Network Engineer (Financial services/Electronic trading)
Role details
Job location
Tech stack
Job description
In an era where digitalisation and modern IT infrastructure is revolutionizing banking, we are shaping a technol-ogy-driven bank in which you as an IT professional will work closely with our business units. Our technology teams offer you an environment that will present you with exciting challenges - be it through the support and further development of legacy systems or the introduction of modern technologies such as AI, machine learning and highly automated trading applications., As a Senior Network you will be contributing to the design, implementation, and maintenance of a highly availa-ble, secure, and scalable enterprise network infrastructure critical to trading and core operations. This position requires deep, practical expertise in Layer 3 routing and BGP on Arista platforms and Fortinet security devices. The successful candidate will play a critical role in translating architectural designs into operational reality, collaborating closely with the Lead Network Architect, and driving operational excellence while adhering to strict financial compliance and security standards., * Architectural Collaboration: Work directly with the Lead Network Architect to review High-Level De-signs, provide technical feasibility assessments, and translate the architecture into detailed Low-Level Designs (LLDs) and implementation plans (e.g. using NetBrain)
- Lead the deployment and configuration of core network infrastructure projects focused on scalability and high availability, e.g. new exchange / trading venue connectivity via datacentre cross-connects
- Administer and maintain the enterprise security posture using Fortinet devices, ensuring policy en-forcement aligns with security principles like PoLP.
- Provide 3rd-line escalation support for all critical network incidents.
- Develop and enforce network standards, policies, and operational procedures, ensuring adherence to internal risk controls and external regulatory requirements.
- Onboard and setup new connectivity with new trading partners and venues
What we offer you:
- Private pension plan - 10% of base salary contribution by Berenberg
- Generous 30 day holiday allowance
- Private Health Insurance
- Life Insurance scheme
- Flexible working hours
- Enhanced parental leave policies
- Employee Assistance Programme offering counselling sessions related to mental health, financial wellbeing and other topics
Requirements
- Deep Expertise in BGP: Proven, hands-on experience designing, implementing, and troubleshooting complex Border Gateway Protocol (BGP) topologies, including route manipulation, path selection, multi-homing, and peering, VRF etc.
- Network Architecture: Demonstrated ability to design and implement highly resilient and scalable Lay-er 3 network architectures, including spine-and-leaf topologies, with a focus on low-latency and high-throughput environments (e.g., trading platforms).
- Arista Networks: Hands-on experience with configuration, operation, and advanced troubleshooting of Arista switches and routers, including experience with Arista EOS
- Principle of Least Privilege (Security Concept) & Zero Trust: Strong foundational knowledge and practi-cal experience in applying the Principle of Least Privilege (PoLP) & Zero Trust to network device access, network segmentation, and firewall rule creation to minimize the network attack surface in a regulated financial environment.
- Complex Troubleshooting: Ability to conduct deep-dive, packet-level analysis and root cause analysis (RCA) on complex, multi-protocol network issues across LAN, WAN, and Data Centre environments.
Nice-to-have:
Practical experience using Infrastructure as Code tools such as Terraform or Ansible for net-work configuration management, provisioning, and automated deployments.
Scripting: Proficiency in scripting languages, preferably Python, for network automation, API in-teraction, data manipulation, and custom tooling development.