Network Infrastructure Engineer

Key Responsibilities

1. Network & Wi-Fi Management • Architecture & Design: Design, deploy, and manage enterprise-grade LAN, WAN, WLAN, and SD-WAN architectures. • Wireless Infrastructure: High-level configuration and troubleshooting of enterprise Wi-Fi networks, wireless controllers (WLCs), and access points (APs) for seamless roaming and high density. • Routing & Switching: Manage and configure core switches, routers, and firewalls (working with VLANs, BGP, OSPF, STP, and EtherChannels). • Performance Monitoring: Continuously monitor network performance, bandwidth utilization, and latency; proactively optimize to prevent bottlenecks. 2. Security Infrastructure • Firewall & Threat Management: Implement and maintain Next-Generation Firewalls (NGFW) such as Palo Alto, Fortinet, or Cisco Firepower. • Access Control: Configure and manage Network Access Control (NAC) systems, VPNs (IPsec, SSL), and Secure Web Gateways. • Security Compliance: Conduct regular vulnerability assessments, patch network devices, and ensure infrastructure aligns with global security standards (ISO 27001, SOC2, etc.). • Endpoint & Data Protection: Implement IT hardware hardening standards and deploy/manage Data Loss Prevention (DLP) software across enterprise endpoints to prevent unauthorized data exfiltration. • User Activity Monitoring: Enable and configure advanced logging on laptops and endpoints to audit and understand user activity, ensuring comprehensive visibility for security forensics. 3. Modern Workplace & Collaboration (Office 365) • Tenant Administration: Full-suite administration of the Office 365 ecosystem, including Exchange Online, SharePoint, OneDrive, and Microsoft Teams. • Identity & Access Management: Manage Azure Active Directory (Azure AD / Entra ID), implementing Conditional Access policies, Multi-Factor Authentication (MFA), and Single Sign-On (SSO). • Email Security: Configure and maintain Exchange Online Protection (EOP) and Microsoft Defender for Office 365 to safeguard against phishing, malware, and spam. 4. Leadership & Operations • Incident Management: Serve as the Tier-3 escalation point for complex network, security, and cloud infrastructure outages. • Disaster Recovery: Formulate, maintain, and test Network Disaster Recovery (DR) plans and high-availability configurations. • Vendor & Asset Management: Partner with ISPs and hardware vendors for procurement, SLA management, and circuit upgrades. Maintain rigorous asset and documentation hygiene. Required Skills & Qualifications • Experience: 6+ years of proven hands-on experience in managing enterprise network and security environments. • Education: Bachelors degree in Computer Science, Information Technology, Engineering, or a related field. • Technical Deep-Dive: o Strong expertise in Cisco, Aruba, or Ruckus wireless technologies. o Proficiency in firewall management (Fortinet, Palo Alto, or Checkpoint). o Deep understanding of Office 365, Azure AD, and mail flow (MX, SPF, DKIM, DMARC). o Solid grasp of network protocols (TCP/IP, DNS, DHCP, NTP, RADIUS, TACACS+). • Certifications (Highly Preferred): * CCNP (Enterprise/Security), PCNSE, or NSE 4/7. o Microsoft Certified: Enterprise Administrator Expert or Security Administrator Associate.