Citi
Senior Network Infrastructure Engineer
- Compensation
- Not disclosed
- Location
- Budapest Hungary
- Work setup
- Hybrid
- Seniority
- Senior
- Employment
- Full time
- Experience
- Not specified
- Category
- Devops
- Posted
Skills
Must have
- Deep hands-on expertise with Cisco routing and switching and their derivatives (Catalyst, Nexus, ASR, ISR) — must-have.
- Strong command of routing protocols: BGP, OSPF, EIGRP, IS-IS, and MPLS/L3VPN.
- Proven SDWAN design and operations experience in enterprise or B2B connectivity contexts.
- Solid enterprise networking background: Campus LAN, WAN design, datacenter networking, and redundancy protocols (HSRP/VRRP).
- B2B networking experience — BGP peering, partner interconnects, and cross-organization integration — is a must.
- Deep understanding of Check Point / Palo Alto / Fortinet and open-source firewall technologies, their management systems and capabilities.
- Understanding of security protocols: IPsec, SSL/TLS, VPN, routing protocols, IDS/IPS, Proxies, WAFs.
- Leverage open-source automation and coding tools such as Bash scripting, Python, Ansible.
- Ability to proactively identify and respond to security threats against managed infrastructure components.
- Strong hands-on experience with network devices, firewalls, and Linux systems; ability to mass-manage configurations and quickly troubleshoot security controls.
- Author and maintain comprehensive technical documentation on implemented security systems and processes.
- Excellent communication and interpersonal skills, with the ability to work effectively with cross-functional teams and stakeholders at all levels.
- Familiarity with datacenter networks, enterprise Campus LAN, and Kubernetes containerization is a plus.
- Familiarity with security best practices and standards: ISO 27001, NIST, CIS; frameworks such as SANS; certifications such as CCIE, CCNP, CISSP, CISM, PCNSE, or NSE are preferred.
Full description
Citi is looking for a Senior Network Infrastructure Engineer to join its Network and Client Infrastructure Services (NCIS) team, playing a key role in designing and delivering complex load balancing solutions that support global technology operations across the firm. In this role, you will translate technical and non-technical requirements into robust network designs, ensuring all solutions meet Citi's engineering standards and service delivery objectives. This is an opportunity to work at the intersection of infrastructure engineering and client service, collaborating with cross-functional teams across a large-scale global environment.
Responsibilities
- Design, configure, and implement Network Security and Network Engineering solutions — including SDWAN, firewall architectures, and routing/switching infrastructure — to meet Citi's security requirements.
- Architect and deploy enterprise routing solutions using Cisco routing and switching platforms, applying protocols such as BGP, OSPF, EIGRP, MPLS, and spanning-tree variants across enterprise and B2B environments.
- Design and operate SD-WAN solutions (e.g., Cisco Viptela, Versa, VeloCloud) across enterprise and B2B interconnects.
- Collaborate with cybersecurity professionals to evaluate and integrate new security technologies and vendors, designing robust security controls that meet business and regulatory requirements.
- Implement security best practices to maintain the highest level of security.
- Stay current with the latest cybersecurity and network engineering technologies and trends.
- Write technical guides, automation tools, working with vendor-provided utilities, and author, maintain, and update technical documentation, ensuring compliance with industry standards.
Required Qualifications & Skills
- Deep hands-on expertise with Cisco routing and switching and their derivatives (Catalyst, Nexus, ASR, ISR) — must-have.
- Strong command of routing protocols: BGP, OSPF, EIGRP, IS-IS, and MPLS/L3VPN.
- Proven SDWAN design and operations experience in enterprise or B2B connectivity contexts.
- Solid enterprise networking background: Campus LAN, WAN design, datacenter networking, and redundancy protocols (HSRP/VRRP).
- B2B networking experience — BGP peering, partner interconnects, and cross-organization integration — is a must.
- Deep understanding of Check Point / Palo Alto / Fortinet and open-source firewall technologies, their management systems and capabilities.
- Understanding of security protocols: IPsec, SSL/TLS, VPN, routing protocols, IDS/IPS, Proxies, WAFs.
- Leverage open-source automation and coding tools such as Bash scripting, Python, Ansible.
- Ability to proactively identify and respond to security threats against managed infrastructure components.