Senior Network Engineer

About Vesta

Vesta helps wireless providers make more money by improving a part of their business most don’t think about — payments. Vesta works with major names likeAT&T, Rogers, Telcel, and Vodafone, helping them stop fraud, reduce failed transactions, and make sure more transactions are successful. For MNOs, MVNOs and prepaid carriers, this can mean fewer lost customers and more revenue — all without adding friction to the checkout experience.

With over 100 million transactions processed every year in 40+ countries, Vesta helps wireless providers turn their payment systems into a competitive advantage.

Note:
This is a 6-12 month Contract Position.

Vesta Corporation is seeking a Senior Network Engineer to lead the design, implementation, and ongoing operations of our global enterprise network. This is a senior individual-contributor role operating at the intersection of complex multi-site networking, hybrid cloud infrastructure, and PCI compliance. The ideal candidate brings 10+ years of hands‑on enterprise networking experience, deep fluency with AWS network architecture and security services, strong familiarity with both commercial and open‑source tooling, and the ability to drive infrastructure modernization initiatives with limited oversight.

• Design, implement, and maintain scalable, secure network infrastructure across data centers, remote sites, and AWS/Azure cloud environments.
• Architect and operate routing and switching infrastructure including BGP, NAT, VLANs, Spanning Tree, IPsec VPNs and HSRP.
• Manage and tune enterprise firewall platforms (Cisco, pf Sense, Check Point) in alignment with PCI DSS segmentation and access control requirements.
• Administer and optimize F5 BIG‑IP LTM/GTM for application delivery, load balancing, and traffic steering across production environments.
• Manage Cloudflare DNS, WAF, and network security policies for internet‑facing properties.
• Maintain network security policy management via Fire Mon; contribute to access path analysis and rule lifecycle management.
• Manage Proxmox‑based virtualization as it relates to network‑adjacent workloads and VM/LXC networking.
• Coordinate with vendors and carriers to manage WAN circuits, resolve outages, and drive cost optimization.

• Design, deploy, and maintain AWS Virtual Private Clouds (VPCs) including subnet design, CIDR allocation, route tables, internet gateways, and NAT gateways across multi‑account and multi‑region environments.
• Architect and manage VPC‑to‑VPC connectivity via VPC Peering, AWS Transit Gateway, and Private Link to support secure, scalable inter‑service communication.
• Configure and maintain AWS Site‑to‑Site VPN and Direct Connect circuits for hybrid connectivity between on‑premises data centers and AWS environments.
• Design and enforce AWS Security Group and Network ACL policies as network‑layer access controls, aligned with PCI DSS segmentation requirements.
• Manage DNS architecture within AWS using Route 53 for private hosted zones, resolver endpoints, conditional forwarding, and DNS failover across hybrid environments.
• Configure and manage AWS NAT Gateways, Elastic IPs, and Elastic Load Balancers (ALB/NLB) for workload exposure and traffic routing.
• Maintain AWS network connectivity for partner data and compute workloads migrated into cloud environments, including GDPR and data sovereignty considerations.

• Implement and maintain AWS security controls at the network layer including Security Groups, NACLs, VPC Flow Logs, and WAF rulesets on Cloud Front and ALB.
• Enable and manage AWS Cloud Trail across accounts to ensure comprehensive API activity logging; integrate with…