Senior Network Engineer

XTB is a global company from the financial industry, focusing on online trading of financial instruments. We are the largest FinTech in Poland and a leader in Central and Eastern Europe, and the range of our operations covers several countries, including Asia and South America. At XTB, we focus on the development of our employees, giving them opportunities to gain knowledge and skills in various fields, as well as offering a number of training and development programs. If you are looking for challenges and want to gain valuable experience in an international business environment, XTB is the right place for you.

We are a certified Great Place to Work company.

• Designing, maintaining, and developing LAN/WAN/WLAN networks across offices and data centers.
• Managing traditional data center networks and VXLAN/EVPN-based IP fabrics.
• Configuring and optimizing BGP and OSPF routing, inter-site connectivity, and connections to service providers.
• Administering firewalls, security policies, and IPsec VPN tunnels.
• Administering F5 BIG-IP LTM and F5 BIG-IP DNS/GSLB, including load balancing and traffic distribution across data centers.
• Maintaining and tuning DDoS protection solutions and participating in incident response.
• Monitoring infrastructure, troubleshooting issues, and optimizing network performance and availability.
• Planning and implementing changes, upgrading infrastructure, and testing redundancy and failover mechanisms as part of BCP/DR initiatives.
• Automating infrastructure management and operational workflows using Terraform, Ansible, and GitLab CI/CD.
• Creating and maintaining technical documentation, configuration standards, and operational procedures.
• Performing root cause analysis and implementing preventive measures in collaboration with infrastructure, security, and application teams.

• 5+ years of hands-on experience in maintaining and developing enterprise and data center networks.
• Strong practical knowledge of Cisco Nexus and Catalyst platforms, including NX-OS and IOS-XE, as well as Cisco Firepower Threat Defense (FTD), Firepower Management Center (FMC), and Cisco ASA firewalls.
• Practical knowledge of switching technologies and high-availability mechanisms, including VLAN, STP, LACP, vPC, and HSRP/VRRP.
• Experience in configuring and troubleshooting BGP and OSPF routing.
• Practical knowledge of VXLAN/EVPN IP fabric architecture, including underlay and overlay networks.
• Experience in managing WLAN networks, controllers, and access points, along with knowledge of 802.1X, RADIUS, and TACACS+.
• Practical knowledge of firewalls, security policies, ACLs, NAT, and IPsec VPNs.
• Experience in administering F5 BIG-IP LTM and F5 BIG-IP DNS/GSLB, including load balancing, health monitors, and global server load balancing.
• Knowledge of DDoS protection mechanisms and the ability to analyze network traffic during incidents.
• Strong troubleshooting skills using monitoring systems, logs, NetFlow/sFlow data, and tools such as Wireshark and tcpdump.
• Hands-on experience with Terraform, Ansible, and GitLab CI/CD for network infrastructure automation.
• Ability to independently manage changes and resolve issues, take ownership of infrastructure, and proactively improve the environment.
• Polish proficiency sufficient for fluent communication.
• Good technical English, spoken and written, at a minimum B2 level, enabling communication with vendors and work with technical documentation.

• Experience with Azure/AWS networking services and their integration with on-premises infrastructure.
• Knowledge of IP multicast, including IGMP and PIM.
• Knowledge of Kubernetes networking, including CNI, routing, NetworkPolicy, and load balancing.
• Experience in high-availability, low-latency environments, such as fintech, trading, or telecommunications.