Role Summary
The Network Security Engineer will be responsible for managing, monitoring, troubleshooting, designing, and optimizing enterprise network infrastructure, including firewalls, switches, routers, wireless systems, and network security solutions. The role requires deep expertise in routing & switching, network security, architecture design, and integration with enterprise services. The ideal candidate should be capable of leading complex network initiatives, handling critical escalations, and ensuring high availability and security across enterprise environments.
Key Responsibilities
Network Operations & Support
- Provide day-to-day operational support for enterprise network infrastructure across multiple locations.
- Understand and manage complete network topology, including LAN/WAN, VLANs, routing paths, and configurations.
- Deploy, configure, maintain, and optimize network devices including firewalls, routers, switches, and wireless infrastructure.
- Monitor network performance (bandwidth, uptime, device health, traffic patterns).
- Maintain inventory and lifecycle management of network assets.
- Lead network infrastructure upgrades, migrations, and optimization initiatives.
- Act as the escalation point for complex network incidents and critical outages.
Security & Compliance
- Configure and manage network security devices ensuring confidentiality, integrity, and availability.
- Implement segmentation, ACLs, intrusion prevention, and access control policies.
- Apply system hardening standards and ensure compliance with security benchmarks (e.g., STIGs).
- Monitor and analyze logs for security incidents and unusual activities.
- Enforce identity-based access control, authentication, and authorization mechanisms.
- Design and review network security architectures and security controls.
Troubleshooting & Incident Management
- Perform L2–L3 troubleshooting for connectivity, performance, and access issues.
- Diagnose network faults using logs, monitoring tools, packet captures, and CLI-based analysis.
- Identify and resolve issues related to routing, switching, security controls, and access management.
- Lead Root Cause Analysis (RCA) activities for major incidents.
- Handle hardware faults and ensure timely issue resolution through proper escalation.
Integration & Coordination
- Integrate network devices with enterprise services such as DNS, DHCP, AD, Syslog, SNMP, and NTP.
- Coordinate with ISPs, OEM vendors, and internal teams for issue resolution.
- Support secure remote access and site connectivity solutions (VPN, IPSEC, SSL VPN).
- Collaborate with cloud, security, and infrastructure teams to support hybrid environments.
Infrastructure & Optimization
- Ensure high availability through redundancy, failover mechanisms, and resilient design.
- Perform upgrades, patching, and preventive maintenance activities.
- Support hybrid/cloud/on-prem data center environments.
- Use centralized monitoring and automation tools for performance tracking and configuration management.
- Evaluate and recommend new networking and security technologies.
Mandatory Technical Skills
Routing & Switching: VLAN, STP, EtherChannel, SVI, OSPF, EIGRP, BGP, MPLS, FHRP, Static & Dynamic Routing
Security: ACL, Wireshark, Nmap, AAA, SSH, IPSEC, GRE, VPN, SSL VPN, NGFW (Palo Alto, Fortinet, Check Point, Cisco Firepower)
Networking Concepts: LAN/WAN, SD-WAN, QoS, Ring/Bus/Hub/P2P/ILL Topologies
Wireless: WLC, Access Points, 4G/5G, Meraki, Aruba
Cloud & Automation: AWS/Azure/GCP Networking, Python, Ansible (Preferred)
Tools: Network diagramming (MS Visio)
Eligibility Criteria
Education: Bachelor's Degree in Engineering/Technology or equivalent
Experience: 9–12 years of experience in enterprise network and network security management, including architecture design, implementation, troubleshooting, and optimization of large-scale enterprise networks.
Preferred Qualifications
- CCNP Enterprise
- CCNP Security
- PCNSE
- NSE 4/5/6/7
- CCIE (Preferred)
- CompTIA Security+
- CISSP (Preferred)
- Exposure to automation tools and configuration management systems
- Experience with SD-WAN, cloud networking, and network automation