NetOps Engineer

On behalf of our Client, a well-established financial institution from the Caribbean region Mobilunity is looking for a NetOps Engineer. 

Our Client is the largest bank in the Caribbean region that serves 14 countries/territories. The aim is to make this organization from a traditional bank into a new era of fintech, working on the edge of what current fintech may offer.

The NetOps Engineer is a critical role within our modern engineering organization, responsible for architecting, building, automating, and maintaining the network infrastructure that underpins our hybrid cloud environments, on-premise systems, and distributed branches. This individual will be a key member of an independent NetOps team, working in close collaboration with DevOps, Product Security, AQA, and Cloud Engineering teams. The role also involves extending the capabilities of the existing on-prem network function, focusing on new, scalable, and automated solutions.

Leveraging tools like Ansible and Infrastructure as Code (IaC) principles, the NetOps Engineer will drive the development of autonomous, resilient, and secure connectivity across all environments. This will empower our product teams to innovate and deploy rapidly, reducing dependency on traditional, manual network workflows.

Key Responsibilities:

Network Automation:

• Design, develop, and implement automation for network configuration, deployment, updates, and management using Ansible, Python, and Git-based workflows.
• Champion and implement Infrastructure as Code (IaC) principles for all network components, replacing manual network operations.
• Build and maintain reusable automation playbooks and modules for provisioning and managing cloud (AWS, Azure), branch, and edge network infrastructure.

Hybrid & Branch Connectivity:

• Design, implement, and manage secure and resilient network connectivity across AWS, Azure, on-premise data centers, and distributed office/branch locations.
• Lead the configuration and troubleshooting of site-to-site VPNs (IPSec, SSL), firewalls (including Fortigate, CheckPoint), dynamic routing protocols (BGP, OSPF), and DNS.
• Develop and implement solutions for bootstrapping cloud-integrated branch networks to support modern application delivery and edge computing needs.

Cloud Networking:

• Architect, deploy, and manage advanced network solutions within AWS (e.g., VPC, Transit Gateway, Direct Connect, Route 53, Security Groups, NACLs, ELB/ALB/NLB) and Azure (e.g., VNet, ExpressRoute, Azure Firewall, Azure Load Balancer, NSGs, UDRs).
• Ensure secure and optimized hybrid connectivity between on-premise and cloud environments.

Monitoring, Troubleshooting & Performance:

• Implement and manage comprehensive network monitoring, logging, and alerting solutions (e.g., CloudWatch, Azure Monitor, ELK Stack, Prometheus, SolarWinds, Nagios) to ensure network performance, availability, and visibility across hybrid environments.
• Proactively diagnose, troubleshoot, and resolve complex network issues across cloud, on-prem, and edge networks efficiently, utilizing packet capture and analysis techniques.

Security and Compliance:

• Integrate network security controls (e.g., ACLs, micro-segmentation, encrypted tunnels, WAF) into automation pipelines and network designs.
• Collaborate closely with Product Security teams to implement and align with zero trust security principles and organizational security standards and frameworks (e.g., NIST, CIS, ISO 27001).
• Maintain version-controlled, auditable network configurations and comprehensive documentation for all network systems and procedures.

Collaboration and Scale:

• Act as a key liaison and technical expert, bridging modern engineering teams (DevOps, SRE, Product) with traditional network operations where applicable.
• Collaborate with product, QA, and DevOps teams to design and implement scalable, secure, and automated network solutions that meet their evolving requirements.
• Focus on enhancing and extending the capabilities of the existing on-prem network infrastructure with modern, automated solutions.

Incident Management:

• Participate actively in incident response and resolution for network-related outages, performance degradation, or security anomalies.
• Conduct root cause analysis (RCA) for network incidents and implement preventative measures and automation to minimize future occurrences.

Requirements:

• Proven experience as a Network Engineer, NetOps Engineer, or in a similar role with a strong focus on automation in hybrid or cloud-native environments.
• Proficiency with Ansible for network automation and experience with version-controlled (Git) infrastructure and automation workflows.
• Strong hands-on experience with Cisco routing and switching (e.g., Catalyst, Nexus, IOS/NX-OS).
• Significant experience with CheckPoint firewalls (e.g., Gaia, R8x, SmartConsole) and Fortigate VPN firewalls, including configuration, policy management, and troubleshooting.
• In-depth understanding of core networking fundamentals: TCP/IP, Subnetting, DNS, DHCP, NAT, LAN/WAN.
• Strong knowledge of dynamic routing protocols (e.g., BGP, OSPF, EIGRP).
• Demonstrable hands-on experience with AWS (VPC, Transit Gateway, Direct Connect, Security Groups, etc.) and/or Azure (VNet, ExpressRoute, Azure Firewall, NSGs, etc.) networking services./
• Experience managing edge network devices (e.g., Fortinet, Cisco, Palo Alto Networks).
• Excellent analytical, problem-solving, and troubleshooting skills.
• Level of English – Upper-Intermediate and higher.
• Bachelor’s degree in Computer Science, Information Technology, Telecommunications, or equivalent practical experience.

Nice to have:

• Relevant industry certifications such as: Cloud: AWS Certified Advanced Networking – Specialty, Microsoft Certified: Azure Network Engineer Associate; Cisco: CCNP (Enterprise/Security/Data Center); CheckPoint: CCSA, CCSE; Fortinet: NSE 4+, NSE 7.
• Experience with Infrastructure as Code (IaC) tools beyond Ansible, such as Terraform or CloudFormation/ARM Templates.
• Proficiency in scripting languages (e.g., Python, PowerShell, Bash) for network automation and API integration.
• Experience with SD-WAN technologies and Zero Trust Network Access (ZTNA) concepts and solutions.
• Familiarity with integrating network automation into CI/CD pipelines (e.g., Jenkins, GitLab CI).
• Experience working in regulated environments such as banking, financial services, or healthcare.
• Knowledge of container networking (e.g., Kubernetes networking).

In return we offer:

• The friendliest community of like-minded IT-people
• Open knowledge-sharing environment – exclusive access to a rich pool of colleagues willing to share their endless insights into the broadest variety of modern technologies
• Mobilunity Medical Insurance program designed to attend our teams’ needs
• Paid vacations and sick leaves, including 5 paid days per year that don’t require a sick note
• Perfect office location in the city-center (900m from Lukyanivska metro station with a green and spacious neighborhood) or remote mode engagement: you can choose a convenient one for you, with a possibility to fit together both
• No open-spaces setup – separate rooms for every team’s comfort and multiple lounge and gaming zones
• English classes in 1-to-1 & group modes with elements of gamification
• Neverending fun: sports events, tournaments, music band, multiple affinity groups

Come on board, and let’s grow together!