Network & Security Engineer

About the role

Onyxes Technologies Ltd. is seeking a Network & Security Engineer to design, deploy and secure network infrastructures for enterprise and government clients. The role involves full ownership of connectivity, protection and documentation across multiple projects.

Key responsibilities

• Design, configure and manage multi‑layer switching environments (core, distribution, access, SAN).
• Administer enterprise Wireless LAN controllers and access points, including SSID profiles, 802.1X, RF optimization and firmware updates.
• Own the FortiGate NGFW lifecycle: policies, NAT, IPsec/SSL VPN, IPS profiles and upgrades.
• Manage FortiWeb WAF: web‑application profiles, SSL inspection, bot mitigation and custom signatures.
• Operate Sophos XDR for endpoint protection, threat hunting and incident response.
• Maintain SAN fabric health, FC zoning, zone sets and alias management.
• Document structured cabling, fiber and UTP traces, OTDR/Fluke reports and labeling schemes.
• Use SolarWinds NMS for node discovery, SNMP polling, alerts and performance dashboards.
• Support vulnerability assessments, coordinate penetration testing and drive remediation.
• Keep living documentation: topology diagrams, IPAM, VLAN registers, config backups and change logs.

Required profile

• Bachelor’s degree in Computer Engineering, Network Engineering, IT or equivalent.
• 4–7 years of hands‑on network and security engineering in enterprise or government environments.
• Proven experience with multi‑layer switching, VLANs, STP/RSTP, LACP and inter‑VLAN routing.
• Production experience with FortiGate NGFW and/or FortiWeb WAF.
• Experience with enterprise WLAN platforms and 802.1X/RADIUS authentication.
• Exposure to SAN switching, FC zoning and storage networking.
• Familiarity with endpoint security or XDR platforms (Sophos, CrowdStrike or equivalent).

Required skills

• Multi‑layer switching and routing (VLAN, STP, RSTP, LACP, OSPF, static routing).
• FortiGate NGFW administration (policies, NAT, VPN, IPS).
• FortiWeb WAF configuration.
• Enterprise Wireless LAN management (802.1X, RF planning).
• Sophos XDR or comparable EDR/XDR platform.
• SAN fabric management and FC zoning.
• SolarWinds Network Management System.
• IP address management and VLAN design.
• Network documentation (topology diagrams, IPAM, config backups).
• Vulnerability assessment coordination and basic incident response.