We’re seeking an experienced Network & Security Engineer with 4 years of experience to operate, optimize, and secure enterprise network infrastructure. The ideal candidate will own L2/L3 troubleshooting, implement security policies, and drive continuous improvement across Cisco switching/routing, SonicWall & Fortinet firewalls, Cisco WLC/Wi‑Fi, and SSE solutions like Netskope.
Requirements
Key Responsibilities
Operations & Support
- Provide L2/L3 support for LAN/WAN, Wi‑Fi, and security incidents; drive root cause analysis and permanent fixes.
- Manage and optimize Cisco routers/switches (OSPF/EIGRP, STP, VLANs, HSRP/VRRP, QoS).
- Administer Cisco WLC and enterprise Wi‑Fi (AP provisioning, RF optimization, WPA2/3‑Enterprise, 802.1X).
Firewall & Security
- Configure and maintain SonicWall and Fortinet (FortiGate) firewalls (NAT, VPN, SD‑WAN, policies, IPS/AV/WEB).
- Implement site‑to‑site and remote‑access VPNs, certificate management, and high availability.
- Tune security profiles (IPS, Anti‑Virus, Web Filter, Application Control) and monitor threat activity.
SSE / Cloud Security
- Operate Netskope (SWG, CASB, ZTNA/DLP policies), integrate with IdP (Azure AD/Okta), and onboard endpoints.
- Analyze SSE logs/events; optimize policies for user experience and risk reduction.
Monitoring & Reliability
- Maintain FortiAnalyzer, SonicWall Analytics.
- Define and track SLAs/OLAs; drive capacity planning and performance baselines.
Change & Compliance
- Lead changes via ITIL processes (Request/Change/Problem); maintain network diagrams and SOPs.
- Ensure compliance with security standards (e.g., ISO 27001, CIS Benchmarks) and audit readiness.
Collaboration
- Work with InfoSec, Workplace, Cloud, and App teams on new projects (M&A, branch rollout, cloud migrations).
- Vendor coordination for complex issues, RMAs, and firmware advisories.
Must‑Have Skills
- Routing/Switching: VLAN, trunking, inter‑VLAN, STP/RSTP, NAT, QoS.
- Cisco WLC/Wi‑Fi: RF design basics, AP groups, FlexConnect/Local mode, RADIUS/802.1X, Fast Secure Roaming.
Firewalls:
- SonicWall: Access rules, NAT, DPI, VPN (IKEv2), App Control, HA.
- Fortinet: Policy/Objects, SD‑WAN, IPSec/SSL‑VPN, UTM profiles, HA (A‑A/A‑P), FortiManager/FortiAnalyzer.
- Netskope: SWG, CASB, ZTNA, DLP, policy creation, client deployment, log analysis.
- Security Foundations: TCP/IP, TLS/PKI, DNS/DHCP, identity-aware policies, segmentation (ACLs/VLANs).
- Scripting/Automation (nice-to-have): Python/PowerShell, REST APIs for device/report automation.
- Tooling: Wireshark, Nmap, SolarWinds/PRTG, FortiAnalyzer, SonicWall Analytics,
Certifications (Preferred)
- Cisco: CCNA (required or equivalent)
- Fortinet: NSE 4 (Firewall Professional) or higher (NSE 5/7 nice-to-have).
- SonicWall: SNSA/SNSP (preferred).
- Netskope: NSA (Administrator) / NPA (preferred).
- Security & ITSM: CompTIA Security+, ITIL Foundation.
Soft Skills
- Strong customer communication and incident ownership.
- Clear documentation and change control discipline.
- Analytical mindset for RCA and risk-based decision making.
- Collaboration across cross-functional teams and vendors.
KPIs / Success Metrics
- Incident SLAs: ≥95% resolution within SLA; reduced MTTR.
- Stability: Lower repeat incidents; proactive problem records closed.
- Security Posture: Reduced false positives, policy compliance, and timely patching/firmware.
- Performance: Wi‑Fi user experience (latency, throughput), WAN utilization, SD‑WAN path quality.
- Design: Branch network with dual ISP, SD‑WAN, and ZTNA access.
- Troubleshooting: Intermittent Wi‑Fi drops on specific SSID—RF vs. RADIUS vs. DHCP analysis.
- Security: DLP policy conflicts in Netskope; tuning to reduce false positives.
- Firewalls: Migrating SonicWall to FortiGate with parity policies and VPNs.
- Packet analysis: TLS handshake failures; SNI-based policy impacts.
- Audit Readiness: Up-to-date diagrams, SOPs, access reviews, and config backups.
Education
Bachelor’s in Computer Science/IT/ECE (or equivalent experience).
Benefits
• Health insurance coverage for employee, spouse, and kids
• Retirement savings plan with employer matching contributions
• Opportunities for professional development and advancement within the organization