Senior Network Engineer

Altruist; San Francisco (CA); Hybrid; USD 200,000 - 240,000; Full time

Benefits offered by this job

Premium healthcare

401k plan

16 weeks parental leave

L&D budget

Mobility program

Work from anywhere

Job summary

Altruist is hiring a Senior Network Engineer to own multi-region AWS networking, including VPC design, transit topology, and secure connectivity. You will implement segmentation, mark a strong move to zero trust/SASE, and collaborate with Security to meet regulatory standards.

This role combines cloud networking, IaC, and AI-native methods to drive resilient, auditable network infrastructure. The position is hybrid, with onsite work in San Francisco or Culver City, CA, reflecting our distributed

Qualifications

• 7+ years in network engineering, incl. 3+ in cloud-native environments.
• Deep AWS networking: VPC, Transit Gateway, Direct Connect, VPN, Route 53, PrivateLink, NAT & egress at scale.
• Zero trust / SASE experience: ZTNA, secure web gateway, CASB, or device posture access.
• Terraform and infrastructure as code as default; scripting in Python, Bash, or Go.
• Kubernetes networking: CNI, ingress, service exposure, east-west traffic.
• AI-native approach: use AI tools to analyze config/logs and review code before prod.

Responsibilities

• Own multi-region AWS network architecture across production, clearing, and platform environments.
• Design and enforce segmentation; deliver network as code via Terraform & GitOps.
• Lead transition to zero-trust/SASE with strong device posture.
• Collaborate with Security to meet regulated standards and audits.
• Own partner connectivity: VPNs, BGP peering, Direct Connect.
• Manage office and edge networking, including ISPs and new locations.
• Define observability; serve as senior escalation for incidents and DR.
• Apply AI-native workflows for audit, drift detection, and rapid analysis.

Skills

Networking architecture

AWS networking

Zero trust / SASE

Terraform / IaC

Kubernetes networking

AI-native tooling

Security collaboration

Leadership & ownership

Education

B.A./B.S. in CS or related field

Tools

Terraform

Direct Connect

Zscaler

Netskope

Prisma

Job description

Altruist is transforming the multi-trillion dollar wealth management industry by building an AI platform for wealth professionals. We partner with financial advisors nationwide, empowering them to grow, optimize time and resources, and deliver superior outcomes for their clients.

We're looking for exceptional talent to help us achieve our mission of making financial advice better, more affordable, and accessible to all. If you're passionate about challenging the status quo and want to do the most important work of your life, we'd love to meet you!

But first, our values

• Kindness - Kindness doesn't just equal niceness. We listen to understand. We embrace, and encourage healthy debate and diverse perspectives. We approach conflict openly, honestly, and respectfully.
• Brilliance - Humility is the skill we're most proud of and possessing a growth mindset is always top of mind. We take ownership in everything we touch; regularly using our unique superpowers to reach a common goal as a team. We succeed and fail as one.
• Grit - When challenges arise, we stay laser focused on achieving our mission and finding a way forward, even when it's hard. We are nimble and maintain a sense of urgency, swiftly adapting to change and overcoming obstacles.

About the position

Altruist is the modern custodian built exclusively for independent financial advisors, combining a self-clearing brokerage firm with intuitive software for account opening, trading, reporting, and billing. Our mission is to make financial advice better, more affordable, and accessible to everyone.

We're hiring our first dedicated Senior Network Engineer. We run a regulated broker-dealer and clearing platform on a multi-account, multi-region AWS estate, connected to clearing, custody, market-data, and banking partners over dedicated circuits and encrypted tunnels. You will own how those networks are designed, segmented, secured, and operated — from cloud routing topology and partner connectivity to how our own people reach internal systems — working in close partnership with our Security team, whose requirements shape much of this roadmap, and bringing an AI-native approach to the work. You will set the standards here, not inherit someone else're.

This role follows a hybrid schedule, with three days per week onsite in our San Francisco FiDi or Culver City office.

Your impact

• Own the multi-region AWS network architecture, including transit gateway topology, VPC design, address-space strategy, and routing across production, clearing, and platform environments.
• Design and enforce segmentation to isolate workload, corporate, and partner traffic, ensuring the network layer is delivered as code via Terraform and GitOps.
• Lead the transition to a zero trust / SASE access model, ensuring application-level access and strong device posture for a distributed engineering team.
• Collaborate closely with Security to translate threat models into durable network designs that meet regulated-industry standards and audit requirements.
• Own the partner connectivity estate, managing site-to-site VPNs, BGP peering, and Direct Connect circuits to financial-services counterparties.
• Manage office and edge networking, including ISP redundancy and connectivity standards for new locations.
• Define network observability and serve as the senior escalation point for incidents, disaster recovery, and cross-region failover.
• Apply an AI-native approach to network operations, using agentic workflows for audit, drift detection, and rapid analysis of configuration and flow data.
• Provide technical leadership by writing standards, reviewing designs across teams, and mentoring engineers to ensure network resiliency.

What you'll bring

• Experience:
• 7+ years in network engineering, including 3+ in cloud-native environments. You have owned a production network, not just operated tickets against one.
• Deep AWS networking: VPC design, Transit Gateway, Direct Connect, VPN, Route 53, PrivateLink, NAT and egress patterns, and security group design at scale.
• Strong fundamentals — routing and BGP, IPsec, TLS, DNS, DHCP — and the ability to read a packet capture when a vendor says the problem is on your side.
• Hands‑on experience designing or operating network segmentation and traffic inspection, in cloud, on‑prem, or hybrid.
• Zero trust / SASE experience: ZTNA, secure web gateway, CASB, or device‑posture‑conditioned access. Zscaler, Netskope, or Prisma is a strong plus.
• Terraform and infrastructure as code as your default, plus scripting ability (Python, Bash, or Go) and comfort with cloud APIs.
• Working knowledge of Kubernetes networking — CNI behavior, ingress, service exposure, and where east‑west traffic actually goes.
• An AI‑native approach — a requirement, not a nice‑to‑have. You already use AI tooling to write and review code, analyze configuration and logs at scale, and reason about large estates, and you verify its output before it touches production.
• A security partnership mindset — you treat security requirements as design input, not obstacle, and can hold a technical disagreement with a security engineer and land somewhere better than where either of you started.
• Judgment and ownership — you have worked somewhere a change window is real, you document accepted risk rather than quietly leaving it undocumented, and you can hold your own with a partner's network team on a bridge call.
• Education — ideally a B.A. / B.S. in Computer Science, Network Engineering, or a related field, but experience and understanding matter just as much.
• Financial services, brokerage, or another regulated industry — including connectivity to clearing, custody, banking, or market‑data counterparties.
• Network integration through an acquisition or enterprise merger — address‑space reconciliation and meeting a larger partner's standards.
• Expertise with AI (Claude) best practices, including agentic workflows applied to infrastructure operations.
• Service mesh or API gateway operations; edge and CDN security (WAF, bot management); campus and branch networking.
• Certifications such as AWS Advanced Networking Specialty, CCNP/CCIE, or JNCIP.

San Francisco, CA salary range

$200,000 - $240,000 USD

What we bring

Attracting and retaining top-tier talent is a priority. We are proud of the culture we’ve built and are cognizant of the ever‑changing professional landscape. Our dynamic offering of perks and benefits are tailored for you to feel your best while doing your best.

• Stunning, amenity‑filled office spaces in Culver City, CA, San Francisco, CA, and Dallas, TX. Our offices are intentionally designed for comfort, collaboration, and productivity.
• Premium healthcare, dental, and vision insurance plans (HMO and PPO).
• 401k savings plan with a 4% match and immediate vesting.
• 16 week paid parental leave after one year of employment.
• Professional growth and development opportunities including an employee mobility program and an annual L&D budget allocation for each employee.
• Company perks program (includes discounts on pet insurance, fitness, cell phone plans, and travel, etc.).
• Financial guidance program (includes counseling on navigating debt, tracking personal spend, saving and planning goals, home‑purchasing preparedness, etc.).
• One month work from anywhere policy (with the exception of a few countries).

Total compensation includes a competitive benefits package, along with a bonus program for eligible roles. For salaried positions, a salary offer will be determined by a number of factors including experience, skill level, internal pay equity, geographic location, and other relevant business considerations. We review all employee pay and compensation programs regularly to ensure fair, equitable, and competitive pay. At Altruist, we are committed to providing fair, equitable, and competitive compensation by leveraging market data to inform our pay bands. Base salaries will be reviewed at regular intervals throughout the year, typically in conjunction with performance review cycles. By evaluating compensation on a regular basis, we are able to reward high performance and ensure all employees have opportunities for growth.