Network Administrator

EssilorLuxottica, a fully integrated player, is a global leader in the eyecare and eyewear industry in the design, manufacture and distribution of ophthalmic lenses, frames and sunglasses, distributed in more than 150 countries.

At EssilorLuxottica our mission is to help people see more, be more and live life to its fullest.

The Group designs, manufactures and markets an extensive range of vision solutions that help to correct, protect and prevent risks to the visual health, and to enhance the look of women and men in the world, creating the best possible eyewear to satisfy its clients and interpret consumer tastes and aspirations.

With a worldwide presence across all stages of the value chain, EssilorLuxottica has approximately 180,000 employees committed to providing vision care and eyewear products that meet the individual needs and aspirations of each consumer.

EssilorLuxottica reported consolidated revenue of €16 billions in 2020.

EssilorLuxottica is home to some of the most loved and widely recognized vision care and eyewear brands in the world

With a portfolio of proprietary and licensed brands that cover a wide variety of market segments, we tap into the needs and desires of consumers, innovate on everything from design to service, and ultimately deliver products and experiences that stand out in the industry.

www.essilorluxottica.com

Position Summary / Purpose and Objectives of the Rule

The entity ESSPI (Essilor Shared Services Philippines Inc.) is delivering IT Tech services and IT security services internally to EssilorLuxottica entities. ESSPI is looking for a Network Administrator to support the growing scope.

A Network Administrator will be responsible on ensuring 24x7 availability of the EssilorLuxottica Network and will assure a determining role in the management, support, maintenance, implementation, administration and lifecycle management of network environments.

The administrator’s expertise will be used as a level of escalation in case of incidents and for the contribution in the qualification of new solutions, assisting in the deployment. The role is providing day to day operational support for existing infrastructure services and users of those services, and for project-based work to the development, deployment and adoption of new network  services.

This person must have deep knowledge in on evolving Network features, and must be able to lead, operate and continuously improve the environments distributed across 5000+ remote locations throughout the group.

PRIMARY RESPONSIBILITIES:

1.     Network Operations

• Monitor uptime, performance, and health of network components.
• Apply patches and updates to maintain security and stability.
• Ensure systems comply with operational standards and SLAs.
• Coordinate with support teams to align with incident and change management processes.
• Maintain under operational conditions the current and new network infrastructure and security solutions in respect of the Support processes

2.     Build, deploy and administer/manage the current and new network infrastructure (including WAN, LAN, WLAN and network services like NLB ...) and security solutions

• Design and implement WAN, LAN, WLAN, and network services like NLB (Network Load Balancing).
• Configure routing protocols, VLANs, and wireless access points.
• Deploy and manage firewalls, VPNs, and endpoint protection systems.
• Automate network provisioning and configuration using tools like Ansible or Terraform.
• Assist new implementations of all Network and Security Infrastructure components

3.     Senior level of operational support on:

• Lead troubleshooting efforts for major incidents and recurring problems.
• Perform root cause analysis and implement long-term fixes.
• Provide detailed reporting on network health, performance, and incidents.
• Communicate effectively with stakeholders and leadership.
• Pro-active in ensuring stability, response time, operational consistency and life cycle over the network platforms and security solutions

1. Reporting and communication

   • Generate regular reports on network performance, uptime, and incident trends.
   • Present findings to management and suggest improvements.
   • Maintain dashboards for real-time monitoring and alerts.

2. Documentation and Procedures

   • Maintain configuration records, network diagrams, and change logs.
   • Write SOPs (Standard Operating Procedures) for support teams.
   • Ensure documentation is updated after every change or deployment.

3. Lifecycle Management

   • Monitor for early signs of degradation or capacity issues.
   • Plan upgrades and replacements based on lifecycle data.
   • Ensure consistent performance across platforms.

SECONDARY RESPONSIBILITIES:

1.     Contribute to search and qualification to new solutions

2.     Provide recommendations to highest level of expertise teams

PRIMARY TECHNICAL ABILITIES:

1.     General:

·       Administration and troubleshooting of LAN/WAN/WLAN networks

·       Routing protocols configuration and troubleshooting (BGP, RIP, OSPF, EIGRP …)

·       LAN technologies administration and troubleshooting (VRRP, VSS, STP …)

·       QoS mechanisms

·       Wi-Fi controllers and access points administration

2.     Cisco Switches and Routing : Preferably CCNP Level / CCNA is a must

·       VLAN configuration and trunking

·       Spanning Tree Protocol (STP) optimization

·       Inter-VLAN routing and Layer 3 switch configuration

·       Access Control Lists (ACLs) for traffic filtering

·       EtherChannel and port aggregation

·       Routing protocols: OSPF, EIGRP, BGP

·       Redundancy: HSRP, VRRP

·       SNMP and NetFlow configuration for monitoring

3.     Palo Alto

·       Security policy creation and NAT rule configuration

·       App-ID and User-ID integration

·       Threat prevention: antivirus, anti-spyware, URL filtering

·       VPN setup: GlobalProtect and site-to-site IPsec

·       High Availability (HA) configuration and failover testing

·       Log analysis and troubleshooting via CLI and GUI

·       Integration with SIEM platforms

4.     InfoBlox DNS zone and record management (A, CNAME, PTR, MX)

·       DHCP scope creation and lease management

·       IPAM: subnet planning, IP tracking, and reporting

·       Grid management and synchronization

·       Role-based access control and audit logging

·       API usage for automation and integration

·       DNSSEC and DHCP failover configuration

5.     SD-WAN

·       SD-WAN architecture design and deployment

·       Overlay and underlay network configuration

·       Policy-based routing and traffic steering

·       Dynamic path selection and link failover

·       Integration with cloud platforms (Azure, AWS, GCP)

·       Security zoning and segmentation

·       Performance monitoring and analytics

6.     Solarwinds Governance and Utilization

·       Installation and configuration of NPM, NTA, and NetFlow - Preferrably

·       Device discovery and network topology mapping - Preferrably

·       Custom dashboard and alert creation - Preferrably

·       Threshold tuning and proactive alerting

·       Reporting on uptime, latency, and bandwidth

·       SNMP trap and syslog configuration

7.     Security Administration with Palo Alto and Fortinet Firewalls, Pulse remote access, Reverse Proxy

8.     Preferably Palo Alto certified

Secondary Technical Abilities:

1. Network automation using Python, Ansible, or PowerShell
2. Configuration management and version control (e.g., Git)
3. ITIL-aligned incident, problem, and change management
4. Documentation: Visio diagrams, SOPs, runbooks
5. Security compliance: ISO 27001, NIST, GDPR

BEHAVIOR ABILITIES:

1.     3-7 years' experience in infrastructure, with 3-5 years as Network Administrator

2.     Strong Knowledge of Cisco network products, Palo Alto, Infoblox, Azure Firewall

3.     Self-motivated, eager to learn in the IT profession

4.     Team player must be able to work with people within and outside of the IT department.

5.     Customer service oriented

6.     Excellent communication skills, verbal and written.

7.     English speaking mandatory (French reading would be appreciated)

8.     Ability to analyze and synthesize situations and understand the business constraints