Extranet Networking Engineer

TL;DR

Extranet Networking Engineer (Low Latency Trading): Designing and architecting network patterns in low latency high frequency trading environments with an accent on modern cybersecurity and firewall standards. Focus on optimizing trading platforms, collaborating with business stakeholders and CSO teams, and ensuring infrastructure reliability under mission-critical conditions.

Location: Based in our Prague office.

Company

Multinational investment bank with specialized infrastructure teams supporting mission-critical trading platforms.

What you will do

• Provide 2nd line support for extranet and external connectivity services, monitoring, troubleshooting, and resolving issues with routing, firewalls, and certificates.
• Support partner onboarding and offboarding, following approved patterns and procedures.
• Troubleshoot low-latency connectivity, BGP routing, and performance issues for latency-sensitive services.
• Investigate incidents, contribute to root cause analysis, and execute approved changes and maintenance.
• Collaborate with Network, Security, and Application teams to resolve cross-domain issues.
• Maintain runbooks, SOPs, participate in on-call support, and enhance automation, monitoring, and resiliency.

Requirements

• Based in Prague office.
• Solid understanding of TCP/IP networking, routing, and DNS.
• Working experience with BGP (peering, route advertisement, troubleshooting).
• Exposure to low-latency networking concepts (latency, packet loss, jitter, path selection, performance troubleshooting).
• Hands-on experience with firewall technologies (policy implementation, NAT, access control), VPN (IPSec, SSL, site-to-site), TLS/SSL certificate management.
• Operational experience on Linux/Unix platforms, log analysis, packet captures, incident and change management.

Nice to have

• Experience supporting external client connectivity, exchange trading venues, multicast market data feeds.
• Experience with CSO/CISO, third-party risk management, Network routing (BGP), PTP protocols.
• Scripting, Ansible automation, open-source monitoring tools (Prometheus, Telegraf).
• CCNP, CCDA, CISSP certifications.

Culture & Benefits

• Demonstrate hirify.global Values: Respect, Integrity, Service, Excellence, Stewardship.
• hirify.global Mindset: Empower, Challenge, Drive.
• Collaborate across functions, contribute to policy development, manage risk and controls.
• Leadership expectations for advising, influencing, team leadership or guiding collaborative assignments.