Senior Network Engineer
Trumid, a fixed-income e-trading fintech, is hiring a Senior Network Engineer on its SRE team to own the full request delivery path end to end — data center edge gear, DNS, load balancing, and Envoy service mesh across AWS and GCP. Day to day: network automation (config-as-code with Ansible/Terraform), client connectivity (VPNs, cross-connects, FIX), failover drills, and observability.
- Compensation
- $225K–$250K / yr
- Location
- Remote
- Work setup
- Remote
- Seniority
- Senior
- Employment
- Not specified
- Experience
- Not specified
- Category
- Network engineering
- Posted
Skills
Must have
- 7+ years running production networks with physical gear: routing and switching, BGP, firewalls, circuits and cross-connects
- Real cloud networking depth in AWS or GCP: VPC design, transit gateways and peering, network load balancers, DNS, hybrid connectivity
- Automation habit: script anything done twice by hand, configs in Git, changes through review
- L4–L7 load balancing (HAProxy, NGINX, or Envoy), TLS termination, health checking, and enough Kubernetes to operate ingress confidently
- Reliability instincts: rehearse failovers proactively rather than discover them during incidents
- Clear writing and ability to work directly with clients' network teams
Nice to have
- Envoy or another service mesh in production; Kubernetes ingress at scale
- Cisco IOS-XE fleets, Palo Alto/Panorama, or network source-of-truth tooling (Infrahub, NetBox, Nautobot)
- Prometheus/Grafana/ELK-style observability stacks
Full description
**About us.
Trumid is a dynamic fintech revolutionizing the landscape of fixed income trading. With intelligent, easy-to-use, electronic solutions, we are rapidly growing and seeking exceptional talent to help redefine the boundaries of technology and finance.
Founded in 2014 by a team of fixed income market experts, Trumid has quickly become one of the top three corporate bond e-trading platforms in the U.S. Today, over 1,300 traders from an extensive and expanding client network of 890+ buy-and sell-side institutions transact on Trumid monthly.
With a rich history of innovation and a unique ability to innovate at scale, we collaborate closely with our clients, iterating quickly toward optimal solutions. With market share and client engagement at all-time highs and our pace of product development faster than ever, this is an exciting and transformative time at Trumid.
Our business model thrives on participation, and so does our company culture. We rely on every team member’s contribution to help us accomplish our goals. To succeed at Trumid, you must be curious, passionate about your craft, ambitious, collaborative, and driven. Learn more at
**The opportunity.
Site reliability is Trumid’s standing top technology priority, and connectivity is where it starts: if we or our customers can’t reach anything, nothing else matters. This role owns request delivery end to end, and the scope test is simple: if it has to be up for a request to reach the right service, it’s yours. That means the whole path — colo routers and switches, client circuits, VPNs and cross-connects, cross-cloud links, DNS, load balancers, and the Envoy service mesh.
You’d join the networking side of our SRE team, working alongside experienced network engineers. Some of what you’d walk into:
- A live migration of our trading edge onto HAProxy Kubernetes Ingress Controller — cut over in production one elastic IP at a time, each step reversible, each step qualified by synthetic trading traffic before real clients ride it.
- A network device fleet headed for full config-as-code: version-controlled, CI-validated configuration, centralized AAA, and a proper source of truth with IPAM.
- Client-connectivity request load that we are deliberately engineering away — standardized intake, per-client connectivity dashboards, and eventually self-service for the common low-risk changes. Your job is to automate this work out of existence, not to absorb it.
**What you’ll do?
- Own reliability across the full request delivery path — edge network gear, DNS, load balancing, service mesh — spanning our data centers, AWS, and GCP.