Network Engineer - Core Infrastructure
Job description
com.
About the role
Become a vital member of Kraken's Core Infrastructure Engineering team, where you will be responsible for designing, securing, and managing the network and data center infrastructure for one of the top cryptocurrency exchanges in the world. This position is ideal for a proactive engineer with a strong emphasis on security who is adept at automating repetitive tasks and thriving in a dynamic environment. Your contributions will be essential in shaping and maintaining the foundational systems that support Kraken's global operations.
Key facts
What you'll do
- Design and implement data centers, focusing on physical layout, power distribution, cabling, and hardware setup.
- Oversee network connectivity, coordinating with carriers, managing circuit deliveries, and planning capacity effectively.
- Develop and enhance modern data center fabrics, utilizing technologies such as Cisco ACI and HPE Juniper Apstra.
- Create and maintain a secure, zero-trust network architecture, emphasizing firewalls, policies, and network segmentation.
- Establish and refine enterprise network access controls to ensure role-based access and adherence to the principle of least privilege.
- Collaborate with engineering teams and IT security to embed security considerations into product development from the outset.
- Address infrastructure requests related to provisioning, access, and troubleshooting, ensuring prompt and effective resolutions.
- Monitor and sustain all physical and cloud-based infrastructure, responding to incidents to maximize system uptime.
- Implement infrastructure as code practices and develop automation tools and internal utilities to boost team productivity.
- Produce high-quality technical documentation and provide mentorship on secure networking practices to team members.
Requirements
- A minimum of 2 years of experience in network engineering with a solid focus on security.
- Hands-on experience with firewalls, particularly with Palo Alto Networks, including PAN-OS and Panorama.
- Practical knowledge of data center physical infrastructure, encompassing racking, cabling, and hardware installation.
- Familiarity with switching concepts (such as VLANs and capacity planning) and routing protocols (including OSPF, BGP, ECMP, and PBR).
- Exposure to public cloud networking environments (AWS, Azure, or GCP) and hybrid cloud connectivity solutions.
- Experience with infrastructure-as-code tools like Terraform and Ansible, with a strong preference for automation practices.
- Proficient in managing VPN and remote access connectivity solutions.
- A strong desire to automate repetitive tasks and a keen sense of ownership regarding operational details.
- Experience with industry-standard platforms from vendors like Palo Alto Networks, Cisco, HPE Juniper Networking, and HPE Aruba Networking.
- A valid passport and readiness to travel internationally as needed.
Nice to have
- Experience in large-scale data center design and construction, including multi-site deployments and carrier management.
- Expertise in data center fabric design, particularly with Cisco ACI or HPE Juniper Apstra.
- In-depth knowledge of firewall design and operations, including multi-site policy management and high availability clusters using PAN-OS/Panorama.
- Experience in developing AI agents or developer tools aimed at reducing operational workload, such as for triage or runbook automation.
- Familiarity with defensive security systems, including IDS/IPS, security monitoring, and security testing methodologies.
- Extensive experience with public, private, or hybrid cloud environments, including end-to-end ownership of Infrastructure as Code (IaC) pipelines.
Skills & tools
- Proficient in Palo Alto Networks / PAN-OS / Panorama
- Skilled in Cisco ACI
- Familiar with HPE Juniper Apstra
- Knowledgeable in Terraform
- Experienced with Ansible
- Proficient in AWS, Azure, GCP
- Understanding of OSPF, BGP, ECMP, PBR
- Familiar with VLANs
Practical notes
Applications are accepted continuously unless a specific deadline is indicated. Candidates may choose to redact personal information such as age, date of birth, or educational attendance dates from their resumes. Kraken is committed to diversity and encourages applications from individuals who may not meet every single requirement but are enthusiastic about cryptocurrency and its potential. Qualified applicants with criminal histories will be considered in accordance with the San Francisco Fair Chance Ordinance.
About the company
Own the power of your money with Kraken. Trade crypto, stocks, futures, staking and more. Trusted by millions worldwide since 2011. Get started today.