Senior Network Engineer III

SBS; Courbevoie; Sur place; EUR 90 000 - 130 000; Plein temps

Résumé du poste

SBS is seeking a Senior Network Engineer to join its IT Infrastructure team in Courbevoie, France. You will design, implement, and maintain complex network environments, including SASE, BGP, SD-WAN, and data center leaf-spine fabrics, with a strong IT security focus and English-language collaboration across Europe, the US, and India.

You will lead firewall management, CSP integrations, reverse proxy operations, and network automation while ensuring compliance and high availability.

Qualifications

• Bachelor’s degree in CS/IT or related field; certifications are a plus.
• 5–8 years of network engineering experience with SASE, BGP, SD-WAN, and CSP operations.
• Hands-on experience with data center fabric design (leaf-spine/Clos) and EVPN-VXLAN.
• Professional English proficiency required; written and spoken.

Responsabilités

• Design, deploy, and maintain high-performance network infrastructures meeting business needs.
• Implement SASE solutions to enhance security and secure access across environments.
• Configure and manage BGP routing for optimal performance.
• Design, deploy, and operate Layer 3 leaf-spine data center fabrics (Clos architectures).
• Develop underlay routing and overlay VXLAN/EVPN for scalable fabrics.
• Support data center migrations, hardware refresh, and fabric expansion with minimal disruption.
• Configure, manage, and monitor firewalls, VPNs, and threat prevention.
• Design and manage SD-WAN across multiple locations.
• Integrate and manage network services in CSP environments (AWS/Azure/GCP).
• Configure and manage reverse proxy technologies (NGINX/HAProxy).
• Apply IT security best practices: Zero Trust, vulnerability management, IDS/IPS.
• Troubleshoot network issues and collaborate with IT teams on incidents.
• Document configurations and changes; generate periodic performance/security reports.
• Stay updated on industry trends and propose upgrades.

Connaissances

SASE

BGP

Firewall management

SD-WAN

CSP operations

Reverse proxy

Data center fabric

WiFi technology

IT security

English language proficiency

Formation

Bachelor’s degree in CS/IT or related field

CCNA/CCNP/CISSP certifications

Outils

NGINX

HAProxy

VXLAN/EVPN

Palo Alto firewall

Fortinet firewall

Aruba fabric switching

Cisco Meraki

Description du poste

Position Overview

We are looking for a skilled and knowledgeable Senior Network Engineer to join our IT Infrastructure team.

The ideal candidate will have strong experience in designing, implementing, and maintaining secure and efficient network infrastructures. Key areas of expertise include SASE (Secure Access Service Edge), BGP (Border Gateway Protocol), Firewall management, SD-WAN (Software-Defined Wide Area Network), CSP (Cloud Service Provider) operations, Reverse Proxy technology, and Data Center Network Architecture (Layer 3 leaf-spine / Clos fabric design) and Wifi Technology. The role also requires a solid IT Security background beyond firewall administration.

Professional English proficiency (written and spoken) is mandatory — this role requires daily collaboration with a globally distributed team and stakeholders across Europe, the US, and India.

Responsibilities

Network Design and Implementation:

Design, deploy, and maintain high-performance and resilient network infrastructures that meet the organization’s business needs.

Implement SASE solutions to enhance network security and ensure secure access across different environments.

Configure and manage BGP routing for optimal network performance and reliability.

Data Center Network Architecture:

Design, deploy, and operate Layer 3 leaf-spine (Clos) data center fabric architectures, ensuring predictable, low-latency, non-blocking connectivity between compute and storage resources.

Implement and maintain underlay routing (BGP-based) and overlay technologies (VXLAN/EVPN) to support scalable, multi-tenant data center fabrics.

Support data center migrations, cutovers, hardware refresh, and fabric expansion projects with minimal service disruption.

Firewall and Security Management:

Configure, manage, and monitor firewalls, including rule sets, VPNs, and threat prevention features.

Conduct regular firewall audits and assessments to ensure compliance with security policies and industry standards.

SD-WAN Management:

Design and implement SD-WAN solutions to optimize connectivity and performance across multiple locations.

Monitor and manage SD-WAN environments, addressing any issues or performance bottlenecks.

Cloud Service Provider Operations:

Integrate and manage network services within CSP environments (e.g., AWS, Azure, GCP), ensuring secure and efficient cloud connectivity.

Implement and manage VPNs, VPCs, and other cloud networking components.

Reverse Proxy Management:

Configure and manage reverse proxy technologies to optimize and secure web traffic, ensuring proper load balancing and protection for backend servers.

Monitor reverse proxy performance and troubleshoot issues to ensure reliable application delivery.

IT Security and Compliance:

Apply IT security best practices across network infrastructure, including system/device hardening, vulnerability management, and secure configuration baselines.

Work closely with the security team on Zero Trust network access principles, network segmentation, and threat detection.

Implement and maintain intrusion detection and prevention systems (IDS/IPS).

Support security audits, vulnerability/penetration test remediation, and compliance reporting against industry standards.

Troubleshooting and Support:

Provide advanced troubleshooting for network issues, identifying root causes and implementing effective solutions.

Collaborate with other IT teams to resolve complex technical problems and support network-related incidents.

Documentation and Reporting:

Maintain detailed documentation of network configurations, changes, and procedures.

Generate regular reports on network performance, security incidents, and project progress for management review.

Continuous Improvement:

Stay updated on the latest industry trends and technologies, applying this knowledge to improve network efficiency, security, and performance.

Propose and implement network upgrades and enhancements to meet evolving business needs.

Qualifications

Education:

• Bachelor’s degree in Computer Science, Information Technology, or a related field. Relevant certifications (e.g., CCNA, CCNP, CISSP) are a plus.

Experience:

5–8 years of experience in network engineering, with a strong focus on SASE, BGP, Firewalling, SD-WAN, CSP operations, and Reverse Proxy technologies, including hands-on experience operating data center network fabrics (spine-leaf / Clos architectures).

Technical Skills:

• Proficient in configuring and managing SASE solutions and technologies.
• In-depth knowledge of BGP and other routing protocols.
• Hands-on experience with firewall technologies (e.g., Palo Alto, Fortinet).
• Strong understanding of SD-WAN technologies and best practices.
• Experience with network operations in cloud environments such as AWS, Azure, or GCP.
• Expertise in configuring and managing reverse proxy technologies (e.g., NGINX, HAProxy).
• Strong hands‑on expertise in data center network architecture: Layer 3 leaf-spine (Clos) fabric design, and underlay/overlay (BGP EVPN-VXLAN) technologies.
• Solid IT Security background: vulnerability management, security hardening, Zero Trust principles, IDS/IPS, and familiarity with security compliance frameworks.
• General working knowledge of Aruba fabric switching (AFC-managed) and Cisco Meraki (SD-WAN, switching, wireless) — comfortable with day‑to‑day administration and troubleshooting; deep vendor-specialist expertise not required.

Language Skills:

English: mandatory. Professional proficiency, both written and spoken, to effectively collaborate with global teams and communicate with stakeholders. Candidates without a professional working level of English will not be considered.

Soft Skills:

• Strong self-learning capabilities.
• Excellent problem‑solving and analytical skills.
• Strong communication skills, with the ability to explain complex technical concepts to non‑technical stakeholders.
• Ability to work independently and as part of a collaborative team.

Preferred Certifications:

• Cisco Certified Network Professional (CCNP)
• Certified Information Systems Security Professional (CISSP)
• AWS Certified Advanced Networking – Specialty
• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Relevant reverse proxy certifications or experience
• Cisco CCNP Data Center (350-601 DCCOR) or CCIE Data Center – data center fabric design and operations
• Juniper Networks Certified Internet Professional – Data Center (JNCIP-DC) or JNCIE-DC
• Arista Certified Engineer (ACE) – data center switching/fabric
• CompTIA Security+ – baseline IT security certification

Company Overview

About Company:

74Software, affiliated with Axway and SBS,together, we deliver secure, mission-critical software that powers a data-driven world.Independently operated leaders with decades of proven expertise.From secure integration and API solutions to cloud-based banking platforms, we help global organizations and financial institutions thrive.

For more than 25 years, Axway has helped major brands and government agencies worldwide with trusted solutions in Managed File Transfer (MFT), B2B integration, APIs, and Financial Accounting Hub products. SBS empowers banks and financial institutions to reimagine the future with a composable, cloud-based architecture supporting deposits, lending, compliance, payments, consumer finance, and asset finance operations across the globe.

Why 74Software?

We celebrate diverse perspectives and experiences, knowing our people are our greatest strength. Join us and be part of a team where you can thrive, grow, and make an impact.

We offer benefits that support your health, growth, and lifestyle,so you can thrive at work and beyond, including health coverage, retirement plans, paid time off, flexible work, career development, competitive pay, and global cultureperks.

Equal Opportunity Employer

We are committed toprovidingequal opportunities and ensuring a fair and inclusive recruitment process.We do not discriminate on the basis of age, disability, gender, sexual orientation, race, religion, or any other protected characteristic.

#LI-SV1