Network Engineer / Network Security Engineer

Responsibilities

. Define, architect, and drive the organization's network security strategy across on-premises, cloud, and hybrid environments.

. Design, implement, and manage enterprise network security solutions, including NGFW, IDS/IPS, VPN, Load Balancers, NAC, and cloud network security.

. Develop, enforce, and maintain network security policies, standards, and best practices.

. Serve as the L4 technical escalation point for complex network security incidents, conducting root cause analysis and driving permanent resolutions.

. Lead network security architecture for cloud platforms (AWS, Azure) and support Zero Trust, SASE, and other modern security initiatives.

. Develop, maintain, and validate network security components of Disaster Recovery (DR) and Business Continuity (BC) plans.

. Evaluate, recommend, and implement emerging network security technologies to enhance the organization's security posture.

. Produce and maintain high-quality technical documentation, including HLDs, LLDs, and operational procedures.

. Manage incident, problem, and change activities, ensuring timely resolution, SLA compliance, accurate documentation, and stakeholder communication.

. Proactively identify opportunities for automation, process optimization, and continuous service improvement.

. Provide technical leadership, mentoring, and knowledge transfer to L1-L3 engineers, fostering operational excellence.

. Collaborate with cross-functional teams, clients, and stakeholders to deliver secure, reliable, and scalable network services.

Requirements

. Bachelor's degree in Information Technology, Computer Science, or a related discipline, or equivalent practical experience.

. Strong technical expertise in enterprise network security technologies, including NGFW (Cisco/Fortinet), IDS/IPS, WAF, VPN, NAC, Zero Trust (ZTA), SASE, network segmentation, and cloud network security (AWS, Azure, GCP).

. Experience with F5, Cisco ISE, Splunk, Microsoft Sentinel, Wireshark, tcpdump, and security automation using Python and Ansible.

. Knowledge of security products and platforms such as Fortinet, RSA, Tenable, Trend Micro, or equivalent solutions.

. Proven experience in incident, change, and problem management, with strong risk assessment and change implementation capabilities.

. Excellent analytical, troubleshooting, and root cause analysis skills in complex enterprise environments.

. Strong communication, stakeholder management, and client service skills, with the ability to work effectively across cross-functional teams and diverse cultures.

. Relevant industry certifications such as CCNP Security, CCIE Security, CISSP, PCNSE certifications are highly desirable.

. Self-motivated, adaptable, and able to manage multiple priorities while delivering high-quality results in a fast-paced environment.

. Demonstrated ability to mentor team members, share knowledge, and contribute to continuous service improvement.

Licence no: 12C6060