Network Engineer, Senior

Shift4 (NYSE: FOUR) is boldly redefining commerce by simplifying complex payments ecosystems across the world. As the leader in commerce-enabling technology, Shift4 powers billions of transactions annually for hundreds of thousands of businesses in virtually every industry. For more information, visit www.shift4.com.

Summary

We are looking for a Network Engineer to join our EU network engineering team. You will help operate, troubleshoot and improve business-critical networks spanning our physical production data centers and networking services in AWS, Google Cloud and Cloudflare. This is a hands-on role across data-center networking, firewalls, application delivery, remote access and cloud connectivity, working closely with Security, Systems, Corporate IT, NOC and application teams.

Responsibilities

• Operate and improve enterprise and data-center infrastructure, including Cisco Nexus/Catalyst switching, Fortinet FortiGate firewalls, routing, network segmentation and ISP/WAN connectivity.
• Monitor network availability, performance and capacity; diagnose outages and complex traffic-flow issues using device telemetry, logs, packet captures, tracing and protocol analysis.
• Support F5 BIG-IP application delivery services, including virtual servers, pools, health monitors and related security/access features; troubleshoot end-to-end connectivity with application owners.
• Maintain network-side VPN, remote-access and device-authentication services, including FortiGate VPN, FortiAuthenticator, TACACS+/RADIUS and role-based network access, in coordination with IT and identity teams.
• Support cloud and edge networking in AWS, GCP and Cloudflare, including DNS and traffic-delivery services such as Amazon Route 53 and AWS load balancers.
• Help maintain resilient services through high-availability design, redundant ISP connectivity, SD-WAN, monitoring, configuration backups and out-of-band recovery capabilities.
• Contribute to network architecture, capacity planning, infrastructure modernization, and resiliency improvements supporting new services and business requirements.
• Implement approved upgrades, configuration changes and service migrations using documented change controls, pre-change checks, rollback plans and post-change validation.
• Work with the NOC and application teams on incident response and approved inter-site traffic-routing/failover activities, verifying both network health and application impact.
• Participate in incident response, root-cause analysis, and the implementation of corrective actions to improve network stability and availability.
• Maintain accurate diagrams, device and circuit inventory, procedures, operational documentation and incident records; coordinate as needed with service providers and data-center remote hands.
• Partner with Security on vulnerability remediation, configuration hardening and controls relevant to a payments environment, including PCI and SOX requirements where applicable; participate in an on-call support rotation.
  
  

• Hands-on experience supporting enterprise or data-center networks in a production environment, with strong TCP/IP, subnetting, VLAN, switching, routing and DNS fundamentals.
• Experience with enterprise firewalls and Cisco or comparable switching platforms; understanding of VPNs, NAT, access controls, BGP/static routing and high-availability concepts.
• Practical troubleshooting skills, including use of network-device CLIs, monitoring tools, logs, packet captures and root-cause analysis.
• An operational mindset: careful change execution, clear documentation, effective incident communication and attention to availability and security.
• Ability to collaborate across infrastructure, security and application teams and communicate technical findings clearly.
  
  

• Fortinet ecosystem experience (FortiGate, FortiManager, FortiAnalyzer or FortiAuthenticator), Cisco Nexus/vPC/fabric networking or F5 BIG-IP LTM, WAF and APM.
• AWS/GCP networking, Route 53 DNS/health checks, Cloudflare, load balancers and traffic steering between data centers or cloud services.
• Infrastructure monitoring, configuration backup, inventory and recovery tools such as OpsRamp, Unimus, Device42 or out-of-band console systems.
• Experience supporting highly available payments or other regulated services, and relevant certifications such as CCNA/CCNP, Fortinet or F5 credentials.