Senior Network Security Engineer

Role

Lead the design, implementation, operation, maintenance and support of enterprise and data center networks both to support the company's operations and as a part of customer engagements.

Responsibilities

• Ensure that network and network security solutions proposed by the company to its customers are high quality, cost effective and competitive.

• Ensure network implementation projects are successfully implemented within the planned time frame and cost.

• Ensure the appropriate information security policies are implemented and maintained.

• Ensure company and company-managed customer networks are monitored and that any events, incidents or deviations from the expected performance are detected and addressed as early as possible to avoid any service disruption.

• Ensure all network devices are secure and that any identified vulnerabilities are addressed.

• Ensure the existence of proper updated network documentation exists.

• Ensure proper documentation of network incidents, network incident responses and network changes.

• Ensure the company and the customers networks are scaled appropriately to accommodate any traffic increase and maintain the required level of performance while maintaining the required level of redundancy to achieve the availability targets.

Duties

• Designing high availability, high performance and cost effective network solutions.

• Selecting the most appropriate devices/vendors for network implementation.

• Implementing, testing and commissioning of data communication networks.

• Administrating firewalls and VPNs

• Implement and Troubleshoot Remote Access Solutions.

• Troubleshooting complex network problems and taking appropriate actions to recover with minimum disruption to the customer's business.

• Patching and/or upgrading network devices' software to address vulnerabilities and/or add new features.

• Support information security audits on company managed networks (including, but not limited to providing evidence and addressing auditor findings.)

• Support information security incident response.

• Create, maintain and update network documentation.

• Create and submit periodic network operations reports.

• Supervising junior network engineers responsible for network implementation, operations and management.

Requirements

Knowledge

· Excellent knowledge and understanding of Ethernet networking, the IEEE 802 standards and their usage in large-scale highly available enterprise and data center networks.

· Excellent knowledge and deep understanding of IP networking (IPv4 and IPv6) and associated protocols

· Very good understanding of 802 physical layer standards deployed in large data center setups and their limitations. (specifically 10, 25, 40, 100 and 400 Gbps)

· Excellent understanding of information security best practices and their application in protecting the public data centers.

· Excellent knowledge of network management technologies (SNMP, Wang, etc…) and best practices.

· Good understanding of QoS implementation in data communication networks.

Skills

• Excellent ability to configure network equipment using the CLI (Cisco, Aruba, Sophos, Fortigate, etc…)

• Excellent ability to troubleshoot network issues, identify root causes, select an issue resolution approach and implement the required network changes to resolve the identified issue.

• Ability to configure network management on a wide variety of network devices (SNMP traps, etc...).

• Ability to troubleshoot QoS issues.

• Excellent network design skills.

Experience

• A Minimum of 5 years experience in implementing and managing large-scale highly reliable networks.

• Minimum of 2 years experience in designing data center networks

• Minimum of 2 years of hands-on experience in configuring network security devices (firewalls, etc…)

• Hands-on experience in configuring any of the following is a plus:

◦ Cisco

◦ Juniper

◦ HPE/Aruba

◦ Extreme Networks

◦ Fortinet

◦ Sophos

◦ Forcepoint

Other Qualifications

B.Sc of Engineering or equivalent

Cisco, Fortinet, Sophos or other vendor specific certification is a plus.

About us