MS Network Engineer (L3)

Requirements

• Oversee the implementation of complex IT security plans.

• Provide test automation and technical support for a network or a virtual private network.

• Understand firewalls and other network tools.

• Provide system documentation and diagrams as well as maintenance documentation.

• Implement change management procedures that accommodate system architecture changes.

• Identify and document undocumented areas of a network to develop a network diagram.

• Evaluate current IT resources and technology resources develops and maintains security policy by identifying and evaluating threats to the organization's information assets

• Ensures that the systems and networks of the organization are secure and operational.

• Uses threat modeling techniques and threat intelligence to develop and maintain a network-based risk assessment tool.

• Analyzes and detects risks and vulnerabilities associated with new technologies, processes, and applications.

• Identifies and investigates risk and vulnerability issues and develops and implements solutions to resolve them.

• Assists in developing and maintaining standards and procedures.

• Performs security audit and penetration testing activities to evaluate security safeguards and identify ways to improve network security posture.

• Provides network security, network penetration testing, and traffic analysis services to large commercial organizations

• Conducts comprehensive investigations and audits, performs all necessary forensics procedures, and responds to client requests for information.

• Reviews client network policies, policies, and security documents, and recommends changes or alterations.

• Experience with deploying network systems.

• Experience with security principles and principles of design.

• Excellent customer service skills.

• Ability to work independently with minimal supervision.

• Partake and abide by CAB processes when involved in changes

• A well-working acquaintance in the Linux environment

• Linux Shell Scripting

• Security administration port security on switches and IP security on Routers via Access list

• Preparing monthly work status reports and updating technology-specific documents

• Responsible for designing and implementation of customers' network infrastructure

• Cisco device management specific technical skills

• Installing, Configuring, and Troubleshooting of Networking Equipment: Routers and Switches.

• Managing, Maintaining, and Configuring an Internetwork with the help of WAN technologies like PPP, Frame-relay, dedicated T1s, ISDN, 

• Knowledge of Layer-2 Switching, Vlan’s, and Access-list.

• Routing Protocols: OSPF, EIGRP, IGRP, RIP, and RIPv2.

• Advanced knowledge of Multi-Protocol Label Switching (MPLS), Voice over IP (VoIP), Firewall PIX, Cisco Call Manager, and routing protocol BGP

• Good understanding of OSI Model, TCP/IP protocol suite (IP, ARP, ICMP, TCP, UDP, SMTP, FTP, TFTP)

• IP addressing and subnetting, Routing concepts

• Sound knowledge of routing protocols - RIP V1/V2, OSPF, IGRP and EIGRP

• Implemented SNMP on devices to allow for network management

• Implemented traffic filters using Standard and Extended access lists, Distribute-Lists, and Route Maps.

• Implementation of HSRP, DHCP, DNS, FTP, TFTP, MRTG.

• Working knowledge of enterprise level network design and implementation

Advantageous skills

• Knowledge and Experience with CISO DNAC

• Knowledge of Enterprise Monitoring

• Knowledge of incident management systems

• Moderate years of relevant managed services experience

• Moderate level knowledge in ticketing tools preferably Service Now and Remedy

• Working knowledge of Infloblox

• Fortinet SD-WAN

• Knowledge of Cisco support and TAC processes

• Knowledge of Fortinet support and TAC processes

• Python scripting skills

• Knowledge of Grafana and Prometheus automation and dashboarding

• Knowledge of Netbox automation and dashboarding

Academic Qualifications

• Diploma, degree or relevant qualification in IT/Computing (or demonstrated equivalent work experience)

Qualifications

• Must have the ability to build secure networks for enterprise applications; to maintain security configurations; and troubleshoot problems related to network configuration.

• Experience with network security and incident response preferred.

• CCNP Enterprise

• CCIE Enterprise or Wireless

• NSE5 – NSE6 and NSE7 will be an advantage

• ITILv4 or up to date and relevant ITIL certification (Foundation Level)

• CCNA Enterprise

• CCNP Enterprise and advantage

• Check Point Certified Security Administrator NG with Application Intelligence (CCSA-NG AI)

• Cisco Firewalls and Routers

• Cisco Devnet certification