Network Engineer

albo; Ciudad de México; On-site; MXN 450,000 - 750,000; Full time

Job summary

albo is seeking a hands-on Network Engineer to own the network our financial products run on, across on-prem, GCP, AWS and partner connections. You will decide how traffic moves: addressing, routing, DNS, firewalls and the internet edge. We run the network as code, so changes are versioned, reviewed and applied through a pipeline.

Based in Mexico City and on-site available. You design IP addressing and segmentation, operate site-to-site VPNs with BGP, manage cloud networking, DNS, load

Qualifications

• 4+ years in a network engineering role with production networks.

Responsibilities

• Own IP addressing plan and network segmentation; evolve topology to a central hub.

Skills

TCP/IP

Subnetting CIDR

BGP

NAT

DNS

TLS HTTP

Packet-troubleshooting

VPNs

Terraform

Python/Go/Bash

Tools

Terraform

Ansible

Wireshark

GCP

AWS

Job description

albo

albo is a leading fintech company offering financial products to individuals and SMBs with the mission to bring financial freedom to everyone, everywhere.

About the role

We are seeking a hands-on Network Engineer to own the network our financial products run on, across on-prem, GCP, AWS and private connections to partners. You will decide how traffic gets from A to B: addressing, routing, segmentation, DNS, firewalls and the internet edge. When a packet doesn't arrive, you are the person who finds out why. We run the network as code, so your changes are versioned, reviewed and applied through a pipeline.

What You Will Do

• Network Design: Own the IP addressing plan and network segmentation, and evolve our topology towards a central ingress/egress hub.
• Routing & Connectivity: Design and operate site-to-site IPsec VPNs with dynamic routing (BGP), private connectivity across clouds and with partners, and NAT, with redundancy and tested failover.
• Firewalls & Remote Access: Operate cloud-native and next-generation firewalls (FortiGate, Palo Alto or similar) and remote-access VPN, implementing policies defined with the Information Security team.
• DNS: Own public, private and split-horizon DNS across clouds and providers.
• Load Balancing & Edge: Operate L4/L7 load balancing, TLS termination, WAF and rate limiting, and reverse proxies.
• Troubleshooting & Observability: Diagnose connectivity, latency and DNS issues with packet captures and flow logs, build network alerts and dashboards, and lead the network side of incident response.
• Network as Code: Manage network changes with Terraform and pull requests, script repetitive operations, and help make common requests such as IP allowlists self-service.
• Collaboration: Work closely with Platform, DevOps and Information Security, and document the network in runbooks and diagrams so it never depends on a single person.

About You & Required Skills

• 4+ years in a network engineering role, designing and operating production networks. Cloud or DevOps backgrounds count only if networking was the core of the job.
• Strong fundamentals: TCP/IP, subnetting/CIDR, routing (BGP path selection and route filtering), NAT, IPsec, DNS, TLS and HTTP.
• Packet-level troubleshooting with tcpdump/Wireshark, traceroute/mtr and dig, including MTU and asymmetric routing issues.
• Hands-on experience with firewalls and site-to-site VPNs.
• Hands-on cloud networking on GCP or AWS: VPCs, routes, firewall rules/security groups, load balancers and private connectivity.
• Working knowledge of Terraform and scripting (Python, Go or Bash). Strong network automation with Ansible or Python also counts.
• Clear communication and documentation, and an extreme ownership mindset.
• Based in Mexico City, with availability to work on-site.

Nice to Have

• Kubernetes networking (Services, Ingress, NetworkPolicies) and NGINX.
• Certifications such as CCNP/CCIE, Google Professional Cloud Network Engineer, AWS Advanced Networking or Fortinet NSE.
• Experience in regulated environments such as financial services or payments.
• Experience using AI tools to automate network operations and troubleshooting.