Network Engineer

About the role

The employer is looking for a skilled Network Engineer to design, implement and support enterprise LAN, WAN, wireless, data centre and network security solutions, ensuring high availability and performance. The role covers greenfield projects, advanced troubleshooting and on-call support.

Key responsibilities

• Design, implement and support enterprise LAN, WAN, wireless, data centre and network security infrastructure.
• Produce HLD and LLD documents, IP addressing schemas and as-built documentation; lead greenfield projects from requirements to go-live.
• Configure and maintain Cisco routers, switches, Nexus, wireless controllers and ISE.
• Deploy and manage firewalls and security platforms: FortiGate, FortiWeb, FortiClient EMS, Palo Alto and Cisco FTD/FMC.
• Configure and troubleshoot NAT, security policies, security profiles and SSL/TLS inspection.
• Implement and troubleshoot IPsec/SSL VPNs and VXLAN/EVPN overlays.
• Lead advanced troubleshooting and root-cause analysis; monitor performance, uptime and capacity.
• Define naming, labeling and cabling standards; maintain network diagrams and technical documentation.
• Support upgrades, migrations and expansion projects, working with internal teams and vendors.
• Be available for on-call support during off-hours as part of a scheduled rotation.

Required profile

• Bachelor's degree in Computer Science, Information Technology, Engineering or a related field.
• 5+ years of hands-on experience in enterprise network engineering.
• CCNP or higher is required; Fortinet NSE 4+, Palo Alto PCNSA/PCNSE or CCNP Security is a plus.
• Solid understanding of network design, HA and redundancy, with proven advanced troubleshooting skills.
• Strong documentation and diagramming skills.

Required skills

• Cisco routing and switching: VLANs, STP, EtherChannel, BGP, OSPF and multi-site environments.
• Cisco Nexus (vPC, VXLAN BGP EVPN), Cisco ISE and WLC.
• IPsec VPN (IKEv1/IKEv2, route-based and policy-based) and NAT (static, PAT, destination NAT, NAT exemption).
• Hands-on with FortiGate, FortiWeb, FortiClient EMS, Palo Alto and Cisco FTD/FMC, including security profiles and SSL inspection.
• HLD/LLD, IP addressing schema and labeling standards.
• Knowledge of automation (Python, Ansible) and ITIL is a plus.