IT Network engineer

Job Title

Job Description

Our department

The ICT department has initiated a transition towards an Agile way of working, as part of the transition towards an improved ICT Target Operating Model (TOM), the Vanderlande ICT Core department is the backbone of our ICT Department, providing infrastructure, workplace, low-code platform, and data transport products to our internal organization. ICT Core contributes to high value for our business and delivering cutting-edge products.

Your responsibilities:

For our core operations team we are looking for a network engineer. In this role communication is key, keeping contact with our contacts of over 50 offices around the world including our HQ in Veghel in the Netherlands. Maintaining our current network infrastructure and perform required upgrades, in consultation with dev teams, to our systems; identify and remediate gaps and keep the dev teams and the others in ops updated to keep the network running at peak performance. Therein you form the bridge between the dev and our ops team.

Responsibilities:

• Implements, configures and maintains LAN/WAN infrastructure solutions across a large organization ensuring proper network connectivity of all sites, servers, workstations, and other network appliances.
• Implements, configures, and utilizes network monitoring tools to maintain and troubleshoot LAN/WAN infrastructure issues.
• Maintain and manage network routers, switches, firewalls, and data centers
• Troubleshoots, analyzes and resolves highly complex network connectivity and security issues.
• Proactively manages standards, topology documentation, configuration files for network infrastructure.
• Participates in designing led by the dev team and perform implementation and managing of all network security solutions in collaboration with others in the Ops team.
• Advances changed that are designed to either add functionality required by the company or to address ongoing network issues.
• Communicates to all related stakeholders; ICT Service Centre, Dev Teams, Leadership, etc., throughout the entire incident activity.
• Automation of tasks and Implementing improvements;

Qualifications:

• Solid knowledge and experience with network routing & switching.
• Understanding of technologies in scope: Aruba CX routing and switching (Aruba Central, BGP-EVPN, VXLAN, OSPF), Check Point (MDM, firewalls), Internet & WAN (IPSec VPN & BGP), Network Load Balancers (F5), Cloud networking, and Automation (AWX Ansible, Python, PowerShell).
• Familiar with network load balancing techniques, VPN solutions, and wireless solutions to support the organization.
• Excellent interpersonal, oral and writing skills.
• Manage third party vendors.
• Ability to learn and support new systems and technologies in a fast paced environment.
• Excellent record keeping and attention to detail.
• Experience with any Incident & problem ticket application software as a plus; 

Skills Required:

Core Networking Skills 

• Strong understanding of network systems: Routing, Switching, Wireless, VPN, Load Balancing, Firewalls, SD‑WAN, WAN Optimization, Policy‑based routing, VRF, Datacenter technologies, Disaster Recovery, Scripting, MPLS, DNS, IPAM, NTP. 
• Strong hands‑on experience with switching, routing, and wireless technologies. 

Switching Technologies: 

• VLANs, VTP, ISL, 802.1Q, EtherChannel, STP, RSTP, MST, PVST, Gateway Redundancy Protocols, Stacking, Switch Security, SPAN/RSPAN, QoS. 

Wireless Technologies: 

• Cisco Wireless Controllers, Lightweight & Autonomous APs, FlexConnect, HA/SSO. 
• Experience with Cisco WLCs: 3650, 5760, 3850, 25xx, 55xx, 8500 series, WISM2. 
• Experience with Cisco/Meraki APs. 

Datacenter & Nexus: 

• VPC, FEX, VDC, OTV, VXLAN, FCoE, Fibre Channel. 
• Hands‑on with Nexus 9K/7K/5K/2K. 

Routing Protocols: 

• EIGRP, BGP, RIPv2, OSPF, PFRv3, Static Routing, IPSLA.  

Firewall & Security Skills 

• Cisco ASA Firewall including DMZ design and security best practices. 
• Expertise in troubleshooting complex firewall issues. 
• Strong knowledge of TCP/IP, Wireshark, and related protocols. 
• Hands‑on experience with FortiGate firewalls (FortiOS). 
• Strong understanding of Security Fabric. 
• Proficiency in policy configuration, NAT, routing, SD‑WAN. 
• Experience with FortiManager and FortiAnalyzer. 
• IPSec/SSL VPN deployment. 
• Web filtering, application control, AV profiles, IDS/IPS. 
• FortiView analysis. 
• HA clusters. 
• Diagnose/debug troubleshooting. 

OT Security Skills: 

• OT architecture (Purdue model). 
• ICS, SCADA, PLCs, DCS. 
• OT protocols (Modbus, DNP3, BACnet, PROFINET, OPC). 
• IT/OT segmentation. 
• OT security controls. 
• IEC 62443, NIST CSF, ISA standards. 
• Vulnerability assessment and compensating controls. 

Other Skills: 

• Customer‑facing experience. 
• CCNP, ACSP preferred. 
• NSE4/NSE5 certifications preferred. 

Education & Experience:

• Bachelor’s Degree in Computer Science, Business or related field required; or equivalent combination of education and experience.
• 10+ years of experience in Computer Technology supporting systems of which at least 8 years as Network Engineering.
• Experience in a multi-location, Microsoft Windows/ Linux, networked environment.
• Other industry standard certifications (Microsoft, Cisco) are a pre.
• Detailed understanding of network topology design and implementation.
• Some previous experience with Windows Server / Linux and VMWare virtualization platforms are a pre.
• Fluent in both English and Dutch (written and verbal).
• Proven networking knowledge & skills (CCNP level or higher);