Network Engineer

albo

10d

About The Position

albo is a fintech company offering financial products to individuals and SMBs. The Network Engineer will join the Infrastructure team and own the network layer of albo’s multi-cloud platform across GCP and AWS, including VPCs, private connectivity, DNS, load balancers, and edge protection. The role emphasizes managing network infrastructure as code, with changes versioned, reviewed through pull requests, and applied through pipelines. The engineer will also bring network capabilities into Keymaker, albo’s Internal Developer Platform, enabling engineering teams to request changes such as IP allowlists through self-service.

Requirements

• At least 2 years of experience in a Network Engineering, Cloud Engineering, or DevOps/SRE role with a strong networking focus.
• Solid networking fundamentals, including TCP/IP, subnetting/CIDR, routing (BGP basics), NAT, DNS, TLS, and HTTP.
• Hands-on experience with Infrastructure as Code using Terraform.
• Hands-on scripting experience in Python, Go, or Bash to automate network tasks.
• Hands-on experience with cloud networking on GCP and/or AWS, including VPCs, firewall rules/security groups, load balancers, private connectivity, and VPN.
• Familiarity with Kubernetes networking, including Services, Ingress, and NetworkPolicies; reverse proxies such as NGINX; and edge controls such as Cloud Armor or AWS WAF.
• Excellent communication and documentation skills.
• Eagerness to keep growing and an extreme ownership mindset.
• An automation-first approach to network operations.

Nice To Haves

• Experience leveraging AI tools to automate network operations and troubleshooting.
• Certifications such as Google Professional Cloud Network Engineer, AWS Certified Advanced Networking, or CCNA/CCNP.

Responsibilities

• Design, operate, and evolve cloud networking across GCP and AWS, including Shared VPC, VPC peering, Private Service Connect, Cloud NAT, Cloud VPN/Interconnect, and private DNS, moving toward a central ingress/egress hub architecture.
• Codify network infrastructure with Terraform and automate repetitive tasks such as DNS records, firewall rules, and IP allowlists using Python or Go and GitOps workflows.
• Operate Google Cloud Load Balancing, Cloud Armor, IAP, and NGINX-based private proxies on GKE, implementing policies defined with the Information Security team.
• Use VPC Flow Logs, Cloud Logging, and Datadog to diagnose connectivity, latency, and DNS issues; build network alerts and dashboards; and lead the network side of incident response.
• Work with Platform, DevOps, and Information Security teams.
• Document the network in runbooks and diagrams so network operations do not depend on a single person.
• Bring network capabilities into Keymaker to enable self-service requests such as IP allowlists.
• Automate network operations, aiming to reduce manual changes and incidents and improve turnaround time on network requests.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed