Senior Network Security Engineer

We are seeking a skilled Network Engineer to design, deploy, configure, and maintain enterprise network infrastructure across LAN, WAN, WLAN, and data center environments. The ideal candidate will manage and troubleshoot a variety of network devices, implement security solutions, and ensure reliable, secure connectivity for branch offices, data centers, and remote users. This role requires hands-on experience with multiple network platforms and a strong focus on maintaining network performance, security, and business continuity.

Key Responsibilities

- Design, deploy, configure, and maintain enterprise networks including LAN, WAN, WLAN, and data center infrastructures.
- Configure, manage, and troubleshoot routers, switches, wireless access points, wireless LAN controllers, and network management platforms.
- Implement network security solutions such as next-generation firewalls, security policies, NAT, access control lists, and threat prevention mechanisms.
- Configure and manage site-to-site IPsec VPNs and remote-access VPNs to ensure secure connectivity across locations and remote users.
- Deploy and manage dynamic routing protocols including BGP and OSPF, VLANs, inter-VLAN routing, EtherChannels, link aggregation, and redundancy mechanisms.
- Administer firewall policies, optimize security rules, configure NAT, and analyze traffic flows to maintain secure communications.
- Manage firewall high availability (HA), failover, and redundancy configurations to support business continuity and minimize downtime.
- Monitor network performance, conduct fault isolation, perform root cause analysis, and resolve complex connectivity and security incidents.
- Execute network infrastructure migrations, upgrades, backups, software updates, and planned changes with minimal disruption.
- Implement secure network access and authentication mechanisms such as RADIUS, TACACS+, 802.1X, and integrate with Active Directory where applicable.
- Configure and troubleshoot enterprise wireless networks, including SSID management, authentication, dynamic VLAN assignment, roaming, and centralized wireless control.
- Maintain network security standards through access control enforcement, device hardening, firmware management, and vulnerability remediation.
- Develop and maintain comprehensive network documentation including design documents, diagrams, IP addressing schemes, configuration records, and operational procedures.
- Collaborate with vendors, technical support teams, and stakeholders to resolve complex network and security issues.
- Provide technical support for enterprise infrastructure, ensuring service availability, security compliance, and adherence to change management processes.
- Work with various network platforms such as Cisco, Huawei, Fortinet, Palo Alto, and Sangfor depending on the environment.

Required Qualifications

- Professional certifications such as CCNA, CCNP, or NSE-4 are mandatory.

This position offers an excellent opportunity to work in a dynamic environment with diverse network technologies and platforms, contributing to the secure and efficient operation of enterprise network infrastructure.