Senior Network Infrastructure Engineer
Employer · Citi
Network engineerCybersecurity specialistFull-timeBudapest
Citi is looking for a Senior Network Infrastructure Engineer to join its Network and Client Infrastructure Services (NCIS) team, playing a key role in designing and delivering complex load balancing solutions that support global technology operations across the firm. In this role, you will translate technical and non-technical requirements into robust network designs, ensuring all solutions meet Citi's engineering standards and service delivery objectives.
Tasks
- Design, configure, and implement Network Security and Network Engineering solutions --- including SDWAN, firewall architectures, and routing/switching infrastructure --- to meet Citi's security requirements.
- Architect and deploy enterprise routing solutions using Cisco routing and switching platforms, applying protocols such as BGP, OSPF, EIGRP, MPLS, and spanning-tree variants across enterprise and B2B environments.
- Design and operate SD-WAN solutions (e.g., Cisco Viptela, Versa, VeloCloud) across enterprise and B2B interconnects.
- Collaborate with cybersecurity professionals to evaluate and integrate new security technologies and vendors, designing robust security controls that meet business and regulatory requirements.
- Implement security best practices to maintain the highest level of security.
- Stay current with the latest cybersecurity and network engineering technologies and trends.
- Write technical guides, automation tools, working with vendor-provided utilities, and author, maintain, and update technical documentation, ensuring compliance with industry standards.
Conditions & benefits
Cafeteria ProgramHome Office AllowanceFor colleagues working in hybrid work modelsPaid Parental Leave ProgramMaternity and paternity leavePrivate Medical Care ProgramPrivate Medical Care Program and onsite medical rooms at our officesPension Plan ContributionContribution to voluntary pension fundGroup Life InsuranceEmployee Assistance ProgramLearning and development programsAccess to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed
Requirements
- Deep hands-on expertise with Cisco routing and switching and their derivatives (Catalyst, Nexus, ASR, ISR) --- must-have.
- Strong command of routing protocols: BGP, OSPF, EIGRP, IS-IS, and MPLS/L3VPN.
- Proven SDWAN design and operations experience in enterprise or B2B connectivity contexts.
- Solid enterprise networking background: Campus LAN, WAN design, datacenter networking, and redundancy protocols (HSRP/VRRP).
- B2B networking experience --- BGP peering, partner interconnects, and cross-organization integration --- is a must.
- Deep understanding of Check Point / Palo Alto / Fortinet and open-source firewall technologies, their management systems and capabilities.
- Understanding of security protocols: IPsec, SSL/TLS, VPN, routing protocols, IDS/IPS, Proxies, WAFs.
- Leverage open-source automation and coding tools such as Bash scripting, Python, Ansible.
- Ability to proactively identify and respond to security threats against managed infrastructure components.
- Strong hands-on experience with network devices, firewalls, and Linux systems; ability to mass-manage configurations and quickly troubleshoot security controls.
- Author and maintain comprehensive technical documentation on implemented security systems and processes.
- Excellent communication and interpersonal skills, with the ability to work effectively with cross-functional teams and stakeholders at all levels.