Network Engineer

Requirements

• Provide L2/L3 support for LAN/WAN, Wi‑Fi, and security incidents; drive root cause analysis and permanent fixes.
  
• Manage and optimize Cisco routers/switches (OSPF/EIGRP, STP, VLANs, HSRP/VRRP, QoS).
  
• Administer Cisco WLC and enterprise Wi‑Fi (AP provisioning, RF optimization, WPA2/3‑Enterprise, 802.1X).
  

• Configure and maintain SonicWall and Fortinet (FortiGate) firewalls (NAT, VPN, SD‑WAN, policies, IPS/AV/WEB).
  
• Implement site‑to‑site and remote‑access VPNs, certificate management, and high availability.
  
• Tune security profiles (IPS, Anti‑Virus, Web Filter, Application Control) and monitor threat activity.
  
  

• Operate Netskope (SWG, CASB, ZTNA/DLP policies), integrate with IdP (Azure AD/Okta), and onboard endpoints.
  
• Analyze SSE logs/events; optimize policies for user experience and risk reduction.
  
  

• Maintain FortiAnalyzer, SonicWall Analytics.
  
• Define and track SLAs/OLAs; drive capacity planning and performance baselines.
  

• Lead changes via ITIL processes (Request/Change/Problem); maintain network diagrams and SOPs.
  
• Ensure compliance with security standards (e.g., ISO 27001, CIS Benchmarks) and audit readiness.
  

• Work with InfoSec, Workplace, Cloud, and App teams on new projects (M&A, branch rollout, cloud migrations).
  
• Vendor coordination for complex issues, RMAs, and firmware advisories.
  
  

• Routing/Switching: VLAN, trunking, inter‑VLAN, STP/RSTP, NAT, QoS.
  
• Cisco WLC/Wi‑Fi: RF design basics, AP groups, FlexConnect/Local mode, RADIUS/802.1X, Fast Secure Roaming.
  
  

• SonicWall: Access rules, NAT, DPI, VPN (IKEv2), App Control, HA.
  
• Fortinet: Policy/Objects, SD‑WAN, IPSec/SSL‑VPN, UTM profiles, HA (A‑A/A‑P), FortiManager/FortiAnalyzer.
  
• Netskope: SWG, CASB, ZTNA, DLP, policy creation, client deployment, log analysis.
  
• Security Foundations: TCP/IP, TLS/PKI, DNS/DHCP, identity-aware policies, segmentation (ACLs/VLANs).
  
• Scripting/Automation (nice-to-have): Python/PowerShell, REST APIs for device/report automation.
  
• Tooling: Wireshark, Nmap, SolarWinds/PRTG, FortiAnalyzer, SonicWall Analytics,
  
  

• Cisco: CCNA (required or equivalent)
  
• Fortinet: NSE 4 (Firewall Professional) or higher (NSE 5/7 nice-to-have).
  
• SonicWall: SNSA/SNSP (preferred).
  
• Netskope: NSA (Administrator) / NPA (preferred).
  
• Security & ITSM: CompTIA Security+, ITIL Foundation.
  
  

• Strong customer communication and incident ownership.
  
• Clear documentation and change control discipline.
  
• Analytical mindset for RCA and risk-based decision making.
  
• Collaboration across cross-functional teams and vendors.
  
  

• Incident SLAs: ≥95% resolution within SLA; reduced MTTR.
  
• Stability: Lower repeat incidents; proactive problem records closed.
  
• Security Posture: Reduced false positives, policy compliance, and timely patching/firmware.
  
• Performance: Wi‑Fi user experience (latency, throughput), WAN utilization, SD‑WAN path quality.
  
• Design: Branch network with dual ISP, SD‑WAN, and ZTNA access.
  
• Troubleshooting: Intermittent Wi‑Fi drops on specific SSID—RF vs. RADIUS vs. DHCP analysis.
  
• Security: DLP policy conflicts in Netskope; tuning to reduce false positives.
  
• Firewalls: Migrating SonicWall to FortiGate with parity policies and VPNs.
  
• Packet analysis: TLS handshake failures; SNI-based policy impacts.
  
• Audit Readiness: Up-to-date diagrams, SOPs, access reviews, and config backups.
  
  

Benefits