Senior Engineer, Network Engineering (Core Networking)

Overview

Job PurposeIntercontinental Exchange, Inc. (ICE) presents a unique opportunity to work on cutting-edge technology and business challenges in the Financial Sector. The Senior Network Engineer provides a leadership role in core routing, switching and load balancing, supporting low-latency mission-critical financial networks. 

The successful candidate will be able to multitask in a dynamic team-based environment, demonstrating strong problem-solving and decision-making abilities and the highest degree of professionalism.

Responsibilities

• Design and deliver network solutions within a Private Cloud infrastructure; Public cloud experience is a plus.
• Execute controlled network changes across firewalls, load balancers, DDOS, WAF, and route/switching.
• Operate network changes using orchestration and automation products, tools, and scripts.
• Support and maintain multiple multi-vendor production network environments critical to the business.
• Manage and execute network and firewall requests in accordance with security policies on mission-critical infrastructure.
• Troubleshoot complex network issues and performance problems.
• Design, configure, and support real-time market data feeds over IP multicast and unicast.
• Research and design new networking solutions based on given requirements.
• Assist ICE staff with problem-solving and escalation procedures.
• Understand and follow operational policies/procedures and promote adherence to the same.
• Provide technical knowledge needed to ensure safe, effective, and efficient changes to the network infrastructure.
• Assist with the development of policies and procedures for maintaining network infrastructure.
• Collaborate and work closely with Cybersecurity, Systems engineering, and Datacenter engineering teams.
• Participate in a 24/7 on-call rotation.

Knowledge and Experience

• Design, configure and support core routing and switching infrastructure using BGP, OSPF, multicast and policy-based routing.
• Design, configure and support F5 LTM/GTM including traffic steering, persistence, SSL offload and high-availability configurations.
• Support Network Operating Systems and Product Technologies such as Palo Alto, Checkpoint, Juniper, Arista, Cisco, F5, Kemp, A-10, Cloudflare, Akamai, Fortinet, etc.
• Implement, enhance, and maintain network orchestration and automation-based products and solutions such as Ansible, Puppet, Chef, Vendor-based, etc.
• Network programming and scripting skills in Python, Bash, Perl, JSON, etc.
• Ability to identify, create, and deliver standards and best practice solutions.

Preferred

• B.S. in Computer Science/Information Technology or equivalent relative work experience.
• 5 years of relevant experience in the design, deployment, and support for large-scale, multi-vendor, secured networks.
• Extensive knowledge of three or more network operating systems/platforms including Junos, IOS/NX-OS, EOS, PANOS, IPSO, or F5 LTM/GTM.
• Knowledge of stateful packet inspection firewalls.
• Experience administering CDN and DDOS products such as Cloudflare, Akamai, Arbor, Imperva, or similar.
• Knowledge of Juniper MX/EX/QFX and Arista platforms.
• Expert TCP/IP, OSPF, and BGP routing skills.
• Expertise in packet capture, decode, and analysis.
• Extensive knowledge of multicast design and troubleshooting including IGMP and PIM protocols.
• Deep understanding of NAT, route maps/ACLs, routing policies, and IPSEC VPN.
• Experience coding with any combination of Perl, Ruby, Bash, Python, XML, JSON.
• Experience with automation/configuration management tools such as Ansible, Chef, and Puppet.
• Ability to multitask and work independently on multiple projects.
• Ability to differentiate between a critical business-impacting incident and a minor problem and resolve/escalate accordingly.
• Experience working on financial/HFT networks.
• Knowledge and skills with VXLAN and EVPN technologies.
• Juniper, Arista, or Cisco advanced certification.
• Firewall advanced certification.
• Unix/Linux system administration.
• Fluency with operating Splunk or other SIEM-based products.

Intercontinental Exchange, Inc. is an Equal Opportunity Employer.  All qualified applicants will receive consideration for employment without regard to legally protected characteristics. 

#LI-DC1

----------