Cloud Network Engineer at Trumid

About us.

Trumid is a dynamic fintech revolutionizing the landscape of fixed income trading. With intelligent, easy-to-use, electronic solutions, we are rapidly growing and seeking exceptional talent to help redefine the boundaries of technology and finance.

Founded in 2014 by a team of fixed income market experts, Trumid has quickly become one of the top three corporate bond e-trading platforms in the U.S. Today, over 1,300 traders from an extensive and expanding client network of 890+ buy-and sell-side institutions transact on Trumid monthly.

With a rich history of innovation and a unique ability to innovate at scale, we collaborate closely with our clients, iterating quickly toward optimal solutions. With market share and client engagement at all-time highs and our pace of product development faster than ever, this is an exciting and transformative time at Trumid.

Our business model thrives on participation, and so does our company culture. We rely on every team member’s contribution to help us accomplish our goals. To succeed at Trumid, you must be curious, passionate about your craft, ambitious, collaborative, and driven.

The opportunity.

We are seeking a Cloud Engineer to join our growing team at a leading fintech company. This role offers a unique opportunity to work across major cloud providers, integrating cloud and hardware networking solutions to support our rapidly expanding infrastructure. As we scale, the complexity of our network architecture and the number of cloud environments we operate in will increase. The ideal candidate is passionate about building resilient, high-performance networks and is committed to enhancing the security and efficiency of our multi-cloud environment.

In this role, you will be responsible for designing, implementing, and operating networking solutions that span multiple cloud providers, ensuring seamless integration and optimal performance. You will have the chance to work in a dynamic environment where the network infrastructure is continuously evolving, and your contributions will directly impact the scalability and reliability of our systems.

As a Cloud Engineer, you will:

• Architect, design, and operate on the hybrid networking platform, integrating both cloud and hardware (routers) in a multi-cloud environment.
• Collaborate with internal and external teams, as well as industry partners, to ensure that customer and business requirements are met while upholding our Service Level Agreement (SLA).
• Leverage and expand your expertise in large-scale networking across multiple cloud platforms, driving efforts to enhance the resilience, performance, and security of our networking solutions.
• Develop reliable, scalable, and high-performance network designs and produce design documents and implementation plans for networking solutions across multiple cloud environments.
• Propose modifications and improvements to network technologies based on existing and emerging industry knowledge to contribute to the design, implementation, and operation of reliable, scalable, and high-performance networks.
• Analyze traffic patterns across complete network infrastructures, including multi-cloud environments, to identify needs to modify capacity.
• Continuously review the network architecture to identify risks and determine improvements, as well as measures to ensure the highest network security across all cloud platforms.
• Operate networking solutions with the highest quality bar and invest in developing and deploying robust automation tools that increase engineering efficiency, minimize operational burden, and reduce human errors, while optimizing the utilization of infrastructure and resources.
• Define telemetry analytics and quality metrics to drive new data collection instrumentation that can improve the detection and troubleshooting of problems.
• Troubleshoot and repair complex multi-layer incident issues.
• Stay updated with industry trends and best practices in cloud networking, security, and automation.
• Champion best practices for infrastructure as code and network automation, driving improvements in our overall networking strategy.

About you.

• 7+ years of hands-on technical experience managing large-scale networks that includes physical on-prem devices and their virtualized counterparts in one or more public cloud providers.
• Proven success at earning the trust of skeptical internal and external stakeholders

Required experience:

• Troubleshooting complex BGP routing topologies that span public clouds, NAAS providers, internet exchanges, and multiple ISPs.
• Working with provider independent IP space / BYOIP in a public cloud or multiple ISP/NAAS provider context.
• VPCs, firewalls, security groups, virtual routers, load balancers and private interconnects in one or more public cloud providers (AWS, Azure, GCP, or OCI)
• Complex DNS architectures involving self-hosted AD or BIND servers as well as managed DNS services such as GCP Cloud DNS or AWS Route 53.
• Troubleshooting vaguely defined network issues by analyzing network-level telemetry such as netflow or packet captures in conjunction with data obtained from endpoints via netstat, nslookup, etc
• Implementation of Next-generation firewalls and other Layer 7 inspection mechanisms
• Mission-critical operational models such as ITIL or MOF - particularly as it relates to change, incident and problem management.
• One or more network observability platforms that ingest large amounts of syslog, snmp, netflow, and similar telemetry for both alerting and troubleshooting purposes
• Solid familiarity with at least one scripting language (Python, Powershell, Bash, etc)
• Remote management of mission-critical network devices located in a colocation provider such as Equinix, Level 3, Sungar, Cologix or similar

Highly desired experience:

• Managing network constructs using an IaC platform such as Terraform, AWS Cloudformation, AWS CDK, Azure Resource Manager, or similar.
• Identifying and mitigating large-scale DDOS, brute force, SQL injection and similar targeted attacks in progress
• IPAM using a tool like Infoblox, Bluecat, Solarwinds, NetBox or similar.
• Troubleshooting container-based networking / service mesh in Kubernetes
• Managing mobile-user VPN solutions based on IPSEC, Wireguard, or similar for hundreds of users.
• Designing BCDR solutions, particularly orchestrating and testing regional failover of mission critical services

Nice to have experience:

• Specific background troubleshooting Palo Alto firewalls
• Managing Cisco routers and switches
• Building dashboards in Prometheus / Grafana

Employee benefits.

• Highly competitive compensation
• Fully paid medical, dental and vision coverage
• Remote work
• Team-oriented and collaborative company culture

Trumid is an equal opportunity employer.

In compliance with New York City Pay Transparency Law, the base salary range for this role in New York City is between $175 - 230k. This range does not include discretionary bonus or other forms of compensation or benefits offered in connection with this job. Several factors are considered when determining a candidate’s compensation.Please note that the salary range listed for this position is based on the level of experience outlined in the job description. If a candidate's experience differs from the requirements, the salary may be adjusted accordingly.