Network Engineer

Berenberg; Greater London; On-site; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Private pension plan

Private Health Insurance

Enhanced parental leave policies

Employee Assistance Programme

Job summary

Berenberg in London is seeking a Senior Network professional to design, implement and maintain a highly available enterprise network. You will work with the Lead Network Architect to translate high‑level designs into detailed LAN/WAN plans for trading and core operations, with emphasis on security, low latency and regulatory compliance.

The role focuses on BGP, Arista EOS, Fortinet security, and scalable spine/leaf architectures.

Qualifications

• Deep expertise in BGP including route manipulation, multi-homing, peering, VRF.
• Ability to design resilient Layer 3 networks with spine‑and‑leaf topologies.
• Hands-on with Arista EOS in configuration and troubleshooting.
• Knowledge of PoLP and Zero Trust applied to network access and firewall rules.

Responsibilities

• Architectural collaboration with Lead Network Architect to translate designs into LLDS and implementation plans.
• Lead deployment and configuration of core network infrastructure focused on scale and high availability.
• Administer and maintain enterprise security posture using Fortinet devices.
• Provide 3rd-line escalation support for critical network incidents.
• Develop and enforce network standards, policies, and procedures in line with risk controls.
• Onboard and set up connectivity with new trading partners and venues.

Skills

BGP expertise

Layer 3 network architecture

Arista EOS

PoLP & Zero Trust

Troubleshooting & RCA

Python scripting

IaC (Terraform/Ansible)

Tools

NetBrain

Terraform

Ansible

Fortinet devices

Job description

For our Innovation & Technology department in London we are looking to hire a:

Innovation & Technology @ Berenberg

In an era where digitalisation and modern IT infrastructure is revolutionizing banking, we are shaping a technology-driven bank in which you as an IT professional will work closely with our business units. Our technology teams offer you an environment that will present you with exciting challenges - be it through the support and further development of legacy systems or the introduction of modern technologies such as AI, machine learning and highly automated trading applications.

Your Role in the team.

As a Senior Network you will be contributing to the design, implementation, and maintenance of a highly available, secure, and scalable enterprise network infrastructure critical to trading and core operations. This position requires deep, practical expertise in Layer 3 routing and BGP on Arista platforms and Fortinet security devices. The successful candidate will play a critical role in translating architectural designs into operational reality, collaborating closely with the Lead Network Architect, and driving operational excellence while adhering to strict financial compliance and security standards.

What will you do:

• Architectural Collaboration: Work directly with the Lead Network Architect to review High-Level Designs, provide technical feasibility assessments, and translate the architecture into detailed Low-Level Designs (LLDs) and implementation plans (e.g. using NetBrain)
• Lead the deployment and configuration of core network infrastructure projects focused on scalability and high availability, e.g. new exchange / trading venue connectivity via datacentre cross-connects
• Administer and maintain the enterprise security posture using Fortinet devices, ensuring policy enforcement aligns with security principles like PoLP.
• Provide 3rd-line escalation support for all critical network incidents.
• Develop and enforce network standards, policies, and operational procedures, ensuring adherence to internal risk controls and external regulatory requirements.
• Onboard and setup new connectivity with new trading partners and venues

Who are we looking for?

• Deep Expertise in BGP: Proven, hands‑on experience designing, implementing, and troubleshooting complex Border Gateway Protocol (BGP) topologies, including route manipulation, path selection, multi‑homing, and peering, VRF etc.
• Network Architecture: Demonstrated ability to design and implement highly resilient and scalable Layer 3 network architectures, including spine‑and‑leaf topologies, with a focus on low‑latency and high‑throughput environments (e.g., trading platforms)
• Arista Networks: Hands‑on experience with configuration, operation, and advanced troubleshooting of Arista switches and routers, including experience with Arista EOS
• Principle of Least Privilege (Security Concept) & Zero Trust: Strong foundational knowledge and practical experience in applying the Principle of Least Privilege (PoLP) & Zero Trust to network device access, network segmentation, and firewall rule creation to minimize the network attack surface in a regulated financial environment
• Complex Troubleshooting: Ability to conduct deep‑dive, packet‑level analysis and root cause analysis (RCA) on complex, multi‑protocol network issues across LAN, WAN, and Data Centre environments
• Nice to have:
• Practical experience using Infrastructure as Code tools such as Terraform or Ansible for net‑work configuration management, provisioning, and automated deployments
• Scripting: Proficiency in scripting languages, preferably Python, for network automation, API interaction, data manipulation, and custom tooling development

What we offer you:

• Private pension plan - 10% of base salary contribution by Berenberg
• Private Health Insurance
• Enhanced parental leave policies
• Employee Assistance Programme offering counselling sessions related to mental health, financial wellbeing and other topics

We are a leading European private bank, with over 430 years of experience and deep rooted history, but we are still shaping and heavily investing in our future. Our progress and evolution are driven by our people. We encourage them to try new approaches, voice their opinions and achieve success in their own way.

We provide opportunities for them to develop their talents, explore different career paths and achieve their full potential.

We’re an ambitious, forward‑looking business, backed by centuries of tradition and built on innovation. You’ll find a culture that encourages people to think independently, act entrepreneurially and challenge the status quo.

We place great importance on working on site, as we believe that being together in the office not only fosters creativity and efficiency, but also strengthens networks and builds trusting, collegial relationships. For us, this forms the foundation for productive and successful work. Together we collaborate to shape our business and fulfil our ambitious goals.

We welcome you to join us in our commitment to always do the right thing for our people, clients and our business – Our future is where you take us!

Berenberg is an Equal Opportunities Employer and prides itself on being a modern, dynamic and internationally orientated organisation. We value the rich diversity, skills and abilities and creative potential that people from differing backgrounds and experiences bring to the workplace. Every employee plays a vital role in providing quality service to all our customers and helping to create and inclusive working environment, where everyone can realise their full potential. We’re committed to finding reasonable accommodations for candidates who require adjustments during our recruiting process. Please contact us directly on [e-mail] to discuss.