albo
albo is a leading fintech company offering financial products to individuals and SMBs with the mission to bring financial freedom to everyone, everywhere.

About the role
We are seeking a hands-on Network Engineer to own the network our financial products run on, across on-prem, GCP, AWS and private connections to partners. You will decide how traffic gets from A to B: addressing, routing, segmentation, DNS, firewalls and the internet edge. When a packet doesn't arrive, you are the person who finds out why. We run the network as code, so your changes are versioned, reviewed and applied through a pipeline.

What You Will Do

Network Design: Own the IP addressing plan and network segmentation, and evolve our topology towards a central ingress/egress hub.

Routing & Connectivity: Design and operate site-to-site IPsec VPNs with dynamic routing (BGP), private connectivity across clouds and with partners, and NAT, with redundancy and tested failover.

Firewalls & Remote Access: Operate cloud-native and next-generation firewalls (FortiGate, Palo Alto or similar) and remote-access VPN, implementing policies defined with the Information Security team.

DNS: Own public, private and split-horizon DNS across clouds and providers.

Load Balancing & Edge: Operate L4/L7 load balancing, TLS termination, WAF and rate limiting, and reverse proxies.

Troubleshooting & Observability: Diagnose connectivity, latency and DNS issues with packet captures and flow logs, build network alerts and dashboards, and lead the network side of incident response.

Network as Code:



Manage network changes with Terraform and pull requests, script repetitive operations, and help make common requests such as IP allowlists self-service.

Collaboration: Work closely with Platform, DevOps and Information Security, and document the network in runbooks and diagrams so it never depends on a single person.

About You & Required Skills

4+ years in a network engineering role, designing and operating production networks. Cloud or DevOps backgrounds count only if networking was the core of the job.

Strong fundamentals: TCP/IP, subnetting/CIDR, routing (BGP path selection and route filtering), NAT, IPsec, DNS, TLS and HTTP.

Packet-level troubleshooting with tcpdump/Wireshark, traceroute/mtr and dig, including MTU and asymmetric routing issues.

Hands-on experience with firewalls and site-to-site VPNs.

Hands-on cloud networking on GCP or AWS: VPCs, routes, firewall rules/security groups, load balancers and private connectivity.

Working knowledge of Terraform and scripting (Python, Go or Bash). Strong network automation with Ansible or Python also counts.

Clear communication and documentation, and an extreme ownership mindset.

Based in Mexico City, with availability to work on-site.

Nice to Have

Kubernetes networking (Services, Ingress, NetworkPolicies) and NGINX.

Certifications such as CCNP/CCIE, Google Professional Cloud Network Engineer, AWS Advanced Networking or Fortinet NSE.

Experience in regulated environments such as financial services or payments.

Experience using AI tools to automate network operations and troubleshooting.

#J-18808-Ljbffr

📌 Network Engineer (Ciudad de México)
🏢 Albo
📍 Ciudad de México