About the role
**Do you want your voice heard and your actions to count?** Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world. With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career. Join MUFG, where being inspired is expected and making a meaningful impact is rewarded. The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details. **Job Summary** We are seeking a highly experienced **Senior Network Engineer** to lead the design, implementation, modernization, and operational support of enterprise network infrastructure, with primary focus on **Cisco ACI fabric, data center networking, WAN architecture, routing, switching, and network resiliency** . This role will support secure, scalable, and highly available connectivity across data centers, branch locations, campus networks, and hybrid-cloud environments. The ideal candidate has deep hands-on experience with Cisco ACI, Cisco Nexus platforms, enterprise routing and switching, data center segmentation, and operational troubleshooting. Cloud networking experience is important, but it should represent approximately **20% of the role** , with the core focus remaining on enterprise network engineering and Cisco data center technologies. Key Responsibilities - Design, deploy, and support enterprise Cisco network infrastructure across data center, campus, branch, and WAN environments. - Lead Cisco ACI fabric design, implementation, policy modeling, operations, troubleshooting, upgrades, and lifecycle management. - Build and manage ACI constructs including tenants, VRFs, bridge domains, subnets, endpoint groups, contracts, filters, application profiles, L3Outs, external EPGs, and route controls. - Support Cisco ACI fabric operations including spine and leaf switches, APIC controllers, fabric discovery, fabric access policies, interface policies, domains, AAEPs, VLAN pools, and VMM integration. - Design and support ACI external connectivity using L3Outs, BGP, OSPF, static routing, route maps, prefix filters, contracts, and route leaking. - Support ACI data center segmentation, application connectivity, firewall integration, load balancer integration, and secure east-west traffic flows. - Troubleshoot complex ACI issues related to endpoint learning, contract enforcement, policy deployment, routing adjacency, Layer 2 extension, Layer 3 connectivity, and fabric health. - Architect and support WAN connectivity, including routing design, carrier circuits, MPLS, internet connectivity, VPN, and resilient site-to-site connectivity. - Design and operate routing and switching environments using BGP, OSPF, EIGRP, VRF, VLAN, VPC, trunking, port channels, and network segmentation. - Partner with operations, infrastructure, security, application, and vendor teams to deliver stable, secure, and scalable network services. - Lead troubleshooting and root-cause analysis for complex network incidents, performance issues, packet loss, latency, routing problems, and application connectivity failures. - Develop and maintain network standards, diagrams, implementation plans, migration plans, rollback plans, operational runbooks, and support documentation. - Support network modernization initiatives focused on automation, observability, performance, scalability, resiliency, and security. - Use tools such as SolarWinds, Splunk, NetBrain, Wireshark, APIC tools, packet captures, and network telemetry to improve visibility and operational response. - Support hybrid-cloud connectivity and cloud network integration, including AWS Direct Connect, Transit Gateway, VPC design, routing, and DNS integration, as approximately 20% of the role. - Participate in change management, implementation planning, production support, and on-call rotation as needed. **Experience** Required Qualifications - 8+ years of enterprise network engineering experience in large, complex production environments. - Strong hands-on experience designing, implementing, and supporting Cisco data center, WAN, routing, and switching environments. - Deep experience with Cisco ACI fabric operations, policy design, data center segmentation, and troubleshooting. - Proven experience supporting business-critical network infrastructure in highly available and highly regulated environments. - Experience leading network projects, major changes, incident response, technical design discussions, and vendor coordination. Cisco ACI and Data Center Networking - Strong hands-on experience with Cisco ACI fabric design and operations, including: - APIC controller management - Spine and leaf architecture - Fabric discovery and node registration - Firmware upgrades and lifecycle management - Fabric health monitoring and fault analysis - Deep understanding of ACI policy model, including: - Tenants - VRFs - Bridge domains - Subnets - Endpoint groups - Contracts - Filters - Application profiles - External EPGs - Strong experience with ACI access policy configuration, including: - VLAN pools - Physical domains - AAEPs - Interface policy groups - Leaf interface profiles - Switch profiles - Port channels and virtual port channels - Experience designing and supporting ACI L3Out connectivity, including: - BGP - OSPF - Static routing - Route maps - Prefix filtering - Route redistribution - External network policies - Experience with ACI segmentation and security design, including: - Contract-based access control - Inter-VRF communication - Shared services - Route leaking - Firewall insertion or firewall integration - Load balancer integration - Strong troubleshooting skills for: - Endpoint learning issues - Contract or policy enforcement issues - Misconfigured bridge domains or EPGs - L3Out routing problems - Asymmetric routing - Fabric faults - Link failures - APIC policy deployment issues - Experience with Cisco Nexus switching, VPC, port channels, VLANs, overlays, underlays, high availability, and data center network segmentation. - Experience with data center migration, capacity planning, resiliency design, and network lifecycle management. WAN, Routing, and Switching - Deep understanding of BGP, OSPF, EIGRP, MPLS, route redistribution, route filtering, path selection, VRFs, and network segmentation. - Strong knowledge of enterprise switching, spanning tree, VLAN design, trunking, access-layer design, port security, and high availability patterns. - Experience supporting WAN circuits, carrier coordination, VPN technologies, site connectivity, branch networking, and routing failover design. - Strong understanding of TCP/IP, DNS, DHCP, IP addressing, subnetting, NAT, packet flow, and network troubleshooting methods. - Experience troubleshooting packet loss, latency, routing loops, route instability, asymmetric flows, and application connectivity issues. Security, Observability, and Operations - Strong understanding of network security controls, access control lists, segmentation, firewall integration, and secure management access. - Experience with monitoring, logging, telemetry, and troubleshooting platforms such as Splunk, SolarWinds, NetBrain, Wireshark, APIC tools, and packet capture tools. - Experience with Infoblox DNS, DHCP, and IP address management is strongly preferred. - Ability to create clear technical documentation, network diagrams, implementation plans, validation plans, rollback plans, and operational runbooks. - Experience working within change management, incident management, problem management, and production support processes. Automation and Cloud Networking - Practical experience with network automation using Python, Ansible, Terraform, APIs, or scripting is preferred. - Experience using automation to support configuration validation, compliance checks, reporting, configuration backup, or repeatable network deployment. - Working knowledge of AWS networking, including Transit Gateway, Direct Connect, VPC design, Route 53, security groups, network access controls, and hybrid-cloud connectivity. - Cloud networking experience should support the enterprise network function and is expected to represent approximately 20% of the role. **Preferred Qualifications** - CCNP, CCIE, or equivalent enterprise networking certification. - Cisco ACI hands-on implementation, migration, or operations experience. - Experience with Cisco Nexus 9K, data center switching, and large-scale enterprise network environments. - Experience in financial services or other highly regulated industries. - Experience with SD-WAN, SASE, Zero Trust Network Access, or large-scale network modernization programs. - AWS Advanced Networking Specialty or AWS Solutions Architect certification is a plus, but not the primary requirement. **Education** - Bachelor's degree in Computer Science or a closely-related discipline, or an equivalent combination of formal education and experience **“** **Visa sponsorship/support is based on business needs. We do not anticipate providing visa sponsorship/support for this position.”** The typical base pay range for this role is as follows: - New York / New Jersey: $150k – $194k - Non–New York / New Jersey: $140k – $174k depending on job-related knowledge, skills, experience and location. This role may also be eligible for certain discretionary performance-based bonus and/or incentive compensation. Additionally, our Total Rewards program provides colleagues with a competitive benefits package (in accordance with the eligibility requirements and respective terms of each) that includes comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, and paid vacation, sick days, and holidays. For more information on our Total Rewards package, please click the link below. Our hybrid work schedule is four days on-site and work remotely one day per week. **MUFG Benefits Summary** We will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws (including (i) the San Francisco Fair Chance Ordinance, (ii) the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, (iii) the Los Angeles County Fair Chance Ordinance, and (iv) the California Fair Chance Act) to the extent that (a) an applicant is not subject to a statutory disqualification pursuant to Section 3(a)(39) of the Securities and Exchange Act of 1934 or Section 8a(2) or 8a(3) of the Commodity Exchange Act, and (b) they do not conflict with the background screening requirements of the Financial Industry Regulatory Authority (FINRA) and the National Futures Association (NFA). The major responsibilities listed above are the material job duties of this role for which the Company reasonably believes that criminal history may have a direct, adverse and negative relationship potentially resulting in the withdrawal of conditional offer of employment, if any. The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities duties and skills required of personnel so classified. We are proud to be an Equal Opportunity Employer and committed to leveraging the diverse backgrounds, perspectives and experience of our workforce to create opportunities for our colleagues and our business. We do not discriminate on the basis of race, color, national origin, religion, gender expression, gender identity, sex, age, ancestry, marital status, protected veteran and military status, disability, medical condition, sexual orientation, genetic information, or any other status of an individual or that individual’s associates or relatives that is protected under applicable federal, state, or local law.