Senior Network Engineer III

Axway; Courbevoie; Sur place; EUR 90 000 - 120 000; Plein temps

Résumé du poste

74Software, affiliated with Axway and SBS, seeks a Senior Network Engineer to design and implement secure, high-performance network fabrics across data centers and cloud environments.

The role emphasizes SASE, BGP, firewalling, SD‑WAN, CSP operations, and reverse proxy management, with a strong IT security background. English proficiency is mandatory due to global collaboration.

Qualifications

• Bachelor’s degree in a related field; CCNA/CCNP/CISSP are plus
• 5–8 years in network engineering focusing on SASE, BGP, Firewalling, SD-WAN, CSP ops, and reverse proxy tech
• Hands-on with data center fabrics (spine-leaf/Clos) and underlay/overlay (BGP EVPN-VXLAN)

Responsabilités

• Design, deploy, and maintain high-performance network infrastructures.
• Implement SASE solutions to secure access across environments.
• Configure BGP routing for optimal performance and reliability.
• Design and operate Layer 3 leaf-spine data center fabrics (Clos).
• Manage underlay routing and overlay technologies for scalable fabrics.
• Configure and monitor firewalls, VPNs, and security features.
• Design and implement SD-WAN to optimize multi-site connectivity.
• Integrate network services with CSPs (AWS/Azure/GCP).
• Operate reverse proxy tech (NGINX/HAProxy) for secure app delivery.
• Apply IT security best practices and Zero Trust principles.

Connaissances

SASE

BGP

Firewalling

SD-WAN

Cloud ops

Reverse proxy

Data center fabric

WiFi tech

IT security

English

Formation

Bachelor's degree

CCNA

CCNP

CISSP

Outils

Palo Alto

Fortinet

NGINX

HAProxy

AWS

Azure

GCP

Aruba fabric

Cisco Meraki

Description du poste

Overview

We are looking for a skilled and knowledgeable Senior Network Engineer to join our IT Infrastructure team.

The ideal candidate will have strong experience in designing, implementing, and maintaining secure and efficient network infrastructures. Key areas of expertise include SASE (Secure Access Service Edge), BGP (Border Gateway Protocol), Firewall management, SD-WAN (Software-Defined Wide Area Network), CSP (Cloud Service Provider) operations, Reverse Proxy technology, and Data Center Network Architecture (Layer 3 leaf-spine / Clos fabric design) and Wifi Technology. The role also requires a solid IT Security background beyond firewall administration.

Professional English proficiency (written and spoken) is mandatory — this role requires daily collaboration with a globally distributed team and stakeholders across Europe, the US, and India.

Responsibilities

Network Design and Implementation:

Design, deploy, and maintain high-performance and resilient network infrastructures that meet the organization’s business needs.

Implement SASE solutions to enhance network security and ensure secure access across different environments.

Configure and manage BGP routing for optimal network performance and reliability.

Data Center Network Architecture:

Design, deploy, and operate Layer 3 leaf-spine (Clos) data center fabric architectures, ensuring predictable, low-latency, non-blocking connectivity between compute and storage resources.

Implement and maintain underlay routing (BGP-based) and overlay technologies (VXLAN/EVPN) to support scalable, multi-tenant data center fabrics.

Support data center migrations, cutovers, hardware refresh, and fabric expansion projects with minimal service disruption.

Firewall and Security Management:

Configure, manage, and monitor firewalls, including rule sets, VPNs, and threat prevention features.

Conduct regular firewall audits and assessments to ensure compliance with security policies and industry standards.

SD-WAN Management:

Design and implement SD-WAN solutions to optimize connectivity and performance across multiple locations.

Monitor and manage SD-WAN environments, addressing any issues or performance bottlenecks.

Cloud Service Provider Operations:

Integrate and manage network services within CSP environments (e.g., AWS, Azure, GCP), ensuring secure and efficient cloud connectivity.

Implement and manage VPNs, VPCs, and other cloud networking components.

Reverse Proxy Management:

Configure and manage reverse proxy technologies to optimize and secure web traffic, ensuring proper load balancing and protection for backend servers.

Monitor reverse proxy performance and troubleshoot issues to ensure reliable application delivery.

IT Security and Compliance:

Apply IT security best practices across network infrastructure, including system/device hardening, vulnerability management, and secure configuration baselines.

Work closely with the security team on Zero Trust network access principles, network segmentation, and threat detection.

Implement and maintain intrusion detection and prevention systems (IDS/IPS).

Support security audits, vulnerability/penetration test remediation, and compliance reporting against industry standards.

Troubleshooting and Support:

Provide advanced troubleshooting for network issues, identifying root causes and implementing effective solutions.

Collaborate with other IT teams to resolve complex technical problems and support network-related incidents.

Documentation and Reporting:

Maintain detailed documentation of network configurations, changes, and procedures.

Generate regular reports on network performance, security incidents, and project progress for management review.

Continuous Improvement:

Stay updated on the latest industry trends and technologies, applying this knowledge to improve network efficiency, security, and performance.

Propose and implement network upgrades and enhancements to meet evolving business needs.

Qualifications

Education:

Bachelor’s degree in Computer Science, Information Technology, or a related field. Relevant certifications (e.g., CCNA, CCNP, CISSP) are a plus.

Experience:

5–8 years of experience in network engineering, with a strong focus on SASE, BGP, Firewalling, SD-WAN, CSP operations, and Reverse Proxy technologies, including hands‑on experience operating data center network fabrics (spine‑leaf / Clos architectures).

Technical Skills:

Proficient in configuring and managing SASE solutions and technologies.

In‑depth knowledge of BGP and other routing protocols.

Hands‑on experience with firewall technologies (e.g., Palo Alto, Fortinet).

Strong understanding of SD‑WAN technologies and best practices.

Experience with network operations in cloud environments such as AWS, Azure, or GCP.

Expertise in configuring and managing reverse proxy technologies (e.g., NGINX, HAProxy).

Strong hands‑on expertise in data center network architecture: Layer 3 leaf‑spine (Clos) fabric design, and underlay/overlay (BGP EVPN‑VXLAN) technologies.

Solid IT Security background: vulnerability management, security hardening, Zero Trust principles, IDS/IPS, and familiarity with security compliance frameworks.

General working knowledge of Aruba fabric switching (AFC‑managed) and Cisco Meraki (SD‑WAN, switching, wireless) — comfortable with day‑to‑day administration and troubleshooting; deep vendor‑specialist expertise not required.

Language Skills:

English: mandatory. Professional proficiency, both written and spoken, to effectively collaborate with global teams and communicate with stakeholders. Candidates without a professional working level of English will not be considered.

Soft Skills:

Strong self‑learning capabilities.

Excellent problem‑solving and analytical skills.

Strong communication skills, with the ability to explain complex technical concepts to non‑technical stakeholders.

Ability to work independently and as part of a collaborative team.

Preferred Certifications:

Cisco Certified Network Professional (CCNP)

Certified Information Systems Security Professional (CISSP)

AWS Certified Advanced Networking – Specialty

Palo Alto Networks Certified Network Security Engineer (PCNSE)

Relevant reverse proxy certifications or experience

Cisco CCNP Data Center (350‑601 DCCOR) or CCIE Data Center – data center fabric design and operations

Juniper Networks Certified Internet Professional – Data Center (JNCIP‑DC) or JNCIE‑DC

Arista Certified Engineer (ACE) – data center switching/fabric

CompTIA Security+ – baseline IT security certification

Company Overview

About Company:

74Software, affiliated with Axway and SBS,together, we deliver secure, mission‑critical software that powers a data‑driven world.Independently operated leaders with decades of proven expertise.From secure integration and API solutions to cloud‑based banking platforms, we help global organizations and financial institutions thrive.

For more than 25 years, Axway has helped major brands and government agencies worldwide with trusted solutions in Managed File Transfer (MFT), B2B integration, APIs, and Financial Accounting Hub products. SBS empowers banks and financial institutions to reimagine the future with a composable, cloud‑based architecture supporting deposits, lending, compliance, payments, consumer finance, and asset finance operations across the globe.

Why 74Software?

We celebrate diverse perspectives and experiences, knowing our people are our greatest strength. Join us and be part of a team where you can thrive, grow, and make an impact.

We offer benefits that support your health, growth, and lifestyle,so you can thrive at work and beyond, including health coverage, retirement plans, paid time off, flexible work, career development, competitive pay, and global cultureperks.

Equal Opportunity Employer

We are committed toprovidingequal opportunities and ensuring a fair and inclusive recruitment process.We do not discriminate on the basis of age, disability, gender, sexual orientation, race, religion, or any other protected characteristic.