Role Summary
The Network Security Engineer will be responsible for managing, monitoring, and troubleshooting enterprise network infrastructure, including firewalls, switches, routers, and wireless systems. The role requires strong expertise in routing & switching, network security, and integration with enterprise services. The ideal candidate should be capable of operating in dynamic IT environments while adhering to structured processes and escalation protocols.
Key Responsibilities
Network Operations & Support
- Provide day-to-day operational support for enterprise network infrastructure across multiple locations.
- Understand and manage complete network topology, including LAN/WAN, VLANs, routing paths, and configurations.
- Deploy, configure, and maintain network devices including firewalls, routers, switches, and wireless infrastructure.
- Monitor network performance (bandwidth, uptime, device health, traffic patterns).
- Maintain inventory and lifecycle management of network assets.
Security & Compliance
- Configure and manage network security devices ensuring confidentiality, integrity, and availability.
- Implement segmentation, ACLs, intrusion prevention, and access control policies.
- Apply system hardening standards and ensure compliance with security benchmarks (e.g., STIGs).
- Monitor and analyze logs for security incidents and unusual activities.
- Enforce identity-based access control, authentication, and authorization mechanisms.
Troubleshooting & Incident Management
- Perform L1–L2 troubleshooting for connectivity, performance, and access issues.
- Diagnose network faults using logs, monitoring tools, and CLI-based analysis.
- Identify and resolve issues related to routing, switching, and access control.
- Handle hardware faults and ensure timely issue resolution through proper escalation.
Integration & Coordination
- Integrate network devices with enterprise services such as DNS, DHCP, AD, Syslog, SNMP, and NTP.
- Coordinate with ISPs, OEM vendors, and internal teams for issue resolution.
- Support secure remote access and site connectivity solutions (VPN, IPSEC, SSL VPN).
Process & Reporting
- Follow ITIL processes including incident, change, and problem management.
- Prepare reports on network availability, incidents, and performance trends.
- Maintain documentation, RCA reports, and technical presentations.
- Ensure adherence to escalation matrices and service desk coordination.
Infrastructure & Optimization
- Ensure high availability through redundancy, failover mechanisms, and resilient design.
- Perform upgrades, patching, and preventive maintenance activities.
- Support hybrid/cloud/on-prem data center environments.
- Use centralized monitoring and automation tools for performance tracking and configuration management.
Mandatory Technical Skills
- Routing & Switching: VLAN, STP, EtherChannel, SVI, OSPF, EIGRP, MPLS, FHRP, Static & Dynamic Routing
- Security: ACL, Wireshark, Nmap, AAA, SSH, IPSEC, GRE, VPN, SSL VPN
- Networking Concepts: LAN/WAN, SD-WAN, QoS, Ring/Bus/Hub/P2P/ILL Topologies
- Wireless: WLC, Access Points, 4G/5G, Meraki, Aruba
- Tools: Network diagramming (MS Visio)
Soft Skills
- Strong problem-solving and analytical skills
- Good communication and stakeholder management
- Ability to work independently and in teams
- Strong documentation and reporting skills
Eligibility Criteria
- Education: Bachelor’s Degree in Engineering/Technology or equivalent
- Experience: 5–8 years in enterprise network/security management
Preferred Qualifications
- Certifications such as CCNA, CompTIA Network+, or equivalent
- Exposure to automation tools and configuration management systems
Travel Requirements
- Willingness to travel across locations as required for project execution and coordination