We are seeking a skilled Network Engineer to design, implement, and support enterprise LAN, WAN, wireless, data center, and network security solutions, ensuring high availability and performance.
Responsibilities
- Design, implement, and support enterprise LAN, WAN, wireless, data center, and network security infrastructure.
- Produce HLD and LLD documents, IP addressing schemas, and as-built documentation; lead greenfield projects from requirements to go-live.
- Configure and maintain Cisco routers, switches, Nexus, wireless controllers, and ISE.
- Deploy and manage firewalls and security platforms: FortiGate, FortiWeb, FortiClient EMS, Palo Alto, and Cisco FTD/FMC.
- Configure and troubleshoot NAT (source/PAT, destination, static), security policies, security profiles, and SSL/TLS inspection.
- Implement and troubleshoot IPsec/SSL VPNs and VXLAN/EVPN overlays.
- Lead advanced troubleshooting and root-cause analysis; monitor performance, uptime, and capacity.
- Define naming, labeling, and cabling standards; maintain network diagrams and technical documentation.
- Support upgrades, migrations, and expansion projects; collaborate with internal teams and vendors.
- Be available for on-call support during off-hours as part of a scheduled rotation.
Qualifications
- Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field.
- 5+ years of hands-on experience in enterprise network engineering.
- CCNP or higher — required. Fortinet NSE 4+, Palo Alto PCNSA/PCNSE, or CCNP Security is a plus.
- Strong Cisco routing & switching: VLANs, STP, EtherChannel, BGP, OSPF, and multi-site environments.
- Cisco Nexus (vPC, VXLAN BGP EVPN), Cisco ISE, and WLC experience.
- IPsec VPN (IKEv1/IKEv2, route-based and policy-based) and NAT (static, PAT, destination NAT, NAT exemption for VPN).
- Hands-on with FortiGate, FortiWeb, FortiClient EMS, Palo Alto, and Cisco FTD/FMC, including security profiles and SSL inspection.
- Experience with HLD/LLD, IP addressing schema, and labeling standards.
- Solid understanding of network design, HA, and redundancy; proven advanced troubleshooting skills.
- Strong documentation and diagramming skills.
- Knowledge of automation (Python, Ansible) and ITIL is a plus.
