, designing and operating production networks. Cloud or DevOps backgrounds count only if networking was the core of the job.
- Strong fundamentals: TCP/IP, subnetting/CIDR, routing (BGP path selection and route filtering), NAT, IPsec, DNS, TLS and HTTP.
- Packet-level troubleshooting with tcpdump/Wireshark, traceroute/mtr and dig, including MTU and asymmetric routing issues.
- Hands-on experience with firewalls and site-to-site VPNs.
- Hands-on cloud networking on GCP or AWS: VPCs, routes, firewall rules/security groups, load balancers and private connectivity.
- Working knowledge of Terraform and scripting (Python, Go or Bash). Strong network automation with Ansible or Python also counts.
- Clear communication and documentation, and an extreme ownership mindset.
- Based in Mexico City, with availability to work on-site.
Nice to Have
- Kubernetes networking (Services, Ingress, NetworkPolicies) and NGINX.
- Certifications such as CCNP/CCIE, Google Professional Cloud Network Engineer, AWS Advanced Networking or Fortinet NSE.
- Experience in regulated environments such as financial services or payments.
- Experience using AI tools to automate network operations and troubleshooting.
