Network Security Engineer

Key Responsibilities • Perform network architecture design, capacity planning, technology evaluation, and infrastructure modernization initiatives. • Manage and support network security solutions, including firewalls, VPNs, NDR systems, and network access controls. • Administer and troubleshoot Check Point firewalls, security policies, NAT, VPN, clustering, and security monitoring. • Manage and support Extreme Networks switches, routers, fabric solutions, and network management platforms. • Manage and support HPE Aruba wired and wireless network infrastructures. • Work with Managed Service provider to support network and security incidents, service requests, and problem management, patching activities. • Lead network troubleshooting and root-cause analysis for production issues. • Develop and maintain network diagrams, operational procedures, technical documentation, and design standards. • Collaborate with cybersecurity, infrastructure teams to deliver secure and resilient solutions. • Initiate network/security infrastructure projects, technology refreshes, migration activities, and operational improvements. • Assist in IT audit, develop and update SOP related to Network, Security domain. Requirements Technical Skills Requirements The candidate shall demonstrate experience in: Network Infrastructure • Cisco, Extreme Networks, Aruba, or equivalent enterprise networking technologies. • Layer 2 and Layer 3 switching. • OSPF, BGP, VRRP, and dynamic routing protocols. • Campus, data centre, and enterprise network architecture. • Network monitoring and performance management tools. Security Technologies • Check Point Firewall. • Palo Alto Firewall. • Network segmentation and Zero Trust principles. • VPN technologies (IPSec and SSL VPN). • Security policy design and administration. • Network access control and authentication technologies. • Wireless Technologies • Wireless network design and deployment. • Wireless security and performance optimization. Preferred Qualifications The candidate shall possess: • Degree in Computer Engineering, Information Technology, Computer Science, or a related discipline. • Minimum 5 years' experience in enterprise network and security engineering. • Cisco Certified Network Associate (CCNA), Cisco Certified Network Professional (CCNP) certification or higher. Firewall certification from one of the following: • Check Point Certified Security Administrator (CCSA) / CCSE • Palo Alto Networks Certified Network Security Administrator (PCNSA) / PCNSE • Equivalent industry-recognized firewall certification • Proven experience supporting enterprise network environments. • Strong working knowledge of TCP/IP, routing and switching, VLANs, DNS, DHCP, VPN, and network security technologies. • ITIL Foundation Certification. Desirable Experience Candidates with experience in the following areas will have an advantage: • High-Performance Computing (HPC) network environments. • Spine-leaf architecture. • Data centre networking. • 100GbE, 400GbE, InfiniBand, or other high-speed networking technologies. • DWDM (Dense Wavelength Division Multiplexing). • BGP routing in enterprise, ISP, or research network environments. • Cloud networking (AWS, Azure, Google Cloud). • Network automation and Infrastructure-as-Code. Security Operations Centre (SOC) and Network Operations Centre (NOC) environments.