Staff Network Engineer New San Francisco, CA

Altruist; San Francisco (CA); Hybride; USD 203 000 - 275 000; Plein temps

Avantages offerts par ce poste

401k with 4% match

16 week parental leave

Health, dental, and vision insurance

Employee mobility program

One month work from anywhere policy

Résumé du poste

Altruist is hiring a Staff Network Engineer to own multi-region AWS network design, segmentation, and secure connectivity. You’ll work with Security to shape architecture, implement as code, and guide a distributed engineering team with AI-native approaches.

The role is hybrid, with three days onsite in San Francisco or Culver City, and reports to the networks/security leadership. Large-scale cloud networking experience is essential.

Qualifications

• 8+ years in network engineering with 3+ in cloud-native environments.
• Deep AWS networking: VPC design, Transit Gateway, Direct Connect, VPN, Route 53, PrivateLink, NAT and egress patterns, and security group design at scale.
• Strong fundamentals — routing, BGP, IPsec, TLS, DNS, DHCP.
• Experience designing or operating network segmentation and traffic inspection in cloud, on-prem, or hybrid.
• Zero trust / SASE experience: ZTNA, secure web gateway, CASB, or device-posture conditioned access.
• Terraform and infrastructure as code as default; scripting (Python, Bash, or Go).
• Kubernetes networking knowledge: CNI, ingress, service exposure, east‑west.

Responsabilités

• Own multi-region AWS network architecture, including transit gateway topology and VPC design across environments.
• Design and enforce segmentation, delivered as code via Terraform and GitOps.
• Lead transition to a zero trust / SASE model with device posture for distributed teams.
• Collaborate with Security to translate threat models into durable designs meeting audit requirements.
• Own partner connectivity: VPNs, BGP, Direct Connect.
• Manage office and edge networking, including ISP redundancy for new locations.
• Define network observability and serve as senior escalation for incidents and DR.
• Apply AI-native approaches to network operations and audit data analysis.
• Provide technical leadership by writing standards and mentoring engineers.

Connaissances

AWS networking

VPC design

Transit Gateway

Direct Connect

VPN

Route 53

PrivateLink

NAT and egress

Security groups

Zero trust / SASE

Terraform

Python / Bash / Go

Kubernetes networking

Formation

BA/BS in Computer Science or related field

Outils

Terraform

GitOps

Description du poste

Skip to content

Current openings at Altruist

Back to jobs

Staff Network Engineer

San Francisco, CA

About Altruist

Altruist is transforming the multi-trillion dollar wealth management industry by building an AI platform for wealth professionals. We partner with financial advisors nationwide, empowering them to grow, optimize time and resources, and deliver superior outcomes for their clients.

We're looking for exceptional talent to help us achieve our mission of making financial advice better, more affordable, and accessible to all. If you're passionate about challenging the status quo and want to do the most important work of your life, we'd love to meet you!

But first, our values

Kindness - Kindness doesn't just equal niceness. We listen to understand. We embrace, and encourage healthy debate and diverse perspectives. We approach conflict openly, honestly, and respectfully.

Brilliance - Humility is the skill we're most proud of and possessing a growth mindset is always top of mind. We take ownership in everything we touch; regularly using our unique superpowers to reach a common goal as a team. We succeed and fail as one.

Grit - When challenges arise, we stay laser focused on achieving our mission and finding a way forward, even when it’s hard. We are nimble and maintain a sense of urgency, swiftly adapting to change and overcoming obstacles.

About the position

Altruist is the modern custodian built exclusively for independent financial advisors, combining a self-clearing brokerage firm with intuitive software for account opening, trading, reporting, and billing. Our mission is to make financial advice better, more affordable, and accessible to everyone.

We’re hiring our first dedicated Staff Network Engineer. We run a regulated broker-dealer and clearing platform on a multi-account, multi-region AWS estate, connected to clearing, custody, market-data, and banking partners over dedicated circuits and encrypted tunnels. You will own how those networks are designed, segmented, secured, and operated — from cloud routing topology and partner connectivity to how our own people reach internal systems — working in close partnership with our Security team, whose requirements shape much of this roadmap, and bringing an AI-native approach to the work. You will set the standards here, not inherit someone else’s.

This role follows a hybrid schedule, with three days per week onsite in our San Francisco FiDi or Culver City office.

Your impact

• Own the multi-region AWS network architecture, including transit gateway topology, VPC design, address-space strategy, and routing across production, clearing, and platform environments.
• Design and enforce segmentation to isolate workload, corporate, and partner traffic, ensuring the network layer is delivered as code via Terraform and GitOps.
• Lead the transition to a zero trust / SASE access model, ensuring application-level access and strong device posture for a distributed engineering team.
• Collaborate closely with Security to translate threat models into durable network designs that meet regulated-industry standards and audit requirements.
• Own the partner connectivity estate, managing site-to-site VPNs, BGP peering, and Direct Connect circuits to financial-services counterparties.
• Manage office and edge networking, including ISP redundancy and connectivity standards for new locations.
• Define network observability and serve as the senior escalation point for incidents, disaster recovery, and cross-region failover.
• Apply an AI-native approach to network operations, using agentic workflows for audit, drift detection, and rapid analysis of configuration and flow data.
• Provide technical leadership by writing standards, reviewing designs across teams, and mentoring engineers to ensure network resiliency.

What you’ll bring

• Experience — 8+ years in network engineering, including 3+ in cloud-native environments. You have owned a production network, not just operated tickets against one.
  • Deep AWS networking: VPC design, Transit Gateway, Direct Connect, VPN, Route 53, PrivateLink, NAT and egress patterns, and security group design at scale.
  • Strong fundamentals — routing and BGP, IPsec, TLS, DNS, DHCP — and the ability to read a packet capture when a vendor says the problem is on your side.
  • Hands‑on experience designing or operating network segmentation and traffic inspection, in cloud, on‑prem, or hybrid.
  • Zero trust / SASE experience: ZTNA, secure web gateway, CASB, or device‑posture‑conditioned access. Zscaler, Netskope, or Prisma is a strong plus.
  • Terraform and infrastructure as code as your default, plus scripting ability (Python, Bash, or Go) and comfort with cloud APIs.
  • Working knowledge of Kubernetes networking — CNI behavior, ingress, service exposure, and where east‑west traffic actually goes.
• An AI-native approach — a requirement, not a nice‑to‑have. You already use AI tooling to write and review code, analyze configuration and logs at scale, and reason about large estates, and you verify its output before it touches production.
• A security partnership mindset — you treat security requirements as design input, not obstacle, and can hold a technical disagreement with a security engineer and land somewhere better than where either of you started.
• Judgment and ownership — you have worked somewhere a change window is real, you document accepted risk rather than quietly leaving it undocumented, and you can hold your own with a partner’s network team on a bridge call.
• Education — ideally a B.A. / B.S. in Computer Science, Network Engineering, or a related field, but experience and understanding matter just as much.

Bonus points if you bring

• Financial services, brokerage, or another regulated industry — including connectivity to clearing, custody, banking, or market‑data counterparties.
• Network integration through an acquisition or enterprise merger — address‑space reconciliation and meeting a larger partner’s standards.
• Expertise with AI (Claude) best practices, including agentic workflows applied to infrastructure operations.
• Service mesh or API gateway operations; edge and CDN security (WAF, bot management); campus and branch networking.
• Certifications such as AWS Advanced Networking Specialty, CCNP/CCIE, or JNCIP.

San Francisco, CA salary range

$203,000 - $275,000 USD

What we bring

Attracting and retaining top‑tier talent is a priority. We are proud of the culture we’ve built and are cognizant of the ever‑changing professional landscape. Our dynamic offering of perks and benefits are tailored for you to feel your best while doing your best.

• Stunning, amenity‑filled office spaces in Culver City, CA, San Francisco, CA, and Dallas, TX. Our offices are intentionally designed for comfort, collaboration, and productivity.
• Competitive total compensation.
• Premium healthcare, dental, and vision insurance plans (HMO and PPO).
• 401k savings plan with a 4% match and immediate vesting.
• 16 week paid parental leave after one year of employment.
• Professional growth and development opportunities including an employee mobility program and an annual L&D budget allocation for each employee.
• Company perks program (includes discounts on pet insurance, fitness, cell phone plans, and travel, etc.).
• Financial guidance program (includes counseling on navigating debt, tracking personal spend, saving and planning goals, home‑purchasing preparedness, etc.).
• One month work from anywhere policy (with the exception of a few countries).

Total compensation includes a competitive benefits package, along with a bonus program for eligible roles. For salaried positions, a salary offer will be determined by a number of factors including experience, skill level, internal pay equity, geographic location, and other relevant business considerations. We review all employee pay and compensation programs regularly to ensure fair, equitable, and competitive pay. At Altruist, we are committed to providing fair, equitable, and competitive compensation by leveraging market data to inform our pay bands. Base salaries will be reviewed at regular intervals throughout the year, typically in conjunction with performance review cycles. By evaluating compensation on a regular basis, we are able to reward high performance and ensure all employees have opportunities for growth.

Don't meet every single requirement? Studies have shown that women and people of color are less likely to apply to jobs unless they meet every single qualification. At Altruist we are dedicated to building a diverse, inclusive, and authentic workplace, so if you're excited about this role, but your past experience doesn't align perfectly with every qualification in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles.