Network & Security Engineer

Position Overview

We are seeking a highly skilled and motivated Network & Security Engineer to design, implement, and maintain the company’s network and security infrastructure. The ideal candidate will possess a deep understanding of network protocols, security policies, and firewall management, combined with the ability to troubleshoot complex network and security issues.

You will collaborate with cross-functional teams to ensure the security, efficiency, and performance of all IT systems, enabling secure communication, data transfer, and protection from cyber threats.

Key Responsibilities

Network Infrastructure Design & Implementation: Design, deploy, and maintain local and wide area network (LAN/WAN) solutions. Configure and troubleshoot network devices including routers, switches, firewalls, and wireless access points. Manage and monitor network performance, ensuring optimal uptime and minimal disruptions.

Implement and manage VPNs, SD-WAN, and other remote access technologies. Network Security Management: Develop and enforce security policies and best practices for network infrastructure. Configure, monitor and manage firewalls (e.g., Palo Alto, Cisco, Fortinet, Checkpoint). Implement Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS).

Perform regular vulnerability assessments and penetration testing. Ensure compliance with internal and external security standards (e.g., ISO 27001, NIST, GDPR). Incident Response & Troubleshooting: Act as the first point of contact for network and security-related incidents. Investigate, analyze, and resolve network and security issues in a timely manner.

Respond to security alerts and take appropriate action, such as mitigation or escalation. Perform root cause analysis and implement corrective actions to prevent recurrence. Security Monitoring & Reporting: Continuously monitor network traffic for suspicious activities and potential security breaches. Maintain network security logs and generate reports for management.

Assist with security audits and risk assessments, identifying potential vulnerabilities. Collaboration & Documentation: Collaborate with IT teams, vendors, and other departments to implement network and security solutions. Provide technical expertise and support to other teams for troubleshooting and resolving network issues.

Document network configurations, security measures, incident resolutions, and best practices.

Requirements

Minimum 3-5 years of experience in network engineering or security roles. Proven experience with network devices (routers, switches, firewalls) and security technologies (IDS/IPS, VPN,NDR, WAF, Load Balancers). Experience with cloud networks and hybrid environments (AWS, Azure, Google Cloud) is a plus. Strong knowledge of TCP/IP, BGP, OSPF, DNS, DHCP, VLANs, and network troubleshooting.

Proficiency in firewall and VPN technologies (Palo Alto, Fortinet, Cisco FTD). Experience with network switches & routers (Cisco, Juniper, Huawei) Experience with SDN (Cisco ACI) Experience with network monitoring tools (e.g., Solar. Winds, Nagios, Wireshark). Experience with Load Balancers/WAF (F5, Array) Experience with NAC (Cisco ISE, Forescout, Aruba) Familiarity with network security best practices, encryption technologies, and secure network design.

Excellent troubleshooting and problem-solving skills. Strong written and verbal communication skills.

Preferred Qualifications

Experience with automation tools (e.g., Ansible, Terraform, Python scripting). Experience with DNS Security (F5, Infoblox) Familiarity with security Email Security tools (e.g., Fortimail, Proofpoint). Knowledge of regulatory compliance standards and frameworks (e.g., GDPR, HIPAA, PCI DSS). Working Conditions: Full-time position with occasional on-call or after-hours support as required.

Some local travel may be required depending on the nature of the role.

Education

Bachelor’s degree in Computer Science, Information Technology, or related field (or equivalent experience). Certifications: Cisco Certified Network Associate (CCNP), Palo Alto PCNSE, Fortinet NSE, JNCIA, or equivalent certifications.