Network Engineer / Network Security Engineer (Ref 26502)

Responsibilities

• Define, architect, and drive the organization's network security strategy across on-premises, cloud, and hybrid environments.

• Design, implement, and manage enterprise network security solutions, including NGFW, IDS/IPS, VPN, Load Balancers, NAC, and cloud network security. 

• Develop, enforce, and maintain network security policies, standards, and best practices. 

• Serve as the L4 technical escalation point for complex network security incidents, conducting root cause analysis and driving permanent resolutions. 

• Lead network security architecture for cloud platforms (AWS, Azure) and support Zero Trust, SASE, and other modern security initiatives. 

• Develop, maintain, and validate network security components of Disaster Recovery (DR) and Business Continuity (BC) plans. 

• Evaluate, recommend, and implement emerging network security technologies to enhance the organization's security posture. 

• Produce and maintain high-quality technical documentation, including HLDs, LLDs, and operational procedures. 

• Manage incident, problem, and change activities, ensuring timely resolution, SLA compliance, accurate documentation, and stakeholder communication. 

• Proactively identify opportunities for automation, process optimization, and continuous service improvement. 

• Provide technical leadership, mentoring, and knowledge transfer to L1–L3 engineers, fostering operational excellence. 

• Collaborate with cross-functional teams, clients, and stakeholders to deliver secure, reliable, and scalable network services. 

Requirements

•  Bachelor's degree in Information Technology, Computer Science, or a related discipline, or equivalent practical experience.

•  Strong technical expertise in enterprise network security technologies, including NGFW (Cisco/Fortinet), IDS/IPS, WAF, VPN, NAC, Zero Trust (ZTA), SASE, network segmentation, and cloud network security (AWS, Azure, GCP). 

•  Experience with F5, Cisco ISE, Splunk, Microsoft Sentinel, Wireshark, tcpdump, and security automation using Python and Ansible.

•  Knowledge of security products and platforms such as Fortinet, RSA, Tenable, Trend Micro, or equivalent solutions. 

•  Proven experience in incident, change, and problem management, with strong risk assessment and change implementation capabilities. 

•  Excellent analytical, troubleshooting, and root cause analysis skills in complex enterprise environments. 

•  Strong communication, stakeholder management, and client service skills, with the ability to work effectively across cross-functional teams and diverse cultures. 

•  Relevant industry certifications such as CCNP Security, CCIE Security, CISSP, PCNSE certifications are highly desirable. 

•  Self-motivated, adaptable, and able to manage multiple priorities while delivering high-quality results in a fast-paced environment. 

•  Demonstrated ability to mentor team members, share knowledge, and contribute to continuous service improvement.

Licence no: 12C6060