Network Engineer

We are looking for an experienced Network Engineer with strong hands-on expertise in network infrastructure, firewall administration, Windows Server, Active Directory, routing and switching, and network security. The ideal candidate should have practical experience managing enterprise networks, troubleshooting complex connectivity issues, implementing security controls, and monitoring network performance.

Experience with SIEM implementation and security-event analysis will be given additional weightage.

Key Responsibilities

• Administer and maintain Windows Server 2019/2022 and Active Directory, including users, groups, Group Policy Objects (GPO), DNS, and DHCP.
• Configure, manage, and troubleshoot FortiGate and Palo Alto firewalls, including security policies, NAT, VPN, Virtual IP (VIP), and access controls.
• Manage enterprise routing and switching infrastructure, including VLANs, STP, OSPF, BGP, MPLS, and SD-WAN.
• Monitor network performance, availability, security events, and capacity; troubleshoot connectivity and performance issues.
• Implement and maintain SIEM solutions, including log collection, integration, monitoring, alerting, correlation, and security-event analysis.
• Perform network security hardening, configuration backups, firmware upgrades, and vulnerability remediation.
• Support network migrations, infrastructure upgrades, disaster recovery, and high-availability requirements.
• Maintain network diagrams, IP address plans, firewall documentation, and configuration records.
• Coordinate with vendors, ISPs, and internal teams for incident resolution and infrastructure projects.
• Ensure compliance with IT security policies, change-management procedures, and applicable regulatory requirements.

Required Skills and Qualifications

• Minimum 4 years of hands-on experience in network engineering, network administration, or a related IT infrastructure role.
• Graduate degree in IT, Computer Science, or a related field.
• Strong hands-on experience with Windows Server 2019/2022 and Active Directory administration.
• Expertise in FortiGate and Palo Alto firewall configuration, administration, and troubleshooting.
• Strong knowledge of TCP/IP, VLANs, STP, routing, and switching.
• Practical knowledge of OSPF, BGP, MPLS, and SD-WAN technologies.
• Experience with IPsec/SSL VPN, NAT, ACLs, VIP configuration, and network segmentation.
• Knowledge of SIEM implementation, log integration, event correlation, alert monitoring, and incident analysis.
• Strong troubleshooting and analytical skills for network, firewall, DNS, and connectivity issues.
• Knowledge of network monitoring, security hardening, patching, and vulnerability management.
• Good documentation, communication, coordination, and problem-solving skills.
• Relevant networking or security certifications, such as CCNA, CCNP, Fortinet NSE/FCP, or Palo Alto Networks certifications.