Network Security Engineer

The Managed Services Cross Technology Engineer (L3/L4) - Network / Security is an advanced, architect-level role across multiple technology domains (Cloud, Security, Networking, Applications, Collaboration). The primary objective is to design, implement, and maintain an enterprise network defensive architecture to protect data and infrastructure from sophisticated threats. This role acts as the highest-tier escalation point (4th-line support) to resolve complex operational incidents, ensure contracted client outcomes, and meet Service Level Agreements (SLAs).

Key Responsibilities

1. Strategy & Architecture

• Security Roadmap: Define, architect, and champion the overall network security posture across on-premise, cloud, and hybrid environments (including Zero Trust and SASE models).

• Infrastructure Design: Deploy and manage core components like Next-Gen Firewalls (NGFW), IDS/IPS, WAF, Load Balancers, VPNs, and Network Access Control (NAC) systems.

• Cloud & Segmentation: Design secure cloud networking patterns (e.g., AWS VPCs, Azure VNets) and enforce micro-segmentation.

• Policy & Governance: Establish and enforce comprehensive network security policies, standards, and baselines.

2. Incident Management & Operations

• L4 Escalation Support: Act as the final technical tier for complex incidents that lower-level teams (L1-L3) cannot resolve, performing deep root-cause analysis.

• Ticket & SLA Ownership: Systematically troubleshoot, log, track, and update tickets with resolution details within agreed timelines.

• Proactive Monitoring: Diagnose and investigate potential system issues and errors before or when they occur to minimize client impact.

• Emergency & Change Management: Serve as an emergency contact for critical, business-impacting outages and oversee strict change management protocols.

3. Optimization, Projects & Mentorship

• Automation: Collaborate with automation teams to script and automate routine operational tasks for effort optimization.

• Knowledge Sharing & Mentorship: Create high-quality technical documentation (HLD/LLD) and coach/push knowledge down to junior engineering teams.

• Disaster Recovery: Develop, implement, and test network security components within Disaster Recovery (DR) and Business Continuity plans.

• Project Delivery: Manage, implement, and execute technical projects according to client timelines.

• Quality Audits: Perform process and service experience quality audits.

Key Competencies & Attributes

• Strong client-centric focus with a passion for exceeding expectations under pressurized environments.

• Excellent change management, active listening, and cross-cultural communication skills.

• Ability to plan effectively amid changing circumstances and work extended hours when necessary.

Technical Skills & Certifications

• Education: Bachelor's degree in IT/Computing or equivalent work experience.

• Preferred Certifications: CCIE, CCNP Security, CISSP, PCNSE, or vendor-specific firewalls (Fortinet, Check Point, Cisco).

• Core Technology Stack Required:

  • Firewalls/Security: Cisco ISE, Fortinet (FortiGate, FortiManager), Check Point, CyberArk.

  • Application Delivery/Vulnerability: F5 (LTM, WAF), RSA, Tenable, Trend Micro.

  • Monitoring & Tooling: Solarwinds, Splunk Enterprise, OPSWAT.

  • Network Diagnostics & Automation: Advanced packet analysis (Wireshark/tcpdump) and basic automation scripting (Python/Ansible).