Senior Network Engineer at SBS, FR-Courbevoie
Senior Network Engineer at SBS in FR-Courbevoie. Est. up to $60k. Apply with swipeandhired.
III Job ID 2026-8963 Category Technical/Engineering Job Location FR-Courbevoie Position Overview English Version: We are looking for a skilled and knowledgeable Senior Network Engineer to join our IT Infrastructure team. The ideal candidate will have strong experience in designing, implementing, and maintaining secure and efficient network infrastructures. Key areas of expertise include SASE (Secure Access Service Edge), BGP (Border Gateway Protocol), Firewall management, SD-WAN (Software-Defined Wide Area Network), CSP (Cloud Service Provider) operations, Reverse Proxy technology, and Data Center Network Architecture (Layer 3 leaf-spine / Clos fabric design) and Wifi Technology. The role also requires a solid IT Security background beyond firewall administration. Professional English proficiency (written and spoken) is mandatory — this role requires daily collaboration with a globally distributed team and stakeholders across Europe, the US, and India. Responsibilities Network Design and Implementation: Design, deploy, and maintain high-performance and resilient network infrastructures that meet the organization’s business needs. Implement SASE solutions to enhance network security and ensure secure access across different environments. Configure and manage BGP routing for optimal network performance and reliability. Data Center Network Architecture: Design, deploy, and operate Layer 3 leaf-spine (Clos) data center fabric architectures, ensuring predictable, low-latency, non-blocking connectivity between compute and storage resources. Implement and maintain underlay routing (BGP-based) and overlay technologies (VXLAN/EVPN) to support scalable, multi-tenant data center fabrics. Support data center migrations, cutovers, hardware refresh, and fabric expansion projects with minimal service disruption. Firewall and Security Management: Configure, manage, and monitor firewalls, including rule sets, VPNs, and threat prevention features. Conduct regular firewall audits and assessments to ensure compliance with security policies and industry standards. SD-WAN Management: Design and implement SD-WAN solutions to optimize connectivity and performance across multiple locations. Monitor and manage SD-WAN environments, addressing any issues or performance bottlenecks. Cloud Service Provider Operations: Integrate and manage network services within CSP environments (e.g., AWS, Azure, GCP), ensuring secure and efficient cloud connectivity. Implement and manage VPNs, VPCs, and other cloud networking components. Reverse Proxy Management: Configure and manage reverse proxy technologies to optimize and secure web traffic, ensuring proper load balancing and protection for backend servers. Monitor reverse proxy performance and troubleshoot issues to ensure reliable application delivery. IT Security and Compliance: Apply IT security best practices across network infrastructure, including system/device hardening, vulnerability management, and secure configuration baselines. Work closely with the security team on Zero Trust network access principles, network segmentation, and threat detection. Implement and maintain intrusion detection and prevention systems (IDS/IPS). Support security audits, vulnerability/penetration test remediation, and compliance reporting against industry standards. Troubleshooting and Support: Provide advanced troubleshooting for network issues, identifying root causes and implementing effective solutions. Collaborate with other IT teams to resolve complex technical problems and support network-related incidents. Documentation and Reporting: Maintain detailed documentation of network configurations, changes, and procedures. Generate regular reports on network performance, security incidents, and project progress for management review. Continuous Improvement: Stay updated on the latest industry trends and technologies, applying this knowledge to improve network efficiency, security, and performance. Propose and implement network upgrades and enhancements to meet evolving business needs. Qualifications Education: Bachelor’s degree in Computer Science, Information Technology, or a related field. Relevant certifications (e.g., CCNA, CCNP, CISSP) are a plus. Experience: 5–8 years of experience in network engineering, with a strong focus on SASE, BGP, Firewalling, SD-WAN, CSP operations, and Reverse Proxy technologies, including hands-on experience operating data center network fabrics (spine-leaf / Clos architectures). Technical Skills: Proficient in configuring and managing SASE solutions and technologies. In-depth knowledge of BGP and other routing protocols. Hands-on experience with firewall technologies (e.g., Palo Alto, Fortinet). Strong understanding of SD-WAN technologies and best practices. Experience with network operations in cloud environments such as AWS, Azure, or GCP. Expertise in configuring and managing reverse proxy technologies (e.g., NGINX, HAProxy). Strong hands-on expertise in data center network architecture: Layer 3 leaf-spine (Clos) fabric design, and underlay/overlay (BGP EVPN-VXLAN) technologies. Solid IT Security background: vulnerability management, security hardening, Zero Trust principles, IDS/IPS, and familiarity with security compliance frameworks. General working knowledge of Aruba fabric switching (AFC-managed) and Cisco Meraki (SD-WAN, switching, wireless) — comfortable with day-to-day administration and troubleshooting; deep vendor-specialist expertise not required. Language Skills: English: mandatory. Professional proficiency, both written and spoken, to effectively collaborate with global teams and communicate with stakeholders. Candidates without a professional working level of English will not be considered. Soft Skills: Strong self-learning capabilities. Excellent problem-solving and analytical skills. Strong communication skills, with the ability to explain complex technical concepts to non-technical stakeholders. Ability to work independently and as part of a collaborative team. Preferred Certifications: Cisco Certified Network Professional (CCNP) Certified Information Systems Security Professional (CISSP) AWS Certified Advanced Networking – Specialty Palo Alto Networks Certified Network Security Engineer (PCNSE) Relevant reverse proxy certifications or experience Cisco CCNP Data Center (350-601 DCCOR) or CCIE Data Center – data center fabric design and operations Juniper Networks Certified Internet Professional – Data Center (JNCIP-DC) or JNCIE-DC Arista Certified Engineer (ACE) – data center switching/fabric CompTIA Security+ – baseline IT security certification French Version: Nous recherchons un(e) Ingénieur·e Réseau Senior expérimenté(e) et doté(e) de solides connaissances pour rejoindre notre équipe IT Infrastructure . Le/la candidat(e) idéal(e) dispose d’une expérience confirmée dans la conception, le déploiement et la maintenance d’infrastructures réseau sécurisées, performantes et résilientes. Les principaux domaines d’expertise recherchés incluent le SASE (Secure Access Service Edge) , le BGP (Border Gateway Protocol) , la gestion des firewalls , le SD-WAN (Software-Defined Wide Area Network) , les opérations auprès de CSP (Cloud Service Providers) , les technologies Reverse Proxy , ainsi que l’ architecture réseau des Data Centers (Layer 3 leaf-spine / architecture fabric Clos) et les technologies Wi-Fi . Le poste requiert également une solide expertise en sécurité IT , au-delà de la seule administration des firewalls. Un niveau d’anglais professionnel, à l’écrit comme à l’oral, est obligatoire . Le poste implique une collaboration quotidienne avec des équipes et des interlocuteur·trice·s réparti(e)s à l’international, notamment en Europe, aux États-Unis et en Inde. Vos missions Conception et déploiement des réseaux Concevoir, déployer et maintenir des infrastructures réseau hautement performantes et résilientes, répondant aux besoins de l’organisation. Mettre en œuvre des solutions SASE afin de renforcer la sécurité du réseau et de garantir un accès sécurisé dans différents environnements. Configurer et administrer le routage BGP afin d’optimiser les performances et la fiabilité du réseau. Architecture réseau des Data Centers Concevoir, déployer et exploiter des architectures Layer 3 leaf-spine (Clos) pour les Data Centers, en garantissant une connectivité prévisible, à faible latence et non bloquante entre les ressources de calcul et de stockage. Mettre en œuvre et maintenir le routage underlay basé sur BGP ainsi que les technologies overlay (VXLAN/EVPN) afin de prendre en charge des fabrics Data Center évolutives et multi-tenant. Participer aux projets de migration de Data Centers, de bascule, de renouvellement matériel et d’extension de fabric, en minimisant les interruptions de service. Gestion des firewalls et sécurité Configurer, administrer et superviser les firewalls, notamment les règles de sécurité, les VPN et les fonctionnalités de prévention des menaces. Réaliser régulièrement des audits et des évaluations des configurations firewall afin de garantir leur conformité avec les politiques de sécurité et les standards du secteur. Gestion du SD-WAN Concevoir et mettre en œuvre des solutions SD-WAN afin d’optimiser la connectivité et les performances entre plusieurs sites. Superviser et administrer les environnements SD-WAN, en identifiant et en résolvant les incidents ainsi que les problèmes de performance. Opérations auprès des Cloud Service Providers Intégrer et administrer les services réseau dans des environnements CSP tels que AWS, Azure ou GCP , en garantissant une connectivité cloud sécurisée et performante. Mettre en œuvre et administrer les VPN, VPC et autres composants de réseau cloud. Gestion des Reverse Proxy Configurer et administrer les technologies Reverse Prox