Senior Network Infrastructure Engineer

About the role

Citi is looking for a Senior Network Infrastructure Engineer to join its Network and Client Infrastructure Services (NCIS) team in Budapest. You will design and deliver complex load balancing solutions that support global technology operations, turning technical and non-technical requirements into robust network designs that meet Citi's engineering standards. The role sits at the intersection of infrastructure engineering and client service, within a large-scale global environment.

Key responsibilities

• Design, configure and implement network security and network engineering solutions, including SD-WAN, firewall architectures and routing/switching infrastructure.
• Architect and deploy enterprise routing solutions on Cisco platforms using BGP, OSPF, EIGRP, MPLS and spanning-tree variants in enterprise and B2B environments.
• Design and operate SD-WAN solutions (e.g. Cisco Viptela, Versa, VeloCloud) across enterprise and B2B interconnects.
• Work with cybersecurity professionals to evaluate and integrate new security technologies and vendors, and implement security best practices.
• Write technical guides, automation tools and documentation, and keep it updated and compliant with industry standards.

Required profile

• Deep hands-on expertise with Cisco routing and switching platforms (Catalyst, Nexus, ASR, ISR).
• Proven SD-WAN design and operations experience in enterprise or B2B connectivity contexts.
• B2B networking experience (BGP peering, partner interconnects, cross-organization integration) is a must.
• Strong hands-on experience with network devices, firewalls and Linux systems, and ability to mass-manage configurations and troubleshoot security controls.
• Excellent communication skills and experience working with cross-functional teams and stakeholders.

Required skills

• Routing protocols: BGP, OSPF, EIGRP, IS-IS, MPLS/L3VPN.
• Enterprise networking: campus LAN, WAN, datacenter networking, HSRP/VRRP.
• Firewall technologies: Check Point, Palo Alto, Fortinet and open-source alternatives.
• Security protocols: IPsec, SSL/TLS, VPN, IDS/IPS, proxies, WAFs.
• Automation: Bash scripting, Python, Ansible.
• Preferred: CCIE, CCNP, CISSP, CISM, PCNSE or NSE certifications; Kubernetes and ISO 27001, NIST, CIS familiarity.

What we offer

• Hybrid working model (up to 2 days at home per week) in a business casual workplace.
• Cafeteria program, home office allowance and paid parental leave.
• Private medical care, pension plan contribution, group life insurance and employee assistance program.
• Learning programs and flexible work arrangements.