Network Engineer
Role details
Job location
Tech stack
Job description
rewrite the story of data sovereignty.Role overview We are seeking a Senior Network Engineer (L3) to design, implement, and operate resilient, high-performance, and cost-efficient network infrastructure that supports both internal platforms and customer-facing services.Operating at Layer 3 escalation and engineering depth, this role is part of a collaborative engineering team responsible for delivering robust, scalable, and secure network solutions. The successful candidate will contribute to and influence network designs through governance forums (TDA / peer review), produce and implement High-Level and Low-Level Design (HLD/LLD) documentation, and adhere to structured Service Design and Service Transition principles.The role includes the delivery of modern spine-leaf and perimeter network architectures, with a strong focus on operational readiness, scalability, and long-term maintainability.This is a hands-on senior engineering position focused on technical depth, implementation, and operational excellence. It is not an architecture-only role, nor is it a ticket-based NOC position.What you'll doContribute to peer-reviewed network designs and implement approved HLD/LLD artefacts to ensure scalable, resilient, and standards-aligned infrastructure is delivered correctly the first time.Deploy and validate spine-leaf and enterprise routing architectures to support high-performance data centre and customer environments without introducing instability or technical debt.Adhere to governance frameworks (TDA, peer reviews, change control) to prevent uncontrolled configuration drift and ensure long-term maintainability.Engineer and optimise complex routing environments (BGP, OSPF, EIGRP, MPLS, advanced L2/L3 protocols) to guarantee deterministic failover, predictable convergence, and sustained network stability at scale.Diagnose and resolve deep routing and switching issues at Layer 3 to minimise downtime, eliminate recurring faults, and protect service availability.Engineer and administer enterprise firewall platforms (Palo Alto, Fortinet, Cisco) to enforce structured, secure, and auditable perimeter controls that protect customer and internal services.Design and maintain clean, segmented network zones and rule bases to reduce attack surface, prevent rule sprawl, and support evolving security strategy.Lead technical investigations during high-severity outages to protect platform resilience and restore service with confidence and precision.Produce and maintain accurate HLD/LLD documentation, topology diagrams, and configuration standards to eliminate tribal knowledge and enable operational readiness from Day 1.Ensure all network changes transition through Service Design, Service Transition and Change Management principles to avoid undocumented risk and operational fragility.Identify and implement automation opportunities to reduce manual configuration risk, improve deployment consistency, and increase engineering efficiency at
Requirements
scale.Continuously review network performance, resilience, and cost posture to improve reliability while optimising infrastructure spend.What are we looking for Technical Skills7+ years hands-on network engineering experience in enterprise, service provider, or data centre environments.Demonstrated ownership of production routing and switching environments, not limited to support or monitoring roles.Proven experience implementing and supporting BGP, OSPF, MPLS, and advanced Layer 2/3 architectures in live environments.Hands-on experience administering and engineering enterprise firewall platforms (Palo Alto, Fortinet, Cisco ASA or equivalent).Experience operating as a Tier 3 escalation point, leading deep technical diagnostics and contributing to root cause analysis.Experience working within structured engineering frameworks involving HLD, LLD, peer review, and controlled service transition.Strong documentation, runbook and process design skills.Exposure to automation or configuration standardisation practices in network environments.Experience & education Strongly preferredCisco CCNP Enterprise (or equivalent advanced routing certification)PCNSE (Palo Alto Networks Certified Network Security Engineer) or equivalent Fortinet certification (e.g., NSE4/NSE7)Highly regardedCisco CCIE (any track)Relevant MPLS or Service Provider certificationsSoft SkillsVery good problem-solving skills, open mind towards feedback, and can-do attitude.Self-motivated and self-managing, with excellent organisational skills.Clear communication, documentation, and cross-team collaboration skills.What's in it for youPrivate life and health insurance for you and your family.Four weeks per year to work from anywhere for eligible employees.Learning Pocket for personal development.A hybrid working model with flexible hours.", "employmentType": "FULL_TIME", "industry": "Network Engineer", "jobLocation" : { "@type": "Place", "address": { "@type": "PostalAddress", "streetAddress": "Málaga", "addressLocality": "Málaga", "addressRegion": "Málaga", "addressCountry": "ES", "postalCode": "n/a" } }, "salaryCurrency": "EUR", "title": "Senior network engineer", "hiringOrganization" : { "@type" : "Organization", "name" : "Ilkari" } }