Customer Engineering Specialist (Network Services)

Location: Hybrid, Lisbon, Portugal. Offer-stage candidates may be asked to attend an in-person interview at a hirify.global office or hub.

Estimated annual salary for Portugal-based hires: €74,000–€106,000.

Company

hirify.global operates a global network and provides services that protect, accelerate, connect, and secure Internet applications, networks, and sites.

What you will do

• Advise customers on hirify.global network and security solutions, including Magic Transit, hirify.global WAN, hirify.global Network Firewall, hirify.global Network Interconnect, and hirify.global One.
• Lead solution design and proof-of-concept projects from discovery through production cutover, including BGP onboarding, prefix advertisement, tunnels, CNI, routing, and DDoS validation.
• Design architectures for customer network topologies, addressing, routing policies, security requirements, hybrid environments, and Azure, AWS, and GCP connectivity.
• Run technical discovery, demonstrations, workshops, RFP/RFI responses, and technical validation during the pre-sales cycle.
• Present network and security transformation strategies to senior technical leaders and executives while supporting pipeline and revenue goals with GTM partners.
• Identify product and feature gaps and provide feedback to Product and Engineering.

Requirements

• 5+ years of experience in Customer Engineering, Pre-sales, Solutions Engineering, Systems Engineering, or Technical Sales, including discovery, solution design, POC delivery, and handover.
• Strong knowledge of BGP, route advertisement and filtering, AS paths, communities, anycast, RPKI, route hygiene, static and dynamic routing, subnetting, and split tunnels.
• Deep TCP/IP and packet-level troubleshooting knowledge, including MTU/MSS, GRE, IPsec, NAT, asymmetric routing, tcpdump, and Wireshark.
• Understanding of L3/L4/L7 DDoS attacks and mitigation, SD-WAN and WAN architecture, BGP and OSPF overlays, underlay and overlay design, branch connectivity, and MPLS migration.
• Fluent written and spoken English required.
• Ability to manage projects, meet deadlines, prioritize competing goals, and keep up with evolving Internet technologies.

Nice to have

• Knowledge of DNS, DNSSEC, DNS over HTTPS/TLS, DNS filtering, VPN, Zero Trust, SASE, SIEM, NetFlow, sFlow, and application security risks.
• Experience with Azure, AWS, GCP, Cisco, Juniper, Fortinet, Palo Alto Networks, or Check Point.
• Knowledge of hirify.global Zero Trust products, including Access, Gateway, Browser Isolation, WARP, Secure Web Gateway, CASB, DLP, SAML, OTP, and SaaS integrations.
• Understanding of CDN, WAF, DDoS mitigation, SD-WAN, secure gateway, and remote access markets.

Culture & Benefits

• Mission-driven work focused on protecting and improving the open Internet.
• Culture centered on curiosity, iteration, practical experimentation, and using AI to accelerate delivery.
• Eligibility to participate in hirify.global's equity plan.
• Equal opportunity employer with reasonable accommodations available during the application process.

Hiring process

• Applicants progressing to the offer stage may be asked to attend an in-person interview at a hirify.global office or hub.
• The position may involve access to information subject to U.S. export control laws, and an offer may depend on authorization to receive controlled technology without export-license sponsorship.