Network & Security Engineer - Infrastructure

Position Overview

We are seeking a hands-on Network & Security Engineer to implement, administer, troubleshoot and support enterprise and customer network and security environments. The role requires strong practical knowledge of enterprise networking, firewall and network security, routing, switching, VLANs, TCP/IP, VPN, WAN/SD-WAN and network troubleshooting. The candidate should be capable of independently handling technical issues and supporting network and security implementation projects. Hands-on experience with enterprise firewall and network security technologies, along with practical knowledge of cloud networking environments, is essential for this role.

Key Responsibilities

Network & Security Infrastructure

1. Install, configure, administer and troubleshoot enterprise network and firewall/security infrastructure.
2. Configure and maintain firewall security policies, NAT, access controls, routing, VLANs and network segmentation.
3. Configure and troubleshoot IPsec site-to-site and SSL/remote-access VPNs and secure inter-site connectivity.
4. Implement and troubleshoot LAN/WAN, routing, switching, TCP/IP, VLANs, IP addressing and subnetting.
5. Support WAN redundancy, failover and SD-WAN across multi-site/branch environments.
6. Analyse traffic flows, logs and network/security events to identify and resolve connectivity and security issues.
7. Support network and firewall migration, implementation, commissioning, testing and handover activities.

8.Hands-on with enterprise firewall technologies, particularly FortiGate and Palo Alto, including configuration, policy management, routing, NAT, VPN and troubleshooting.

Customer, Vendor & Operational Support

1. Provide L2/L3 onsite and remote technical support and participate in customer meetings and activities.
2. Coordinate with OEM/vendor support teams for complex technical issues and technical escalations.
3. Prepare implementation, troubleshooting, handover, network diagram and status documentation.

Preferred / Additional Technical Skills

1. Working knowledge of virtualization technologies, including VMware and hypervisor platforms.
2. Backup & Business Continuity: Enterprise backup and business continuity solutions, such as Veeam and Commvault.
3. Cloud & Microsoft Technologies: Working knowledge of Microsoft Azure, AWS and Microsoft 365 (M365) platforms.
4. Identity & Access: Exposure to identity and access technologies such as Microsoft Entra ID and SAML.
5. Network Technologies: Experience with Cisco networking, Aruba and other enterprise networking/security platforms.
6. Automation: Exposure to network automation, scripting or PowerShell is an advantage.
7. Endpoint Security: Exposure to endpoint security technologies.

Desired Candidate Profile

Experience & Qualifications

1. Experience: 5+ years of relevant experience in network engineering, network security or infrastructure support.
2. Education: Bachelor’s degree in computer science, Engineering or related discipline, or equivalent.
3. Certifications: Relevant certifications such as CCNA/CCNP, Fortinet, Microsoft Azure, AWS or cybersecurity.

Candidate Profile & Preferred Technology Exposure

1. Demonstrated experience diagnosing and resolving network, firewall and security incidents.
2. Ability to work independently on onsite and remote customer assignments, including implementation, troubleshooting.
3. Participate in planned maintenance windows and provide support outside normal business hours.
4. Ability to coordinate with customers, internal teams, OEMs and vendor technical support/TAC teams.
5. Good communication and documentation skills, with the ability to prepare and update handover documentation.