Principal Network Engineer

Cboe Global Markets is seeking a Principal Network Engineer to serve as a deep technical anchor for our global network infrastructure. The role focuses on shaping the design, scalability, and long‑term evolution of highly distributed, latency‑sensitive trading networks across on‑prem and cloud environments.

This position follows a four‑day in‑office work model and is based at the Cboe HQ in Chicago’s Old Post Office district. The role partners closely with Network Engineering leadership and cross‑functional architecture teams to lead high‑complexity initiatives, conduct rigorous pre‑implementation testing and validation, and establish best practices that drive consistency and reliability.

• Design and evolve low‑latency, highly resilient network architecture across global data centers, co‑location, and cloud‑connected environments, focusing on deterministic packet forwarding, scalability, and operational consistency.
• Lead advanced routing design and implementation across complex global environments, including BGP, OSPF, MPLS, multicast, hybrid cloud connectivity, traffic engineering, and high‑availability network patterns.
• Conduct deep technical research, lab validation, and pre‑implementation testing for major network initiatives, evaluating hardware capabilities, identifying design constraints, and optimizing exchange performance.
• Lead high‑complexity strategic projects from design through execution, producing detailed technical designs, migration runbooks, capacity plans, and implementation guidance for large‑scale network changes.
• Develop and maintain Python‑based network automation to support configuration management, change validation, testing, and operational efficiency, using both API‑driven and SSH‑based approaches.
• Partner across infrastructure, security, application, and business teams to align network design and delivery with technical requirements, operational goals, and broader organizational priorities, including budgeting and planning for hardware and software investments.
• Serve as a senior technical leader and mentor across the engineering organization, driving architecture reviews, design standards, knowledge sharing, and technical development for other engineers.
• Operate effectively in a fast‑moving, dynamic environment where priorities shift, balancing long‑term architectural direction with immediate engineering and operational needs.
• Contribute to monitoring and telemetry strategy by defining meaningful visibility requirements and supporting tools such as Prometheus and Grafana to improve operational insight and troubleshooting.
• Support the development of technical standards, design documentation, and regulatory or audit‑facing materials when needed.

• 10+ years of hands‑on network engineering experience in mission‑critical, low‑latency environments.
• Deep expertise in low‑latency and deterministic network design, with practical experience analyzing latency, jitter, and end‑to‑end traffic behavior in production.
• Advanced knowledge of routing protocols at scale, including BGP, OSPF, MPLS, and multicast (PIM‑SM/SSM), with proven experience designing resilient, highly available global networks.
• Strong understanding of network hardware and platform capabilities across major vendors, with the ability to evaluate limitations and optimize design decisions through research and lab validation.
• Experience designing and supporting hybrid cloud connectivity, including AWS networking constructs such as Direct Connect, Transit Gateway, VPCs, and route integration.
• Proven experience building and maintaining Python‑based network automation, including API‑driven and SSH‑based approaches for configuration management, testing, and operational efficiency.
• Working knowledge of observability and telemetry concepts, with exposure to platforms such as Prometheus, Grafana, or similar tools.
• Strong background in leading technical research, proof‑of‑concept validation, and pre‑implementation design for large‑scale network initiatives.
• Solid understanding of network security fundamentals, including segmentation, access control, and zero‑trust principles as they…