albo
albo is a leading fintech company offering financial products to individuals and SMBs with the mission to bring financial freedom to everyone, everywhere.
About the role
We are seeking a hands-on Network Engineer to own the network our financial products run on, across on-prem, GCP, AWS and private connections to partners. You will decide how traffic gets from A to B: addressing, routing, segmentation, DNS, firewalls and the internet edge. When a packet doesn't arrive, you are the person who finds out why. We run the network as code, so your changes are versioned, reviewed and applied through a pipeline.
What You Will Do
- Network Design: Own the IP addressing plan and network segmentation, and evolve our topology towards a central ingress/egress hub.
- Routing & Connectivity: Design and operate site-to-site IPsec VPNs with dynamic routing (BGP), private connectivity across clouds and with partners, and NAT, with redundancy and tested failover.
- Firewalls & Remote Access: Operate cloud-native and next-generation firewalls (FortiGate, Palo Alto or similar) and remote-access VPN, implementing policies defined with the Information Security team.
- DNS: Own public, private and split-horizon DNS across clouds and providers.
- Load Balancing & Edge: Operate L4/L7 load balancing, TLS termination, WAF and rate limiting, and reverse proxies.
- Troubleshooting & Observability: Diagnose connectivity, latency and DNS issues with packet captures and flow logs, build network alerts and dashboards, and lead the network side of incident response.
- Network as Code: Manage network changes with Terraform and pull requests, script repetitive operations, and help make common requests such as IP allowlists self-service.
- Collaboration: Work closely with Platform, DevOps and Information Security, and document the network in runbooks and diagrams so it never depends on a single person.
About You & Required Skills
- 4+ years in a network engineering role, designing and operating production networks. Cloud or DevOps backgrounds count only if networking was the core of the job.
- Strong fundamentals: TCP/IP, subnetting/CIDR, routing (BGP path selection and route filtering), NAT, IPsec, DNS, TLS and HTTP.
- Packet-level troubleshooting with tcpdump/Wireshark, traceroute/mtr and dig, including MTU and asymmetric routing issues.
- Hands-on experience with firewalls and site-to-site VPNs.
- Hands-on cloud networking on GCP or AWS: VPCs, routes, firewall rules/security groups, load balancers and private connectivity.
- Working knowledge of Terraform and scripting (Python, Go or Bash). Strong network automation with Ansible or Python also counts.
- Clear communication and documentation, and an extreme ownership mindset.
- Based in Mexico City, with availability to work on-site.
Nice to Have
- Kubernetes networking (Services, Ingress, NetworkPolicies) and NGINX.
- Certifications such as CCNP/CCIE, Google Professional Cloud Network Engineer, AWS Advanced Networking or Fortinet NSE.
- Experience in regulated environments such as financial services or payments.
- Experience using AI tools to automate network operations and troubleshooting.
Skills Required
- 4+ years of experience in network engineering, designing and operating production networks
- Strong knowledge of TCP/IP, subnetting and CIDR, BGP path selection and route filtering, NAT, IPsec, DNS, TLS, and HTTP
- Packet-level troubleshooting experience using tcpdump, Wireshark, traceroute or mtr, and dig
- Hands-on experience with firewalls and site-to-site VPNs
- Hands-on cloud networking experience with GCP or AWS, including VPCs, routes, firewall rules or security groups, load balancers, and private connectivity
- Working knowledge of Terraform and scripting with Python, Go, or Bash
- Strong network automation experience with Ansible or Python
- Clear communication, documentation skills, and an extreme ownership mindset
- Based in Mexico City and available to work on-site
- Kubernetes networking and NGINX experience
- CCNP, CCIE, Google Professional Cloud Network Engineer, AWS Advanced Networking, or Fortinet NSE certification
- Experience in regulated financial services or payments environments
- Experience using AI tools to automate network operations and troubleshooting
What We Do
Albo is a Mexican fintech offering a digital financial platform for individuals and businesses. Through its mobile app, customers can manage personal and business accounts, debit cards, payments, transfers, and day-to-day money; its business platform supports companies with financial management. The company aims to make financial services simpler, more accessible, and transparent, helping users gain greater control over their finances.
.png){kind=logo}
