albo
albo is a leading fintech company offering financial products to individuals and SMBs with the mission to bring financial freedom to everyone, everywhere.
About the role
We are seeking a hands-on Network Engineer with an automation mindset to join our Infrastructure team. You will own the network layer of our multi-cloud platform (GCP and AWS): VPCs, private connectivity, DNS, load balancers and edge protection. Rather than operating it by hand, you will turn it into code: every route, firewall rule, DNS record and edge policy should be versioned, reviewed through a pull request and applied by a pipeline. You will also bring network capabilities into our Internal Developer Platform (IDP), known internally as Keymaker, so engineering teams can request changes such as IP allowlists through self-service instead of tickets.
What you’ll be doing at albo:
- Cloud Networking: Design, operate, and evolve our network across GCP and AWS (Shared VPC, VPC peering, Private Service Connect, Cloud NAT, Cloud VPN/Interconnect, and private DNS), moving towards a central ingress/egress hub architecture.
- Network as Code: Codify network infrastructure with Terraform and automate repetitive operations (DNS records, firewall rules, IP allowlists) with Python or Go, delivered through GitOps workflows (e.g., via Bitbucket PRs and CI/CD pipelines).
- Load Balancing & Edge: Operate Google Cloud Load Balancing, Cloud Armor (WAF and rate limiting), IAP, and our NGINX-based private proxies on GKE, implementing the policies defined together with the Information Security team.
- Observability & Troubleshooting: Use VPC Flow Logs, Cloud Logging, and Datadog to diagnose connectivity, latency, and DNS issues, build network alerts and dashboards, and lead the network side of incident response.
- Collaboration: Work closely with Platform, DevOps, and Information Security teams, documenting the network in runbooks and diagrams so that network operations never depend on a single person.
About you and what type of skills you'll need:
- 2+ years of experience in a Network Engineering, Cloud Engineering, or DevOps/SRE role with a strong networking focus.
- Solid networking fundamentals: TCP/IP, subnetting/CIDR, routing (BGP basics), NAT, DNS, TLS, and HTTP.
- Hands-on experience with Infrastructure as Code (Terraform) and scripting in Python, Go, or Bash to automate network tasks.
- Hands-on experience with cloud networking on GCP and/or AWS (VPCs, firewall rules/security groups, load balancers, private connectivity, VPN).
- Familiarity with Kubernetes networking (Services, Ingress, NetworkPolicies), reverse proxies such as NGINX, and edge controls such as Cloud Armor or AWS WAF.
- Experience leveraging AI tools to automate network operations and troubleshooting is a massive plus, as are certifications such as Google Professional Cloud Network Engineer, AWS Certified Advanced Networking, or CCNA/CCNP.
- Automation-first approach: if you do it twice, you script it. You measure success by fewer manual changes, fewer network incidents, and faster turnaround on network requests.
- Excellent communication and documentation skills, eagerness to keep growing, and an extreme ownership mindset.
New Zealand