Network & Security Engineer

We are seeking a highly skilled and motivated Network & Security Engineer to design, implement, and maintain the company’s network and security infrastructure. The ideal candidate will possess a deep understanding of network protocols, security policies, and firewall management, combined with the ability to troubleshoot complex network and security issues.

You will collaborate with cross-functional teams to ensure the security, efficiency, and performance of all IT systems, enabling secure communication, data transfer, and protection from cyber threats.

Key Responsibilities :

Network Infrastructure Design & Implementation :

• Design, deploy, and maintain local and wide area network (LAN / WAN) solutions.
• Configure and troubleshoot network devices including routers, switches, firewalls, and wireless access points.
• Manage and monitor network performance, ensuring optimal uptime and minimal disruptions.
• Implement and manage VPNs, SD-WAN, and other remote access technologies.

Network Security Management :

• Develop and enforce security policies and best practices for network infrastructure.
• Configure, monitor and manage firewalls (e.g., Palo Alto, Cisco, Fortinet, Checkpoint).
• Implement Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS).
• Perform regular vulnerability assessments and penetration testing.
• Ensure compliance with internal and external security standards (e.g., ISO 27001, NIST, GDPR).
• Act as the first point of contact for network and security-related incidents.
• Investigate, analyze, and resolve network and security issues in a timely manner.
• Respond to security alerts and take appropriate action, such as mitigation or escalation.
• Perform root cause analysis and implement corrective actions to prevent recurrence.

Security Monitoring & Reporting :

• Continuously monitor network traffic for suspicious activities and potential security breaches.
• Maintain network security logs and generate reports for management.
• Assist with security audits and risk assessments, identifying potential vulnerabilities.
• Collaborate with IT teams, vendors, and other departments to implement network and security solutions.
• Provide technical expertise and support to other teams for troubleshooting and resolving network issues.
• Document network configurations, security measures, incident resolutions, and best practices.

Requirements

Professional Experience :

• Minimum 3-5 years of experience in network engineering or security roles.
• Proven experience with network devices (routers, switches, firewalls) and security technologies (IDS / IPS, VPN,NDR, WAF, Load Balancers).
• Experience with cloud networks and hybrid environments (AWS, Azure, Google Cloud) is a plus.
• Strong knowledge of TCP / IP, BGP, OSPF, DNS, DHCP, VLANs, and network troubleshooting.
• Proficiency in firewall and VPN technologies (Palo Alto, Fortinet, Cisco FTD).
• Experience with network switches & routers (Cisco, Juniper, Huawei)
• Experience with SDN (Cisco ACI)
• Experience with network monitoring tools (e.g., SolarWinds, Nagios, Wireshark).
• Experience with Load Balancers / WAF (F5, Array)
• Experience with NAC (Cisco ISE, Forescout, Aruba)
• Familiarity with network security best practices, encryption technologies, and secure network design.
• Excellent troubleshooting and problem-solving skills.
• Strong written and verbal communication skills.

Preferred Qualifications :

• Experience with automation tools (e.g., Ansible, Terraform, Python scripting).
• Experience with DNS Security (F5, Infoblox)
• Familiarity with security Email Security tools (e.g., Fortimail, Proofpoint).
• Knowledge of regulatory compliance standards and frameworks (e.g., GDPR, HIPAA, PCI DSS).

Working Conditions :

• Full-time position with occasional on-call or after-hours support as required.
• Some local travel may be required depending on the nature of the role.

Education :

Bachelor’s degree in Computer Science, Information Technology, or related field (or equivalent experience).

Certifications :

Cisco Certified Network Associate (CCNP), Palo Alto PCNSE, Fortinet NSE, JNCIA, or equivalent certifications.