Senior Network & Security Engineer

Network & Connectivity Operations · Administer and support enterprise LAN, WAN, SD-WAN, internet, MPLS and site-to-site connectivity across offices, branches, warehouses, data centres and customer environments. · Configure, troubleshoot and optimize Cisco and HPE Aruba switches, routers, VLANs, STP, LACP, routing, QoS, DHCP, DNS, NAT, VPNs and high-availability designs. · Monitor capacity, latency, packet loss, interface health and availability; proactively remove single points of failure and recurring performance bottlenecks. · Plan and execute hardware refreshes, firmware upgrades, branch migrations and network changes with controlled rollback and minimal production impact. Cybersecurity, Firewall & SASE · Administer Check Point firewalls, security gateways and related management platforms, including policy, objects, NAT, VPN, threat prevention, logs, upgrades, backups and high availability. · Design and operate SASE capabilities covering secure web access, remote access, branch connectivity, identity-aware access, cloud application control and security policy enforcement. · Support endpoint security products such as EDR/EPP, anti-malware, host firewall, device control, disk encryption, web protection and security posture enforcement. · Review alerts, firewall logs and security events; investigate suspected threats and coordinate containment, remediation, evidence collection and escalation with SOC or security partners. · Conduct periodic rule-base reviews, access reviews, vulnerability remediation and security hardening in line with least privilege and organizational security standards. Wireless Infrastructure · Design, deploy and support enterprise Wi‑Fi using HPE Aruba access points and wireless controllers, including SSIDs, RF profiles, channels, roaming, guest access, authentication and segmentation. · Perform wireless surveys and troubleshoot interference, weak coverage, congestion, authentication failures and controller/AP issues. · Integrate corporate and guest wireless services with RADIUS/NAC, directory services, certificates and security policies. Identity, Cloud & SaaS Integration · Support network and security integrations with Active Directory and Microsoft Entra ID, including identity-based access, groups, RADIUS/NPS, SSO, MFA and conditional access dependencies. · Support secure connectivity to Azure or other cloud environments using VPN, private connectivity, routing, DNS, network security controls and hybrid architecture principles. · Enable and secure SaaS services through SSO, access policies, secure web gateway/CASB controls, logging and vendor integration requirements. · Collaborate with server, cloud, application and security teams on changes affecting authentication, certificates, APIs, SAP/ERP, cloud workloads and business-critical services. Service Operations & Incident Management · Provide L3 support for complex incidents and service requests; restore services within agreed SLA and keep stakeholders informed during high-impact outages. · Lead technical troubleshooting, major incident support, root-cause analysis and corrective/preventive actions for network and security failures. · Maintain proactive monitoring, alert thresholds, configuration backups, availability dashboards and operational health checks for all critical assets. · Guide L1/L2 engineers, review escalations and strengthen team capability through knowledge transfer, runbooks and technical coaching. Projects, Architecture & Change · Translate business requirements into secure, scalable and supportable network/security architectures, bills of quantity, implementation plans and acceptance criteria. · Lead assigned infrastructure projects and coordinate internal stakeholders, customers, service providers, OEMs and implementation partners. · Identify technical and project risks early, document mitigations, manage dependencies and escalate delivery delays or operational exposure. · Follow change-management controls, complete impact/risk assessment, obtain approvals, validate implementation and maintain tested rollback plans. Vendor, SLA, Cost & Compliance Governance · Manage vendor performance against SLA, support contracts and project milestones; run service reviews and drive timely resolution of escalations. · Track renewals, licenses, warranties and support coverage; evaluate proposals and recommend commercial or architectural options that improve value and reduce CAPEX/OPEX. · Maintain network and security standards, asset/configuration records, diagrams, SOPs, build documents, support procedures and project handover packs. · Register and periodically review infrastructure risks; support internal/external audits and comply with IT, information security, regulatory and data-protection requirements. · Plan and verify preventive maintenance, disaster recovery readiness, configuration recovery and continuity measures for critical infrastructure. *** Experienced in handling large Enterprise networks and security .

Desired Candidate Profile

Technical Competency Enterprise Switching (VLAN, STP, LACP, OSPF/BGP) Enterprise Wireless (Aruba/Cisco, RF, 802.1X, Roaming) Firewall (Check Point/Fortinet, NAT, IPS, App Control) VPN (IPSec, SSL VPN, Site-to-Site, Remote Access) SASE / Zero Trust (ZTNA, SWG, CASB, FWaaS) Microsoft Entra ID & Conditional Access Microsoft Intune & Endpoint Management Active Directory, DNS, DHCP, PKI & NPS/RADIUS Network Security (Segmentation, NAC, MFA, Micro-segmentation) Cloud Networking (Azure/AWS, VNet, VPN) Load Balancer / WAF / Reverse Proxy Monitoring, SIEM & Packet Analysis High Availability & Disaster Recovery Practical hands on Troubleshooting & RCA Employment Type Full-time

Keywords