Responsibilities

Business Title : Expert Network Engineer

Key Major Function

Finastra is currently seeking a Expert Network Engineer for our organization. Reporting to the Senior Manager, Network Engineering, this position is responsible for modernization of network connectivity solutions that service customer technology and enterprise domains. The chosen candidate will work with internal IT teams, and strategic partners to design and deliver connectivity solutions that service Finastra's global client and partner base.

This as a superb opportunity to make a positive impact within the fin-tech industry. Accordingly, the ideal candidate should be forward thinking, and detail-oriented with a strong desire to work with highly technical peers within a collaborative environment.

• Lead or contribute to low-level planning milestones. Responsible for the following tasks: bill of material compilation, quoting, proof of concept (design and delivery), pilot, and production rollout.
• Meticulous implementation planning requires detailed change request submittals and pre-post/implementation validation planning.
• Design and implement against the following technologies and platforms - Akamai Web App Firewall, Cisco (Catalyst and Nexus) platforms, FortiGate, FortiManager, FortiAnalyzer, Cisco ISE, F5 LTM, MPLS, and SD-WAN.
• Design and deliver against Finastra product needs within Microsoft Azure Cloud, specifically: Azure Load Balancer, Application Gateway, Virtual NAT (Network Address Translation), Service and Private Link, NSG (Network Security Group), Basic and Standard IP allocation, VNET (Virtual Network), VPN Gateway, VWAN (Virtual WAN hub), and ExpressRoute.
• Lead or contribute to modernization efforts to enable business outcomes. Use cases: Finastra client or 3rd Party Partner to Finastra connectivity needs (on-premises to on-premises, cloud to cloud, or on-premises to cloud).
• Lead design tasks: compile/present connectivity options for leadership and peer consumption using Microsoft PowerPoint, Excel, and Visio.
• Create SOPs (Standard Operating Procedures) that define operating parameters of newly created or existing connectivity and ancillary network solutions.
• Mentor peers within Network Operations and facilitate Operational Handoff meeting to socialize new design and enhancement details. Including Go-Live specifics - design review, field Q&A sessions, and perform Operational Checklist tasks before solution handoff to NetOps.
• Leverage in depth network switching, routing, security hands on knowledge, working experience of routing protocols - Static, OSPF, BGP, to deliver against business outcomes and operational excellence targets for uptime availability SLAs.
• Plan, design, and implement Spine-Leaf, EVPN-VXLAN architecture in Datacenters.
• Working knowledge of IPAM (IP address management) tools - Infoblox a plus.
• Proficient planning for circuit activations - Internet and MPLS, to include activation implementation tasks.
• Web App Firewall (WAF) workstreams include certificate requirements gathering, lead application discovery workstreams with Product and Product Security teams. Deliver against on-boarding application onboarding prerequisites - gathering application URL/URI data, and adherence to certificate deployment policy.
• Implement new load-balancing elements - virtual appliance in Azure or hardware (on-premises). Create/modify front/back-end network elements to support application and service load-balancer needs.
• Plan, design, and deliver against SD-WAN (Software Defined Wide Area Network) roadmap targets. Utilize the configuration templates, Cisco vManage, centralized policies to design an optimal network.
• Work within an AGILE framework as Scrum Master or Team member.
• Submit Procurement Intake Requests per process for quoting network needs with vendors and partners.
• Jointly solution with Solutions Architecture team
• Role requires up to 10% business travel
• Occasional non-business hours support required driven by business requirements - project demand and Tier IV Ops Support.
• Expecting Flexible working hours - Primarily European hours which overlaps with India/Asia and North America.

• Network Routing, Switching, Security, Datacenter technologies.
• Functional and working knowledge of internetworking IETF (Internet Engineering Task Force) standards - Ethernet and IP routing protocols
• Applied working experience utilizing the OSI model to troubleshoot complex operational issues
• Microsoft Azure, cloud design and implementation experience is a requirement
• Load-balancing design experience and troubleshooting is required
• Web application firewall concepts and delivery experience required
• Automation skills - Python, Ansible/Terraform desired
• Foundational knowledge of DNS, DHCP (Domain Host Control Protocol), and TCP/IP (Transmission Control Protocol / Internet Protocol)
• Foundational knowledge of wireless and remote authentication constructs required.

• 4-year undergraduate degree or equivalent work experience
• AGILE and/or ITIL certified is a plus
• Excellent oral and written communication skills
• Customer focused with great interpersonal skills
• Highly adaptable and flexible; ability to delivery in a dynamic environment
• Self-starter and highly accountable
• Experienced using Microsoft Office products - Excel, PowerPoint, Visio, and Word.
• Data driven and results oriented

• Azure Load balancers, VNET, Express route (3 to 4 years)
• SDWAN (3 to 4 years)
• BGP, OSPF (8+ years)
• NAT (8+ years)
• On prem network experience (8+ years)
• Cloud network exposure (3 to 4 years)
• MPLS, DIA (8+ years)
• Routing (8+)
• Switching (8+
• OSI, TCP/IP (8+)
• Cisco Nexus, Catalyst, Datacenter technologies (6+)
• Enterprise network planning, design, implementation, troubleshooting (8+)

1. CCNP (R&S) - Routing & Switching
2. CCIE Any Specialization