Network Security Engineer

Key Responsibilities

• Perform network architecture design, capacity planning, technology evaluation, and infrastructure modernization initiatives.
• Manage and support network security solutions, including firewalls, VPNs, NDR systems, and network access controls.
• Administer and troubleshoot Check Point firewalls, security policies, NAT, VPN, clustering, and security monitoring.
• Manage and support Extreme Networks switches, routers, fabric solutions, and network management platforms.
• Manage and support HPE Aruba wired and wireless network infrastructures.
• Work with Managed Service provider to support network and security incidents, service requests, and problem management, patching activities.
• Lead network troubleshooting and root-cause analysis for production issues.
• Develop and maintain network diagrams, operational procedures, technical documentation, and design standards.
• Collaborate with cybersecurity, infrastructure teams to deliver secure and resilient solutions.
• Initiate network/security infrastructure projects, technology refreshes, migration activities, and operational improvements.
• Assist in IT audit, develop and update SOP related to Network, Security domain.

Requirements

Technical Skills Requirements

The candidate shall demonstrate experience in:

Network Infrastructure

• Cisco, Extreme Networks, Aruba, or equivalent enterprise networking technologies.
• Layer 2 and Layer 3 switching.
• OSPF, BGP, VRRP, and dynamic routing protocols.
• Campus, data centre, and enterprise network architecture.
• Network monitoring and performance management tools.

Security Technologies

• Check Point Firewall.
• Palo Alto Firewall.
• Network segmentation and Zero Trust principles.
• VPN technologies (IPSec and SSL VPN).
• Security policy design and administration.
• Network access control and authentication technologies.
• Wireless Technologies
• Wireless network design and deployment.
• Wireless security and performance optimization.

Preferred Qualifications

The candidate shall possess:

• Degree in Computer Engineering, Information Technology, Computer Science, or a related discipline.
• Minimum 5 years' experience in enterprise network and security engineering.
• Cisco Certified Network Associate (CCNA), Cisco Certified Network Professional (CCNP) certification or higher.

Firewall certification from one of the following:

• Check Point Certified Security Administrator (CCSA) / CCSE
• Palo Alto Networks Certified Network Security Administrator (PCNSA) / PCNSE
• Equivalent industry-recognized firewall certification
• Proven experience supporting enterprise network environments.
• Strong working knowledge of TCP/IP, routing and switching, VLANs, DNS, DHCP, VPN, and network security technologies.
• ITIL Foundation Certification.

Desirable Experience

Candidates with experience in the following areas will have an advantage:

• High-Performance Computing (HPC) network environments.
• Spine-leaf architecture.
• Data centre networking.
• 100GbE, 400GbE, InfiniBand, or other high-speed networking technologies.
• DWDM (Dense Wavelength Division Multiplexing).
• BGP routing in enterprise, ISP, or research network environments.
• Cloud networking (AWS, Azure, Google Cloud).
• Network automation and Infrastructure-as-Code.

Security Operations Centre (SOC) and Network Operations Centre (NOC) environments.