Network Engineer

Required Experience :

- 5 years in network engineering and security roles with F5 load balancer experience

- 4 years specific experience with cloud networking and security (GCP preferred)

- 3 years experience with infrastructure migrations or datacenter-to-cloud transitions

- 3 years hands-on experience with site-to-site VPNs and hybrid connectivity

- Experience with Splunk and enterprise security systems in large environments

- Background in financial services or highly regulated industries preferred

- Certifications in networking (CCNA/CCNP) or cloud security preferred but not required

Network Architecture & Design :

- Cloud Network Design : Design secure, scalable network architecture in GCP including VPCs, subnets, and network segmentation

- Hybrid Connectivity : Implement and manage secure connectivity between on-premises infrastructure and GCP environments

- Network Segmentation : Design and implement network segmentation strategies for different application tiers and environments

- Load Balancing : Configure and optimize load balancers for application availability and performance

- DNS & Traffic Management : Implement DNS strategies and traffic routing for seamless application migration

Security Implementation & Compliance :

- Security Framework : Implement comprehensive security controls aligned with FinTech regulatory requirements

- Identity & Access Management : Configure IAM policies, service accounts, and role-based access controls in GCP

- Firewall Management : Design and implement firewall rules, security groups, and network access controls

- Encryption : Ensure data encryption in transit and at rest across all network communications

- Compliance Monitoring : Implement security monitoring and compliance validation tools

Network Connectivity & Integration :

- VPN Configuration : Configure and manage site-to-site VPN connections between on-premises and cloud environments

- Network Migration : Plan and execute network configuration migration for applications moving from Hyper-V to GCP

- External Integrations : Secure network connectivity for external API integrations and third-party services

- Multi-Environment Networking : Implement consistent network configurations across Dev/QA/Staging/Production environments

- Network Troubleshooting : Diagnose and resolve network connectivity and performance issues

Security Monitoring & Incident Response :

- Security Monitoring : Implement continuous security monitoring and threat detection systems

- Vulnerability Management : Conduct regular security assessments and vulnerability scanning

- Incident Response : Develop and implement security incident response procedures

- Security Logging : Configure comprehensive security logging and SIEM integration

- Compliance Reporting : Generate security compliance reports and audit documentation

Required Technical Skills :

Network Technologies :

- Cloud Networking : 3 years hands-on experience with GCP networking services (VPC, Cloud Load Balancing, Cloud NAT)

- Network Protocols : Deep understanding of TCP/IP, routing protocols, VLANs, and network fundamentals

- VPN Technologies : Experience with site-to-site VPNs, IPSec, and secure tunnel configurations

- Load Balancing : Proficiency with cloud load balancers and traffic distribution strategies

- DNS Management : Experience with DNS configuration, management, and traffic routing

Security Technologies :

- Cloud Security : Strong experience with GCP security services (IAM, Security Command Center, Cloud Armor)

- Firewall Management : Expert-level experience with firewall configuration and network security controls

- Security Frameworks : Knowledge of security frameworks and compliance standards (SOC 2, PCI DSS, ISO 27001)

- Vulnerability Assessment : Experience with security scanning tools (Qualys, Nessus, or similar)

- SIEM Integration : Understanding of security information and event management systems

FinTech Security Requirements :

- Regulatory Compliance : Understanding of financial services regulatory requirements and security standards

- Data Protection : Knowledge of data privacy regulations and encryption requirements

- Risk Assessment : Experience conducting security risk assessments and threat modeling

- Audit Support : Experience supporting security audits and compliance assessments

- Incident Management : Knowledge of security incident response and forensic procedures

Technical Tools & Platforms :

- Monitoring Tools : Experience with network monitoring tools (Datadog, New Relic, Google Cloud Monitoring)

- Security Tools : Proficiency with security scanning and monitoring tools

- Automation : Scripting skills in Python, Bash, or PowerShell for network automation

- Infrastructure as Code : Understanding of Terraform for network and security resource provisioning

- Documentation : Proficiency with network diagramming tools (Visio, Lucidchart)

---