Corportate Network Engineer

HBX Group is the world’s leading technology partner, connecting and empowering the world of travel. We’re game-changers, disruptors, the people who bring together local and global brands in accommodation, transport, activities and payments through our network of 300,000 hotels worldwide, 60,000 hard to reach high value clients such as tour operators, travel agents and loyalty schemes across 140 source markets. We are tech-driven, with a customer-first philosophy, and commercial teams whose knowledge and relationships on the ground are second to none. And of course we have an amazing team! Our people, Team HBX Group, are the beating heart of the company who we encourage to ‘move fast, dream big and make the difference’ every day. In fact, we believe that it is tech + data + people that truly sets us apart in the market, alongside our ‘global approach, local touch’ mentality. We’re headquartered in Palma, Mallorca and employ around 3,500 people worldwide.

Purpose of the role

The Corporate IT Matter Subject Expert for Network forms a part of the team of engineers that are focus on Network related technologies, within the wider Corporate IT team. The role involves driving the implementation, operation and improvement of the network tech stack and practices, including LAN/WAN/Wifi connectivity and firewalling, focusing on our corporate network reliability, scalability, and efficiency. Collaborates closely with the rest of the Technology, Corporate and Platform teams to align on and drive the Corporate IT network. The goal is to build and run a reliable, scalable, and secure network in HBX while fostering a culture of collaboration, innovation, and continuous improvement within the team.

Accountability and responsibilities

• Form a part of the Corporate IT Network team, providing support in day-to-day activities delivering high-quality results and meeting the service targets.
• Collaborate with the Corporate Network Lead and other Technology platforms teams to align on the Corporate IT roadmap and strategy.
• Driving the strategic network initiatives within the technology platform, focusing on on-premises and cloud connectivity and firewalling, meeting the delivery deadlines
• Apply best practices, implement standardized and automated processes, and ensure effective provision of network services, and related monitoring and troubleshooting.
• Provide technical support to troubleshoot and resolve network services related issues. Act as an escalation point for complex technical challenges, driving timely resolutions and ensuring minimal impact to operations.
• Contribute to the design, implementation and operational support of Zero Trust Network Access (ZTNA) solutions, ensuring secure access to corporate applications for on‑premises and remote users.
• Operate and continuously improve Zscaler-based services (e.g. ZIA, ZPA or similar), integrating them with corporate network, identity and cloud platforms.
• Collaborate closely with Security Operations (SOC) teams to support security monitoring, investigation and response related to network and access technologies.
• Ensure network and Zero Trust controls provide appropriate logging, telemetry and visibility to security platforms (SIEM, SOAR, EDR, etc.).
• Support incident response activities related to network security events, acting as a technical escalation point from a networking perspective.
• Stay updated with industry trends and emerging technologies related to the network services provided. Evaluate and recommend the adoption of new tools, technologies, and methodologies that align with the organization's goals and objectives.
• Be a part of a culture of collaboration, innovation, and continuous improvement within the team. Participate in the team knowledge sharing, take advances about learning opportunities, and impulse your skills in base of experimentation and creative problem-solving.
• Participate in discussions and decision-making processes regarding the overall corporate IT architecture and direction.

Key stakeholders

Reporting directly to the Corporate Network Lead and in constant daily/weekly contact to keep alignment across the rest of the technology platform teams and overall goals.

Interacting with the rest of Corporate IT teams daily/weekly.

Interacting with other teams across technology, to get the better solution for daily tasks being aligned on requirements, priorities, deliverables, and service levels in Corporate Network Team.

Position requirements

• Interpersonal skills with high quality written and verbal communication
• Strong analytical and conceptual skills
• Fluent in English and Spanish
• Strong knowledge of Networking related technologies, including cloud networking, load balancing, firewalling, as well as traditional LAN, WAN, switching, and static/dynamic routing (AWS networking, Azure Networking, OSI Layers, etc.)
• Hands-on, real‑world experience with Zero Trust security architectures, applied in production environments.
• Practical knowledge and operational experience with Zscaler technologies (ZIA, ZPA, Zscaler Client Connector, integrations with IdP, CASB, etc.).
• Solid understanding of network security controls, secure access models, identity‑aware networking and least‑privilege connectivity.
• Ability to work effectively with Security Operations teams, understanding detection, alerting, incident handling and operational security workflows.
• Permanent position (no freelance or other contingent model).

Experience

• Minimum of 3 years of experience as a Network Engineer in similar or related positions
• Previous experience in IT Operations or similar Technology functions
• Strong technology background
• Proven hands-on experience in operational environments implementing and supporting Zero Trust networking and secure access solutions (experience with Zscaler in production environments is highly valued).
• Previous experience in IT Operations and/or Security Operations (SOC, SecOps, Network Security Operations).

Qualifications

• IT Operation framework and Agile ways of working certifications are highly desirable
• Bachelor’s degree in computer science, or a related field. A master's degree is a plus.
• Network related certifications are highly desirable (i.e. Cisco CCNA, CCNP, CCIE, etc.).
• Zero Trust, SASE or Zscaler‑related certifications are a strong advantage (e.g. Zscaler Certified Professional).
• Security‑focused certifications or training (network security, cloud security, incident response) are desirable.
• Firewalls from several vendors (Cisco/Meraki, FortiGate)
• Network protocols (MPLS, SDWAN, BGP)
• Tunneling solutions like Site-to-Site VPN.
• Switches (Juniper, Cisco, HP)
• Other devices experience like Aruba, NAC, Riverbed.
• IT Operation framework and Agile ways of working certifications are highly desirable

Key challenges

• Handle complex technology landscape.
• Achieve best in class reliability, scalability and high-performance.
• Balance between reliability and the ability to deploy new functionalities.
• Overcome resistance and drive adoption of new technologies and processes.
• Ensure provided solutions meet security and compliance requirements.
• Resolve complex technical issues efficiently.
• Effectively communicate technical concepts to diverse stakeholders
• Stay updated with the latest trends in Networking related technologies.
• Operate and evolve network and Zero Trust solutions while ensuring strong alignment with Security Operations, detection capabilities and incident response processes

You will have the opportunity to work for a company that is going through significant change in becoming the world´s leading travel services provider. We are looking for people that are ready to ride the wave in this exciting journey.

As well as an attractive benefits package you will be able to work: 

• Within an innovative, engaging and multicultural environment.

• Have the opportunity to build strong and lasting business relationships and friendships from around the world.

• Have the opportunity in developing your career locally or within one of our beautiful working locations across the globe.