Senior Network Engineer

Ilkari; Málaga; Híbrido; EUR 55.000 - 75.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Private life and health insurance

Four weeks per year to work from anywhere

Learning Pocket for personal development

Flexible hours

Descripción de la vacante

Ilkari in Málaga is seeking a Senior Network Engineer to design and implement resilient, high-performance network infrastructure. The role involves working collaboratively to produce essential design documentation and maintain high operational standards.

Ideal candidates will have extensive experience with BGP, OSPF, MPLS, and firewall management, complemented by relevant certifications. The position promotes a hybrid working model and excellent benefits.

Formación

• 7+ years of hands-on network engineering experience.
• Experience in implementing BGP, OSPF, and MPLS in live environments.
• Strong problem-solving skills and self-motivated.

Responsabilidades

• Design, implement, and operate network infrastructure.
• Contribute to peer-reviewed network designs.
• Engineer and administer enterprise firewall platforms.

Conocimientos

Network engineering

BGP, OSPF, MPLS

Firewall management

Routing and switching

Documentation skills

Automation practices

Educación

CCNP Enterprise Certification

PCNSE or equivalent certification

Herramientas

Cisco

Palo Alto

Fortinet

Descripción del empleo

Role overview

We are seeking a Senior Network Engineer (L3) to design, implement, and operate resilient, high-performance, and cost-efficient network infrastructure that supports both internal platforms and customer-facing services.

Operating at Layer 3 escalation and engineering depth, this role is part of a collaborative engineering team responsible for delivering robust, scalable, and secure network solutions. The successful candidate will contribute to and influence network designs through governance forums (TDA / peer review), produce and implement High-Level and Low-Level Design (HLD/LLD) documentation, and adhere to structured Service Design and Service Transition principles.

The role includes the delivery of modern spine-leaf and perimeter network architectures, with a strong focus on operational readiness, scalability, and long-term maintainability.

This is a hands‑on senior engineering position focused on technical depth, implementation, and operational excellence. It is not an architecture‑only role, nor is it a ticket‑based NOC position.

What you'll do

• Contribute to peer‑reviewed network designs and implement approved HLD/LLD artefacts to ensure scalable, resilient, and standards‑aligned infrastructure is delivered correctly the first time.
• Deploy and validate spine‑leaf and enterprise routing architectures to support high‑performance data centre and customer environments without introducing instability or technical debt.
• Adhere to governance frameworks (TDA, peer reviews, change control) to prevent uncontrolled configuration drift and ensure long‑term maintainability.
• Engineer and optimise complex routing environments (BGP, OSPF, EIGRP, MPLS, advanced L2/L3 protocols) to guarantee deterministic failover, predictable convergence, and sustained network stability at scale.
• Diagnose and resolve deep routing and switching issues at Layer 3 to minimise downtime, eliminate recurring faults, and protect service availability.
• Engineer and administer enterprise firewall platforms (Palo Alto, Fortinet, Cisco) to enforce structured, secure, and auditable perimeter controls that protect customer and internal services.
• Design and maintain clean, segmented network zones and rule bases to reduce attack surface, prevent rule sprawl, and support evolving security strategy.
• Lead technical investigations during high‑severity outages to protect platform resilience and restore service with confidence and precision.
• Produce and maintain accurate HLD/LLD documentation, topology diagrams, and configuration standards to eliminate tribal knowledge and enable operational readiness from Day 1.
• Ensure all network changes transition through Service Design, Service Transition and Change Management principles to avoid undocumented risk and operational fragility.
• Identify and implement automation opportunities to reduce manual configuration risk, improve deployment consistency, and increase engineering efficiency at scale.
• Continuously review network performance, resilience, and cost posture to improve reliability while optimising infrastructure spend.

What are we looking for

Technical Skills

• 7+ years hands‑on network engineering experience in enterprise, service provider, or data centre environments.
• Demonstrated ownership of production routing and switching environments, not limited to support or monitoring roles.
• Proven experience implementing and supporting BGP, OSPF, MPLS, and advanced Layer 2/3 architectures in live environments.
• Hands‑on experience administering and engineering enterprise firewall platforms (Palo Alto, Fortinet, Cisco ASA or equivalent).
• Experience operating as a Tier 3 escalation point, leading deep technical diagnostics and contributing to root cause analysis.
• Experience working within structured engineering frameworks involving HLD, LLD, peer review, and controlled service transition.
• Strong documentation, runbook and process design skills.
• Exposure to automation or configuration standardisation practices in network environments.

Experience & education

Strongly preferred

• Cisco CCNP Enterprise (or equivalent advanced routing certification)
• PCNSE (Palo Alto Networks Certified Network Security Engineer) or equivalent Fortinet certification (e.g., NSE4/NSE7)

Highly regarded

• Cisco CCIE (any track)
• Relevant MPLS or Service Provider certifications

Soft Skills

• Very good problem‑solving skills, open mind towards feedback, and can‑do attitude.
• Self‑motivated and self‑managing, with excellent organisational skills.
• Clear communication, documentation, and cross‑team collaboration skills.

What's in it for you

• Private life and health insurance for you and your family.
• Four weeks per year to work from anywhere for eligible employees.
• Learning Pocket for personal development.
• A hybrid working model with flexible hours.