Senior Network Engineer - Full Content Inspection and Mitigation

Trinity Cyber invented the ability to perform Full Content Inspection and Mitigation on live internet traffic. We can open, scan, apply a mitigation action, and rebuild full-session internet traffic (protocol fields and files) in both directions, inline, and in context to mitigate actual threat content before it becomes an incident or loss. Our solution outperforms and replaces every Secure Access Service Edge (SASE) solution on the market. You will be part of an innovative and collaborative team that is fundamentally changing the cyber security industry.

We are looking for top tier network engineers to help architect a more scalable and higher performance global network to support the anticipated expansion of our Full Content Inspection services into additional markets. Candidates should have strong automation skills along with significant experience designing and performance tuning networks in a self-hosted environment spanning multiple data centers. We foster small talented teams with the latitude to generate new ideas and solve real problems. We encourage and expect our team members to create high quality, secure, and performant solutions. We focus heavily upon the technology, and support flexible fully remote work schedules with negligible administrative overhead and minimal time wasted in meetings. This role does not utilize public cloud tools.

WHAT YOU WILL DO:

• Perform capacity planning, performance monitoring, and advanced diagnostics to ensure optimal network performance and scalability. Use data and forecast models to make networks more efficient and reliable.
• Continually improve automation supporting our privately hosted physical, virtual, and containerized applications.
• Plan, deploy, monitor, and support a broad range of networking and data center hardware and virtual systems.
• Help drive our automation-first, highly monitored, stability focused team to move efficiently & safely.
• Write clear, maintainable, highly performant, secure and well-tested code using Python.
• Participate in code reviews to ensure that our codebase remains of the highest quality.

QUALIFICATIONS AND EXPERIENCE:

• Experience performance tuning Linux systems, particularly related to networking.
• Advanced linux knowledge of Kernel and iproute2 networking (traffic control, netfilter/nftables, namespeces, etc.), User space networking (frr/quagga, strongswan/libreswan, etc.), or Virtualization (KVM/Qemu) preferred.
• Strong python application development knowledge and experience.
• Knowledge of major kernel subsystems (network stack, memory management, process/thread management).
• Experience with networking concepts and debugging tools tcpdump/wireshark.
• Knowledge of basic networking including L2 and L3 fundamentals, stateful devices (firewalls, proxies), etc.
• Understanding of basic protocols (LACP, LLDP, ARP, ND, IP (v4/v6), TCP, UDP, BFD, HTTP, SMTP, TFTP, IKE/ESP, TLS).
• Familiarity with networking concepts like dynamic routing (OSPF, iBGP/eBGP, filter-based forwarding, rpm/event scripts), ISP/IX full table peering and multi-ISP environments.
• Experience with systems integration (API development, web services, message queues, etc).
• Experience working with any/all of Nautobot, Telegraf/InfluxDB/Grafana, Elasticsearch/Logstash/Kibana, and other automation and monitoring tools are strongly preferred.
• Experience with any/all of Juniper (especially QFX5K based EVPN environments), VMware NSX-T, F5 BIG-IP (primary focus on SSLO), Palo Alto NGFW and Panorama would also be a big plus.
• Familiarity with integrating Linux applications into Windows systems: AD/DNS/DHCP/NPS, and ADFS.
• Familiarity with issues surrounding application layer proxying of network protocols.
• Proven ability to learn quickly and solve significant problems with minimal direction.
• Willingness to perform deep research and/or reverse engineer poorly documented standards.
• Bachelors degree in Computer Science, Technology, Engineering, or Math is preferred.
• Can operate in a closed private hosted environment without access to public cloud tools.
• Impeccable troubleshooting skills and ability to rapidly understand the basic design and operation of new systems.
• Must possess the highest level of personal integrity, value team success over individual achievement, and enjoy working on a fully remote team in a very high tech environment.