Network Engineer

Shift4 (NYSE: FOUR) is boldly redefining commerce by simplifying complex payments ecosystems across the world. As the leader in commerce-enabling technology, Shift4 powers billions of transactions annually for hundreds of thousands of businesses in virtually every industry. For more information, visit www.shift4.com.

We are looking for a Network Engineer to join our EU network engineering team. You will help operate, troubleshoot and improve business-critical networks spanning our physical production data centers and networking services in AWS, Google Cloud and Cloudflare. This is a hands-on role across data-center networking, firewalls, application delivery, remote access and cloud connectivity, working closely with Security, Systems, Corporate IT, NOC and application teams.

• Operate and improve enterprise and data-center infrastructure, including Cisco Nexus/Catalyst switching, Fortinet FortiGate firewalls, routing, network segmentation and ISP/WAN connectivity.
• Monitor network availability, performance and capacity; diagnose outages and complex traffic-flow issues using device telemetry, logs, packet captures, tracing and protocol analysis.
• Support F5 BIG-IP application delivery services, including virtual servers, pools, health monitors and related security/access features; troubleshoot end-to-end connectivity with application owners.
• Maintain network-side VPN, remote-access and device-authentication services, including FortiGate VPN, FortiAuthenticator, TACACS+/RADIUS and role-based network access, in coordination with IT and identity teams.
• Support cloud and edge networking in AWS, GCP and Cloudflare, including DNS and traffic-delivery services such as Amazon Route 53 and AWS load balancers.
• Help maintain resilient services through high-availability design, redundant ISP connectivity, SD-WAN, monitoring, configuration backups and out-of-band recovery capabilities.
• Contribute to network architecture, capacity planning, infrastructure modernization, and resiliency improvements supporting new services and business requirements.
• Implement approved upgrades, configuration changes and service migrations using documented change controls, pre-change checks, rollback plans and post-change validation.
• Work with the NOC and application teams on incident response and approved inter-site traffic-routing/failover activities, verifying both network health and application impact.
• Participate in incident response, root-cause analysis, and the implementation of corrective actions to improve network stability and availability.
• Maintain accurate diagrams, device and circuit inventory, procedures, operational documentation and incident records; coordinate as needed with service providers and data-center remote hands.
• Partner with Security on vulnerability remediation, configuration hardening and controls relevant to a payments environment, including PCI and SOX requirements where applicable; participate in an on-call support rotation.

• Hands-on experience supporting enterprise or data-center networks in a production environment, with strong TCP/IP, subnetting, VLAN, switching, routing and DNS fundamentals.
• Experience with enterprise firewalls and Cisco or comparable switching platforms; understanding of VPNs, NAT, access controls, BGP/static routing and high-availability concepts.
• Practical troubleshooting skills, including use of network-device CLIs, monitoring tools, logs, packet captures and root-cause analysis.
• An operational mindset: careful change execution, clear documentation, effective incident communication and attention to availability and security.
• Ability to collaborate across infrastructure, security and application teams and communicate technical findings clearly.
• Fortinet ecosystem experience (FortiGate, FortiManager, FortiAnalyzer or FortiAuthenticator), Cisco Nexus/vPC/fabric networking or F5 BIG-IP LTM, WAF and APM.
• AWS/GCP networking, Route 53 DNS/health checks, Cloudflare, load balancers and traffic steering between data centers or cloud services.
• Infrastructure monitoring, configuration backup, inventory and recovery tools such as OpsRamp, Unimus, Device42 or out-of-band console systems.
• Experience supporting highly available payments or other regulated services, and relevant certifications such as CCNA/CCNP, Fortinet or F5 credentials.

You will work on networks that matter to real-world payment services, across a diverse mix of physical data centers, office connectivity and cloud platforms. You will be part of a collaborative engineering team with opportunities to solve meaningful operational challenges and contribute to infrastructure improvements.

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity and/or expression, status as a veteran, and basis of disability or any other federal, state or local protected class.