Network Engineer

albo

albo is a leading fintech company offering financial products to individuals and SMBs with the mission to bring financial freedom to everyone, everywhere.

About the role

We are seeking a hands-on Network Engineer with an automation mindset to join our Infrastructure team. You will own the network layer of our multi-cloud platform (GCP and AWS): VPCs, private connectivity, DNS, load balancers and edge protection. Rather than operating it by hand, you will turn it into code: every route, firewall rule, DNS record and edge policy should be versioned, reviewed through a pull request and applied by a pipeline. You will also bring network capabilities into our Internal Developer Platform (IDP), known internally as Keymaker, so engineering teams can request changes such as IP allowlists through self-service instead of tickets.

What you’ll be doing at albo:

Cloud Networking: Design, operate, and evolve our network across GCP and AWS (Shared VPC, VPC peering, Private Service Connect, Cloud NAT, Cloud VPN/Interconnect, and private DNS), moving towards a central ingress/egress hub architecture.

Network as Code: Codify network infrastructure with Terraform and automate repetitive operations (DNS records, firewall rules, IP allowlists) with Python or Go, delivered through GitOps workflows (e.g., via Bitbucket PRs and CI/CD pipelines).

Load Balancing & Edge: Operate Google Cloud Load Balancing, Cloud Armor (WAF and rate limiting), IAP, and our NGINX-based private proxies on GKE, implementing the policies defined together with the Information Security team.

Observability & Troubleshooting: Use VPC Flow Logs, Cloud Logging, and Datadog to diagnose connectivity, latency, and DNS issues, build network alerts and dashboards, and lead the network side of incident response.

Collaboration: Work closely with Platform, DevOps, and Information Security teams, documenting the network in runbooks and diagrams so that network operations never depend on a single person.

About you and what type of skills you'll need:

2+ years of experience in a Network Engineering, Cloud Engineering, or DevOps/SRE role with a strong networking focus.

Solid networking fundamentals: TCP/IP, subnetting/CIDR, routing (BGP basics), NAT, DNS, TLS, and HTTP.

Hands-on experience with Infrastructure as Code (Terraform) and scripting in Python, Go, or Bash to automate network tasks.

Hands-on experience with cloud networking on GCP and/or AWS (VPCs, firewall rules/security groups, load balancers, private connectivity, VPN).

Familiarity with Kubernetes networking (Services, Ingress, NetworkPolicies), reverse proxies such as NGINX, and edge controls such as Cloud Armor or AWS WAF.

Experience leveraging AI tools to automate network operations and troubleshooting is a massive plus, as are certifications such as Google Professional Cloud Network Engineer, AWS Certified Advanced Networking, or CCNA/CCNP.

Automation-first approach: if you do it twice, you script it. You measure success by fewer manual changes, fewer network incidents, and faster turnaround on network requests.

Excellent communication and documentation skills, eagerness to keep growing, and an extreme ownership mindset.